Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/24F67F3603E911F0B8682E82C4F9AE02.roa
File: 24F67F3603E911F0B8682E82C4F9AE02.roa (raw, json)
Hash identifier: 1Apev79MViXEiMRTTh1EsJxhsJrFSBtpIh/uInehmhw=
Subject key identifier: F9:39:01:C2:6A:82:A0:84:92:7A:36:87:CB:1D:BB:CD:2D:D3:81:5E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 24C6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/24F67F3603E911F0B8682E82C4F9AE02.roa
Signing time: Tue 18 Mar 2025 11:07:13 +0000
ROA not before: Tue 18 Mar 2025 11:07:13 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 15083
IP address blocks: 115.167.8.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9414 (0x24c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Mar 18 11:07:13 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67d953e1-2011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:7b:76:aa:4f:82:ed:b9:d2:ee:30:7a:4b:
19:1f:02:4f:5a:7e:35:c7:02:a2:58:52:23:c6:5c:
3e:7b:83:32:0e:d2:49:a6:54:e0:dc:db:5d:41:cb:
72:58:53:1f:48:4f:47:77:a0:68:f9:88:3d:db:2c:
76:ea:01:b9:f7:01:c6:e9:1f:71:1b:e5:69:44:a9:
1d:63:6e:21:e6:28:e7:b9:f5:86:b1:49:c9:7a:d0:
8d:ab:ab:82:7d:0f:10:01:bf:e9:f2:e7:c6:65:2d:
8f:73:07:33:a2:d1:62:ab:03:f6:a9:56:f0:64:ea:
7e:05:d8:d5:18:78:1b:5c:bd:74:15:b6:f0:18:10:
a3:0c:de:0b:e8:d4:1e:fd:b3:43:8b:9c:9d:2e:20:
47:f5:69:fc:ec:95:e5:e4:f4:b0:13:9e:54:ae:09:
8b:d6:ea:1b:d2:75:63:80:43:50:5b:a8:d9:e4:ec:
08:36:17:9a:d5:df:2a:03:a9:a3:f3:83:9c:77:e8:
75:fe:bc:ff:5c:1f:a9:31:c5:ef:5d:96:4a:a6:4e:
f0:2e:33:78:76:96:5f:b4:68:2a:54:3f:cf:d3:92:
fc:01:7f:6e:c0:8f:22:f4:f8:05:a8:4f:0e:ed:47:
02:2b:af:da:53:22:dd:ee:d2:95:86:e6:95:bc:58:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:01:C2:6A:82:A0:84:92:7A:36:87:CB:1D:BB:CD:2D:D3:81:5E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/24F67F3603E911F0B8682E82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.8.0/24
115.167.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:0f:9c:41:71:02:7e:73:36:78:9c:52:a4:ae:79:12:ea:0c:
cc:b3:fb:0e:e9:b4:6a:49:ad:25:33:eb:6c:d2:bc:e7:88:74:
e4:15:e0:1d:5c:0e:a0:d4:72:54:90:9b:78:21:25:7c:1d:35:
fb:01:98:81:be:a7:60:d4:de:40:f4:9a:59:91:5b:ff:05:57:
87:40:a7:0c:4e:1e:00:9a:86:eb:1a:24:61:46:f7:9e:2f:56:
6a:33:6a:71:14:60:ca:fb:ef:56:e6:f1:eb:c0:50:93:7a:c6:
ae:05:78:54:ff:5f:3a:ed:65:c5:99:a9:0c:98:66:b9:70:d1:
3e:a1:f8:28:e5:a4:d8:e0:f9:a7:c0:f8:eb:90:83:d3:43:fb:
31:66:a8:12:10:c2:de:82:06:8b:0f:a8:07:86:18:77:a7:fe:
44:9f:1c:8c:2c:66:bc:9e:3c:cc:8a:c0:5e:64:6e:b8:0f:2a:
b0:69:e0:ef:94:67:4f:27:15:39:be:10:27:f7:a0:81:49:d7:
77:e7:da:02:e2:cc:d6:4b:88:85:49:76:4e:54:50:fd:8c:00:
51:27:b5:9a:d3:2e:f5:02:e2:17:a6:5a:aa:d8:d5:bd:9e:43:
69:4b:8f:16:d7:ab:24:cc:3e:20:a7:51:5f:da:00:69:cb:06:
d7:30:e5:97
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICJMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwMzE4MTEwNzEzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Q5NTNlMS0yMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAobt7dqpPgu250u4weksZHwJPWn41xwKiWFIjxlw+e4MyDtJJplTg3NtdQcty
WFMfSE9Hd6Bo+Yg92yx26gG59wHG6R9xG+VpRKkdY24h5ijnufWGsUnJetCNq6uC
fQ8QAb/p8ufGZS2PcwczotFiqwP2qVbwZOp+BdjVGHgbXL10FbbwGBCjDN4L6NQe
/bNDi5ydLiBH9Wn87JXl5PSwE55UrgmL1uob0nVjgENQW6jZ5OwINhea1d8qA6mj
84Ocd+h1/rz/XB+pMcXvXZZKpk7wLjN4dpZftGgqVD/P05L8AX9uwI8i9PgFqE8O
7UcCK6/aUyLd7tKVhuaVvFhvkwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPk5AcJq
gqCEkno2h8sdu80t04FeMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjRGNjdGMzYw
M0U5MTFGMEI4NjgyRTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABzpwgDBABzpwswDQYJKoZIhvcNAQELBQADggEBALcPnEFx
An5zNnicUqSueRLqDMyz+w7ptGpJrSUz62zSvOeIdOQV4B1cDqDUclSQm3ghJXwd
NfsBmIG+p2DU3kD0mlmRW/8FV4dApwxOHgCahusaJGFG954vVmozanEUYMr771bm
8evAUJN6xq4FeFT/XzrtZcWZqQyYZrlw0T6h+CjlpNjg+afA+OuQg9ND+zFmqBIQ
wt6CBosPqAeGGHen/kSfHIwsZryePMyKwF5kbrgPKrBp4O+UZ08nFTm+ECf3oIFJ
13fn2gLizNZLiIVJdk5UUP2MAFEntZrTLvUC4hemWqrY1b2eQ2lLjxbXqyTMPiCn
UV/aAGnLBtcw5Zc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:19:02 2025 by rpki-client