Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/BF5E8C2EAA2311EE99AD8C6CC4F9AE02.roa
File: BF5E8C2EAA2311EE99AD8C6CC4F9AE02.roa (raw, json)
Hash identifier: 7w72c/fFbHuZ3viCxxqIgz50QjPnvx2kMwbqnkw0qtE=
Subject key identifier: 76:B1:3F:96:68:E7:C4:A9:BB:62:50:A2:F3:F5:C4:66:11:E9:FF:87
Certificate issuer: /CN=A917EA0F/serialNumber=B6A07A52DDDA2E139D1D1B265686D6CEB1B65D4E
Certificate serial: 06B6
Authority key identifier: B6:A0:7A:52:DD:DA:2E:13:9D:1D:1B:26:56:86:D6:CE:B1:B6:5D:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqB6Ut3aLhOdHRsmVobWzrG2XU4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/BF5E8C2EAA2311EE99AD8C6CC4F9AE02.roa
Signing time: Wed 03 Jan 2024 10:35:00 +0000
ROA not before: Wed 03 Jan 2024 10:35:00 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 55699
IP address blocks: 45.127.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EA0F, serialNumber=B6A07A52DDDA2E139D1D1B265686D6CEB1B65D4E
Validity
Not Before: Jan 3 10:35:00 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65953854-74a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:71:0b:1a:21:da:0f:77:dc:37:9d:f7:28:
af:4c:d3:29:43:0c:52:e1:77:d9:e2:62:72:9a:03:
18:56:06:6f:f9:2d:11:cd:7d:1e:7c:de:61:7f:97:
cb:3b:aa:b1:a4:be:b3:80:6b:c7:8d:3b:18:3b:cb:
eb:3d:fc:da:f3:c9:ea:86:ff:73:d7:84:00:bc:43:
57:54:8d:ab:c4:36:52:1b:fc:3e:18:b1:2f:cd:e7:
64:66:c1:6f:de:0c:38:7e:3e:ac:f8:11:58:bc:fa:
5f:14:3e:44:aa:45:87:a1:45:ff:14:98:d3:84:08:
c8:9d:0a:7d:07:2d:1f:d1:46:e7:59:fd:f9:0c:ae:
5f:12:1b:cd:b8:cf:b3:66:90:0a:33:1d:7e:8d:7d:
52:21:1d:23:56:45:bc:d2:20:9e:d8:56:4b:87:ca:
b8:93:e5:4d:ca:00:3d:43:fc:a8:d5:fa:32:b2:af:
fe:fb:95:2f:dc:c2:eb:40:62:6b:93:69:87:60:73:
04:92:32:64:e5:61:21:10:a3:b8:3d:d7:b0:6a:04:
85:3c:d8:bd:28:a9:c5:7e:35:4d:eb:a1:b7:66:35:
af:1e:0a:9d:7b:d3:ed:2a:d7:7e:ae:44:fb:37:2e:
59:d4:41:19:04:4d:d1:2b:3b:d0:fc:76:73:91:ed:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B1:3F:96:68:E7:C4:A9:BB:62:50:A2:F3:F5:C4:66:11:E9:FF:87
X509v3 Authority Key Identifier:
keyid:B6:A0:7A:52:DD:DA:2E:13:9D:1D:1B:26:56:86:D6:CE:B1:B6:5D:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/tqB6Ut3aLhOdHRsmVobWzrG2XU4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqB6Ut3aLhOdHRsmVobWzrG2XU4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/BF5E8C2EAA2311EE99AD8C6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:d2:b8:f2:25:9e:7c:3e:12:89:26:3f:4e:a3:46:d7:ad:31:
2b:8b:40:6e:cb:b4:0a:fc:a8:35:3c:35:5a:57:cd:8c:c1:1f:
68:84:be:42:cc:0c:eb:28:9f:f1:09:6c:e3:7b:e5:51:bf:18:
52:a2:cc:76:31:6d:15:6e:53:45:17:2c:52:d7:44:88:0c:30:
d3:80:d5:4a:c5:e1:25:3e:a9:e8:d2:76:94:82:c3:e2:dc:9e:
a9:c5:37:cc:02:d2:be:10:fe:35:44:3c:a9:9e:2d:65:b8:e1:
a5:27:dd:d6:da:f1:54:a0:2f:17:a7:71:e6:ad:76:83:29:d0:
14:24:59:9d:fb:5d:3d:3e:27:62:f8:8d:92:32:1e:e7:cc:f5:
f2:c8:18:a4:c8:d3:9e:a7:01:33:af:ac:a2:fe:fe:22:40:9c:
0a:09:cb:e5:1b:fb:59:77:6c:51:52:aa:5f:a7:78:f2:ce:96:
ce:4f:6e:3b:c5:57:da:2f:f1:50:f5:d1:50:f3:36:d7:2d:05:
09:ba:67:ec:ad:18:e4:98:22:ab:4f:30:c7:55:c6:80:a5:0f:
1c:f3:63:3f:97:3b:38:64:b9:5b:35:e2:40:88:f2:51:1e:e6:
62:a8:aa:4e:57:e3:e8:9b:0d:64:8d:da:3e:92:76:e8:09:a7:
73:9a:db:f1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VBMEYxMTAvBgNVBAUTKEI2QTA3QTUyREREQTJFMTM5RDFEMUIyNjU2ODZENkNF
QjFCNjVENEUwHhcNMjQwMTAzMTAzNTAwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTk1Mzg1NC03NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1NxCxoh2g933Ded9yivTNMpQwxS4XfZ4mJymgMYVgZv+S0RzX0efN5hf5fL
O6qxpL6zgGvHjTsYO8vrPfza88nqhv9z14QAvENXVI2rxDZSG/w+GLEvzedkZsFv
3gw4fj6s+BFYvPpfFD5EqkWHoUX/FJjThAjInQp9By0f0UbnWf35DK5fEhvNuM+z
ZpAKMx1+jX1SIR0jVkW80iCe2FZLh8q4k+VNygA9Q/yo1foysq/++5Uv3MLrQGJr
k2mHYHMEkjJk5WEhEKO4PdewagSFPNi9KKnFfjVN66G3ZjWvHgqde9PtKtd+rkT7
Ny5Z1EEZBE3RKzvQ/HZzke1/9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHaxP5Zo
58Spu2JQovP1xGYR6f+HMB8GA1UdIwQYMBaAFLagelLd2i4TnR0bJlaG1s6xtl1O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUEwRi8zMEM0NkMzMkZD
QjUxMUVBODJCNUVDMEJDNEY5QUUwMi90cUI2VXQzYUxoT2RIUnNtVm9iV3pyRzJY
VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RxQjZVdDNhTGhPZEhSc21Wb2JXenJHMlhVNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VBMEYvMzBDNDZDMzJGQ0I1MTFFQTgyQjVFQzBCQzRGOUFFMDIvQkY1RThDMkVB
QTIzMTFFRTk5QUQ4QzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItf8wwDQYJKoZIhvcNAQELBQADggEBALjSuPIlnnw+Eokm
P06jRtetMSuLQG7LtAr8qDU8NVpXzYzBH2iEvkLMDOson/EJbON75VG/GFKizHYx
bRVuU0UXLFLXRIgMMNOA1UrF4SU+qejSdpSCw+LcnqnFN8wC0r4Q/jVEPKmeLWW4
4aUn3dba8VSgLxenceatdoMp0BQkWZ37XT0+J2L4jZIyHufM9fLIGKTI056nATOv
rKL+/iJAnAoJy+Ub+1l3bFFSql+nePLOls5PbjvFV9ov8VD10VDzNtctBQm6Z+yt
GOSYIqtPMMdVxoClDxzzYz+XOzhkuVs14kCI8lEe5mKoqk5X4+ibDWSN2j6SdugJ
p3Oa2/E=
-----END CERTIFICATE-----
Generated at Thu May 15 17:04:35 2025 by rpki-client