Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/C45A0E88946F11EF828F9F2FC4F9AE02.roa
File: C45A0E88946F11EF828F9F2FC4F9AE02.roa (raw, json)
Hash identifier: R9VMlUyi7ijl7wH5gzOFI9plU+mGlCtCjfMihQchhxA=
Subject key identifier: AF:3B:CF:8D:98:D4:CF:48:A5:37:50:CB:2F:5B:EA:35:AF:5B:BF:17
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3592
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/C45A0E88946F11EF828F9F2FC4F9AE02.roa
Signing time: Sun 27 Oct 2024 14:28:43 +0000
ROA not before: Sun 27 Oct 2024 14:28:43 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 175.29.22.0/23 maxlen: 24
175.29.32.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13714 (0x3592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 27 14:28:43 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671e4e1b-8ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:31:05:95:a3:f8:c1:a7:37:d5:8d:74:64:
91:b0:3d:6a:24:1d:9b:41:08:1e:87:9a:ae:30:d2:
79:29:31:df:73:c8:d1:3f:74:66:7c:5c:21:5d:ce:
a5:87:85:d3:c0:f3:dd:b6:fb:cf:0b:af:06:ee:32:
fb:e9:b2:b6:3f:b7:5e:f5:b1:cd:a6:a6:d2:8e:0b:
52:25:1a:d1:34:b0:65:07:43:4a:a0:17:e2:9a:99:
8e:8f:a4:0c:78:df:b3:bf:43:ef:a0:8a:79:a7:30:
16:7d:9c:6d:70:66:4e:bd:fe:fc:07:af:83:62:5c:
3f:c4:ac:70:7d:db:96:68:05:d4:34:94:8e:1d:bf:
2b:b0:c2:69:37:d1:68:96:30:c0:4d:41:a7:c4:b9:
21:bc:17:59:16:01:69:db:b4:ec:a1:e2:50:9a:2a:
07:1a:2c:9a:b8:0f:ac:36:3d:25:9e:92:14:a9:4f:
04:da:22:7a:e5:ef:4e:31:87:75:27:4b:71:45:fd:
d4:da:a1:bf:de:e0:e7:22:b6:3a:ba:0d:e7:08:41:
9b:cb:5f:58:6d:fc:78:9e:2f:b2:92:ea:c3:60:3a:
6f:4a:c1:94:bc:50:ee:72:43:76:e2:fe:e2:ee:7c:
be:82:25:c9:cd:97:f4:61:34:96:55:39:9e:51:0a:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:CF:8D:98:D4:CF:48:A5:37:50:CB:2F:5B:EA:35:AF:5B:BF:17
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/C45A0E88946F11EF828F9F2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.22.0/23
175.29.32.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e0:92:5c:89:97:76:a9:a8:dd:1c:c1:47:49:90:21:e2:3d:
55:dc:ad:3e:9f:01:9a:35:93:49:2a:5a:4d:d5:37:96:ff:19:
43:70:75:f5:e3:37:25:4e:6b:9c:2f:c1:af:ab:24:22:3b:5e:
9a:17:64:2c:6f:78:02:37:04:e8:e0:75:c4:63:ce:0f:d0:43:
85:68:e7:a0:3a:e0:68:c2:f0:15:66:d5:a2:0e:70:e4:b2:63:
dc:f8:d6:cd:bc:27:72:fd:a1:13:44:72:c2:d0:21:8d:17:66:
02:01:88:2a:01:88:6f:93:17:7c:6a:f7:1c:b2:65:69:4f:17:
d6:53:92:3b:17:89:6d:b7:03:e6:96:93:c0:8f:5c:4a:e6:e7:
d3:c8:c9:79:84:46:e0:d5:8a:aa:70:fa:92:ed:83:b1:ba:a9:
ec:ed:02:73:6c:92:e0:7e:e9:ce:f6:f4:6f:f8:bf:38:93:a5:
0f:5a:a2:31:f4:e2:fb:e2:d2:02:0c:bd:fd:ca:22:f3:d8:28:
d5:d0:57:9f:b0:b5:b6:5d:8e:48:0d:d9:31:c3:04:b9:a6:af:
6d:98:65:f6:64:b3:9e:83:e9:3b:05:3d:ef:7a:a9:7d:fa:d0:
a7:80:3d:9b:13:9b:b3:71:76:9f:27:83:3c:25:47:af:f7:de:
32:41:92:ee
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjQxMDI3MTQyODQzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFlNGUxYi04ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3oxBZWj+MGnN9WNdGSRsD1qJB2bQQgeh5quMNJ5KTHfc8jRP3RmfFwhXc6l
h4XTwPPdtvvPC68G7jL76bK2P7de9bHNpqbSjgtSJRrRNLBlB0NKoBfimpmOj6QM
eN+zv0PvoIp5pzAWfZxtcGZOvf78B6+DYlw/xKxwfduWaAXUNJSOHb8rsMJpN9Fo
ljDATUGnxLkhvBdZFgFp27TsoeJQmioHGiyauA+sNj0lnpIUqU8E2iJ65e9OMYd1
J0txRf3U2qG/3uDnIrY6ug3nCEGby19Ybfx4ni+ykurDYDpvSsGUvFDuckN24v7i
7ny+giXJzZf0YTSWVTmeUQqNPQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFK87z42Y
1M9IpTdQyy9b6jWvW78XMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvQzQ1QTBFODg5
NDZGMTFFRjgyOEY5RjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAGvHRYDBACvHSAwDQYJKoZIhvcNAQELBQADggEBAJXgklyJ
l3apqN0cwUdJkCHiPVXcrT6fAZo1k0kqWk3VN5b/GUNwdfXjNyVOa5wvwa+rJCI7
XpoXZCxveAI3BOjgdcRjzg/QQ4Vo56A64GjC8BVm1aIOcOSyY9z41s28J3L9oRNE
csLQIY0XZgIBiCoBiG+TF3xq9xyyZWlPF9ZTkjsXiW23A+aWk8CPXErm59PIyXmE
RuDViqpw+pLtg7G6qeztAnNskuB+6c729G/4vziTpQ9aojH04vvi0gIMvf3KIvPY
KNXQV5+wtbZdjkgN2THDBLmmr22YZfZks56D6TsFPe96qX360KeAPZsTm7Nxdp8n
gzwlR6/33jJBku4=
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:31:20 2024 by rpki-client on console.sobornost.net