Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa
File: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (raw, json)
Hash identifier: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=
Subject key identifier: 86:2C:A8:4D:23:55:F1:69:45:70:0C:68:7E:B6:FF:DB:72:5D:67:00
Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial: 0788
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa
Signing time: Fri 14 Feb 2025 22:39:41 +0000
ROA not before: Fri 14 Feb 2025 22:39:41 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 4826
IP address blocks: 203.30.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911784E
Validity
Not Before: Feb 14 22:39:41 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67afc62d-684a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:a2:fa:84:f8:9e:0f:c9:04:fc:66:91:30:
e4:00:b9:6f:58:08:f0:ef:ec:cc:41:91:64:14:d2:
d3:4e:2b:8b:14:a0:fc:aa:b0:8e:6c:bb:e4:2c:b7:
87:74:e1:34:25:a3:db:8d:9b:3d:9a:ed:89:28:e6:
9d:b5:7a:2b:85:55:57:4e:ae:83:f1:ae:53:90:6a:
54:ef:d2:d3:ab:50:19:49:c2:fa:8b:ce:57:ab:70:
52:c2:6a:b9:fe:f9:44:fe:54:7d:1a:69:f2:e3:85:
95:4d:a2:23:b8:d6:57:96:9f:55:53:e9:69:b2:08:
67:0b:38:11:73:f3:5a:f1:a9:79:42:a9:29:38:15:
64:e4:ef:c4:66:26:db:34:06:71:e6:4b:37:31:d0:
6d:66:b8:30:d6:d1:91:8a:f0:51:da:17:82:e5:7f:
3a:4f:5f:32:e6:d9:c6:34:b5:ba:40:92:0b:46:c0:
36:62:7f:42:ac:a8:5f:5b:c0:74:7b:75:81:ac:61:
e8:d5:76:1f:9a:4e:5c:23:e0:ad:40:fc:d9:8f:67:
f8:df:e7:9a:ea:a0:8b:29:d8:4f:1e:d0:c8:85:c4:
ed:49:ee:68:bd:6d:a2:06:81:37:c3:b0:3f:1a:07:
c8:6e:a5:8c:88:4f:c5:80:b7:ee:30:e9:6b:e9:da:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2C:A8:4D:23:55:F1:69:45:70:0C:68:7E:B6:FF:DB:72:5D:67:00
X509v3 Authority Key Identifier:
keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.30.229.0/24
Signature Algorithm: sha256WithRSAEncryption
73:df:63:7a:e8:90:8b:2a:f4:d0:a5:ef:33:39:04:55:78:71:
c2:6c:d8:c3:67:01:bf:de:21:8f:f9:0a:8d:55:bf:5d:d8:80:
00:f7:37:b2:a3:b7:20:46:b4:02:e4:87:24:ff:7f:a6:75:21:
60:e9:e8:40:a4:ed:40:ba:a5:f1:3e:0d:04:bc:18:01:c8:e4:
9d:be:fe:11:e3:56:c1:a2:a1:10:7c:2c:31:63:24:ad:b3:e2:
4c:08:84:6c:8c:7c:2d:6f:2a:43:e9:79:bd:8f:8e:b3:58:ae:
c0:f2:33:2d:58:8a:1b:27:cd:2c:f8:83:d8:06:6b:29:ca:be:
55:81:0a:67:ad:43:39:52:6c:be:69:e4:b7:e9:0e:b4:36:27:
ca:28:d3:6b:6e:71:b1:56:15:4e:a2:71:bb:b0:ec:45:26:ae:
4b:b0:d6:85:fd:84:76:fb:94:0b:d3:8f:5a:70:c7:97:3f:6a:
eb:fa:4b:26:34:84:9f:b1:5d:0f:65:83:34:13:6d:73:2a:90:
aa:cc:05:87:5b:65:3a:81:38:b2:8f:0c:82:f1:60:7a:14:43:
32:33:cb:3b:f8:d0:dc:ce:ae:d8:26:8d:ce:e3:8f:68:8c:b6:
14:26:a8:64:b7:56:ce:67:85:e5:5d:6f:a8:1a:9c:76:6d:c2:
18:7a:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:25:02 2025 by rpki-client