Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
File: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (raw, json)
Hash identifier: jSX8BBXcDhKRO02h61flDcL9PRKVJzf27mu274wCdhk=
Subject key identifier: F6:D3:57:C5:55:1D:2D:C0:F2:56:B2:9B:D7:12:97:43:09:48:73:4A
Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Certificate serial: F6
Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
Signing time: Fri 03 Jan 2025 03:47:13 +0000
ROA not before: Fri 03 Jan 2025 03:47:13 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138015
IP address blocks: 203.57.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C9E8
Validity
Not Before: Jan 3 03:47:13 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67775dc1-6c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:ee:73:f9:94:c5:a0:91:35:e0:7c:3e:16:
a9:af:59:4a:e2:49:60:5d:fa:46:3a:6d:04:ae:a3:
37:d4:4a:42:34:c0:b0:bc:2c:f9:ac:6c:04:40:34:
ea:2e:24:c6:d9:cd:a6:60:be:a5:cd:2b:d7:26:22:
85:81:13:60:be:12:3a:c7:ee:3a:f2:2e:0c:02:ac:
66:f1:d2:fd:83:16:96:92:38:73:4f:04:8b:6b:8f:
4c:ae:e6:ef:7d:85:d1:dc:15:64:bb:b0:21:10:a8:
f1:0f:5e:9e:69:fc:d5:0a:07:63:b4:0b:13:d8:a6:
ba:b9:f5:26:47:6f:2a:41:ef:b6:ca:f4:0b:a0:05:
a6:8e:b0:e8:ad:c0:10:d9:a2:96:2a:ef:67:a7:85:
f0:e1:55:5c:22:f0:93:de:4b:ab:1c:85:a1:df:cf:
f4:06:72:44:c9:17:f3:84:fc:87:b8:a0:6e:4f:0d:
6f:09:e1:59:5d:f1:c4:a9:b3:f7:1c:ee:5d:58:e3:
63:e2:00:d7:24:47:34:31:77:a7:17:40:9d:71:fa:
cc:c4:54:4e:6e:28:82:96:df:fd:35:4a:05:4e:95:
06:f0:f7:dd:d6:8d:33:87:eb:59:a8:8f:43:ff:e6:
bc:ae:2a:e6:cd:f2:2c:d0:51:d0:d8:48:31:bc:23:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D3:57:C5:55:1D:2D:C0:F2:56:B2:9B:D7:12:97:43:09:48:73:4A
X509v3 Authority Key Identifier:
keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.57.29.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b3:b4:64:5b:e8:fe:02:4b:2a:71:fa:44:75:6d:df:7e:23:
73:2b:8e:73:3a:e6:11:43:17:31:f6:bb:80:bf:17:c8:64:d8:
25:07:db:08:ff:92:ef:60:75:4f:9d:01:71:dc:77:9f:07:a6:
3f:0e:2a:ca:04:7a:c2:91:4d:00:16:4f:3e:5b:7f:55:ad:75:
a5:d6:11:dd:12:a1:9b:9d:d7:34:37:7f:22:75:ec:47:5d:36:
5b:17:4f:d8:63:82:70:94:59:76:43:56:7a:06:3f:77:b2:fe:
16:a8:61:1a:6d:42:d4:8f:e2:c5:65:c7:ff:c3:2a:e2:4e:7e:
3e:16:cf:66:65:ff:13:dd:c4:21:a3:29:2c:8a:ed:24:8d:b4:
f9:ba:7b:b4:88:55:b8:5b:df:b6:17:3a:1a:f4:4a:a8:b8:c6:
73:79:ac:25:23:99:a8:88:b0:6e:37:c3:a1:c5:c4:e2:62:44:
6a:b1:5f:7b:ea:f1:b9:d2:4e:82:29:17:d1:d4:59:ab:72:e5:
6e:b5:bc:e2:30:1b:fd:33:37:c6:b3:c7:23:2e:cc:fa:37:94:
3b:fc:99:59:38:72:d6:e4:51:14:e5:68:70:10:b9:18:d0:bb:
a6:b5:e0:d6:a8:12:28:d8:03:ae:3c:aa:82:f0:08:50:2b:c3:
14:80:03:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:26 2025 by rpki-client