Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E07C4E34914011EDABD5F778C4F9AE02.roa
File: E07C4E34914011EDABD5F778C4F9AE02.roa (raw, json)
Hash identifier: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=
Subject key identifier: 47:34:01:5A:6F:C2:C0:61:B1:55:E8:1B:C1:D4:E2:61:0D:F2:40:72
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0197
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E07C4E34914011EDABD5F778C4F9AE02.roa
Signing time: Fri 13 Dec 2024 02:36:16 +0000
ROA not before: Fri 13 Dec 2024 02:36:16 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137395
IP address blocks: 203.214.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6
Validity
Not Before: Dec 13 02:36:16 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675b9d9f-fd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:58:08:c0:27:a6:0d:f8:0a:56:47:c0:91:
57:98:84:33:db:42:c9:0e:ff:e1:82:cd:a0:0d:60:
2b:83:09:bd:a8:4f:81:32:a8:d7:83:6e:a1:90:c0:
73:30:55:80:1f:49:d5:62:e9:f2:65:aa:e7:f7:3d:
31:1c:0d:1d:21:34:4b:a8:2c:c0:17:ae:f6:fb:bf:
a6:6f:22:80:22:b6:06:db:a9:57:27:e9:53:12:c5:
6c:bd:d4:5f:82:b0:eb:5a:03:41:76:f4:7d:a8:cb:
69:4d:a3:e0:33:68:b7:06:8b:86:95:d2:81:91:b9:
1e:38:de:69:28:7e:84:90:5e:08:5b:63:3c:c2:00:
7e:ed:61:ee:92:58:62:06:c7:7a:50:ba:a9:ad:e6:
9e:a9:a2:0f:b5:18:c1:50:54:f8:3b:01:7a:ad:8b:
26:e9:aa:d0:96:a6:3a:e2:f4:a4:bd:0c:d1:87:f3:
3a:ef:06:45:93:ab:5b:11:84:54:36:a2:a8:e0:02:
02:85:7c:8d:2b:14:69:80:08:c2:e0:b3:b8:c7:7a:
31:cf:f1:50:3b:42:a5:73:3d:78:ce:c5:83:f8:1d:
36:84:b0:b2:1b:c8:be:78:b3:5e:68:1b:f1:a9:99:
97:f2:74:28:cd:b0:63:e5:76:30:cd:71:7e:dd:a7:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:01:5A:6F:C2:C0:61:B1:55:E8:1B:C1:D4:E2:61:0D:F2:40:72
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E07C4E34914011EDABD5F778C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.214.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b2:80:63:a4:f6:57:f4:8f:04:84:db:15:40:ba:86:9d:d6:
61:89:bc:dd:09:22:a9:ab:1d:a8:61:61:1e:74:b7:cd:3f:9b:
87:b9:ba:03:32:97:4b:4a:08:62:d8:a8:38:00:8d:d5:6e:48:
be:d2:1f:37:a2:d5:8f:d1:e5:b0:e9:80:f6:94:29:bc:d5:f4:
4e:93:d8:2c:4f:4e:10:92:17:c0:e8:da:af:53:11:30:88:30:
ce:e2:1a:93:43:d3:08:7c:f4:f8:b6:43:f2:e4:cc:69:9a:2a:
29:c7:4f:ab:b4:ec:6d:9b:ae:5e:61:19:51:c9:8f:05:fe:2d:
4c:e3:48:75:39:c6:b7:1c:e0:0b:0c:68:3d:1c:1c:43:98:8e:
d9:c7:6e:87:ba:f4:c4:f1:21:7c:6d:52:bf:16:1a:e7:b4:89:
39:d1:a5:f9:6b:f6:29:7d:59:23:f0:bb:3e:28:16:45:d5:63:
bd:39:7f:0d:db:d2:92:8d:77:a7:1a:8a:51:90:70:68:1b:ba:
e7:ac:eb:b0:43:73:7c:b9:22:6d:8c:89:66:6d:16:6d:10:a7:
0e:4b:3c:da:58:c8:62:67:0b:24:c4:99:2c:a2:1f:ad:18:19:
c0:81:5e:8f:b2:24:d3:35:03:cb:0d:bf:31:45:c3:e1:ef:4c:
6c:d2:4a:c3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC
MThCODAzNUMwHhcNMjQxMjEzMDIzNjE2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzViOWQ5Zi1mZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1i9YCMAnpg34ClZHwJFXmIQz20LJDv/hgs2gDWArgwm9qE+BMqjXg26hkMBz
MFWAH0nVYunyZarn9z0xHA0dITRLqCzAF672+7+mbyKAIrYG26lXJ+lTEsVsvdRf
grDrWgNBdvR9qMtpTaPgM2i3BouGldKBkbkeON5pKH6EkF4IW2M8wgB+7WHuklhi
Bsd6ULqpreaeqaIPtRjBUFT4OwF6rYsm6arQlqY64vSkvQzRh/M67wZFk6tbEYRU
NqKo4AIChXyNKxRpgAjC4LO4x3oxz/FQO0Klcz14zsWD+B02hLCyG8i+eLNeaBvx
qZmX8nQozbBj5XYwzXF+3acqDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEc0AVpv
wsBhsVXoG8HU4mEN8kByMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG
RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvRTA3QzRFMzQ5
MTQwMTFFREFCRDVGNzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADL1qUwDQYJKoZIhvcNAQELBQADggEBAJ+ygGOk9lf0jwSE
2xVAuoad1mGJvN0JIqmrHahhYR50t80/m4e5ugMyl0tKCGLYqDgAjdVuSL7SHzei
1Y/R5bDpgPaUKbzV9E6T2CxPThCSF8Do2q9TETCIMM7iGpND0wh89Pi2Q/LkzGma
KinHT6u07G2brl5hGVHJjwX+LUzjSHU5xrcc4AsMaD0cHEOYjtnHboe69MTxIXxt
Ur8WGue0iTnRpflr9il9WSPwuz4oFkXVY705fw3b0pKNd6cailGQcGgbuues67BD
c3y5Im2MiWZtFm0Qpw5LPNpYyGJnCyTEmSyiH60YGcCBXo+yJNM1A8sNvzFFw+Hv
TGzSSsM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:45 2025 by rpki-client