Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/671CE4B2EF5911EFB8C93F62C4F9AE02.roa
File: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (raw, json)
Hash identifier: G+KGkA6ntZoSU6izS9Aco3EHQif4B2SP1cehoseXxzY=
Subject key identifier: AA:87:05:DE:11:9A:B9:3D:6E:14:F3:A5:E6:59:5C:52:19:AE:84:7B
Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial: 347B
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/671CE4B2EF5911EFB8C93F62C4F9AE02.roa
Signing time: Thu 20 Feb 2025 07:07:53 +0000
ROA not before: Thu 20 Feb 2025 07:07:53 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 58625
IP address blocks: 202.5.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13435 (0x347b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912142C
Validity
Not Before: Feb 20 07:07:53 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67b6d4c9-2d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:c0:8f:21:bd:be:07:e7:77:20:74:db:d9:
6b:15:69:a1:0c:ba:f6:db:94:b9:10:f1:4a:05:0d:
5b:ba:52:58:19:b2:9b:a1:9a:56:3b:2f:fb:c2:b4:
1b:53:ab:ac:bf:37:33:b0:1f:0a:c1:4c:18:05:d6:
be:49:f0:7b:31:3e:af:68:9f:65:6f:c7:90:fd:00:
9c:21:7f:b7:12:29:97:bc:06:91:db:cd:d6:a8:06:
e9:f5:9c:6c:5f:8a:b5:28:b7:01:ad:65:0f:cd:f4:
f5:df:15:ab:63:c0:82:a7:b6:d7:03:2d:40:c9:19:
fb:94:79:c0:4e:49:a7:6e:29:ba:44:e9:af:e9:1f:
8d:11:02:48:42:15:b0:ba:bf:69:58:6d:34:f1:4f:
ee:8b:91:2c:bb:8f:2c:54:0c:27:a1:e3:73:d0:78:
0e:79:dd:e1:2c:25:46:b7:b7:26:4f:ab:b8:f4:c2:
87:45:2f:09:cc:d0:7e:1c:bb:f5:a7:aa:d1:a9:ed:
a6:73:1c:f7:c7:d1:04:c1:c4:e1:51:e5:47:3b:e3:
64:fd:26:6b:3d:6b:dc:7b:00:0b:c3:d2:83:1f:8c:
f1:84:f4:01:59:9b:de:f5:21:03:fa:9d:1b:72:e6:
f4:bb:a7:63:8f:d2:21:ca:c4:fe:40:72:b4:6b:cc:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:05:DE:11:9A:B9:3D:6E:14:F3:A5:E6:59:5C:52:19:AE:84:7B
X509v3 Authority Key Identifier:
keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/671CE4B2EF5911EFB8C93F62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.5.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:50:3a:d4:31:19:20:e3:4b:2c:0a:26:c3:a5:c2:fc:e2:d4:
22:bb:42:ed:21:b1:c5:e5:81:4c:39:d6:ec:53:ef:dc:7a:7a:
11:01:8e:7b:b6:dd:28:d3:f3:ce:e3:81:3e:43:2a:a7:fa:bc:
17:96:b2:6b:38:ab:c8:b9:51:7b:1e:7d:2c:db:3a:85:77:03:
dd:8c:4f:d1:d3:64:96:4a:72:76:9e:8e:61:bd:9d:bc:75:14:
26:c1:e1:ce:0f:06:41:71:7d:7a:a7:67:f3:f1:63:ee:95:bf:
86:32:2c:4c:10:1d:20:3e:71:ff:eb:f0:db:48:25:9a:39:90:
60:1f:24:43:62:e3:4a:06:8d:c3:a7:77:8a:e2:aa:88:aa:ae:
5a:1f:0a:ab:2e:8a:86:dd:0e:6a:fa:d8:00:93:75:6f:e7:0f:
4c:23:09:cc:ca:78:4a:95:e3:ab:ac:20:04:7e:69:f3:06:d6:
9c:f6:14:21:9a:c1:1e:19:ca:e1:bf:12:15:b3:cb:af:db:d4:
67:78:3a:34:c3:9e:5c:ea:ae:6a:85:29:25:3c:66:b3:dd:91:
91:7c:12:5a:b2:10:e6:4c:e4:6d:95:7f:d7:a6:5c:5d:18:27:
e6:0f:07:a4:9a:00:11:88:5b:aa:42:13:a9:d4:0e:c7:3d:99:
25:a3:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:43:52 2025 by rpki-client