Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa
File: E1C173F01EFD11EE88E45C83C4F9AE02.roa (raw, json)
Hash identifier: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=
Subject key identifier: 50:9E:3E:34:F8:18:31:D7:32:4E:EC:2A:02:88:46:2A:46:10:44:0B
Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial: 0165
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa
Signing time: Fri 03 Jan 2025 02:46:25 +0000
ROA not before: Fri 03 Jan 2025 02:46:25 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9328
IP address blocks: 202.0.108.0/24 maxlen: 24
202.2.0.0/22 maxlen: 22
203.7.130.0/23 maxlen: 23
203.26.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15
Validity
Not Before: Jan 3 02:46:25 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67774f80-df54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9d:af:a2:be:7b:92:41:16:22:77:33:d9:5e:
6e:63:e1:75:7a:38:c5:a6:15:d9:b5:b7:84:c4:38:
68:3d:87:fb:c6:a9:0b:35:41:91:a1:bb:fa:dd:22:
d5:e8:f2:c7:ef:72:23:3e:ef:fd:d6:c5:e3:1e:df:
24:e1:8b:d8:5e:b4:4a:a0:bc:ce:ff:61:38:d6:aa:
22:c7:df:30:34:8d:15:96:58:ed:58:44:a2:94:c2:
87:1b:8f:26:c6:2a:0f:a0:83:9c:12:3e:65:3d:b0:
d8:e2:ed:00:ef:bb:b1:f1:63:5e:fa:c3:3b:d0:b6:
94:4d:eb:d7:a9:9c:6b:13:db:1f:bf:9a:79:61:bb:
32:4b:d2:17:1a:8b:fb:1c:f5:a6:62:87:f0:04:04:
d0:ef:60:68:9f:22:4b:d4:15:14:98:52:25:be:d7:
14:38:7f:0f:9f:ff:0e:16:58:9c:89:72:9e:2a:66:
26:24:69:74:ba:b7:34:cd:6e:c2:7b:bb:d7:21:97:
8b:bc:7d:f7:a1:90:b6:7b:e7:b9:9d:0e:8c:bc:a6:
04:c8:3f:58:0a:f6:04:12:13:74:53:d3:71:14:a2:
4e:ad:9b:db:01:01:3f:92:64:74:6f:18:87:a5:d5:
92:92:e5:7f:28:5a:25:2f:bc:91:db:b4:af:33:dc:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:3E:34:F8:18:31:D7:32:4E:EC:2A:02:88:46:2A:46:10:44:0B
X509v3 Authority Key Identifier:
keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.0.108.0/24
202.2.0.0/22
203.7.130.0/23
203.26.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:77:c4:da:83:bc:6c:c6:50:b3:18:72:ab:bd:7b:0b:1b:90:
4f:71:77:32:37:6f:3f:66:b6:02:0b:0c:a5:10:8c:15:f0:3a:
9b:cc:65:d3:95:80:af:07:fe:c4:ec:5b:a5:f6:df:4e:d7:26:
bd:a8:8e:ea:44:3c:84:12:ef:b8:aa:86:d9:12:a2:aa:f2:4c:
9f:ea:f8:04:7f:56:5b:af:90:aa:5a:63:38:98:47:60:a3:88:
ca:11:07:56:1b:30:a4:5a:ac:03:0d:e1:0d:f2:b5:98:39:28:
44:8e:00:db:a2:e2:66:17:66:87:ef:bb:51:f0:a6:79:01:d8:
76:bb:b3:b1:8f:ca:ab:af:7d:2a:08:9b:7f:07:b7:2c:27:96:
fd:7e:0c:12:5e:f0:96:91:97:f7:c8:04:9f:5d:1d:68:b5:a4:
4b:b0:ca:6e:1b:6d:94:3e:b3:9c:44:c9:ba:4d:42:89:3e:bf:
02:6d:f1:0f:f1:00:43:42:c9:6d:cb:6c:38:da:c9:10:47:40:
f8:53:a4:73:a0:af:5d:65:c0:80:32:53:6f:94:1b:7a:02:f9:
ae:c2:87:71:28:b9:cb:1c:95:e4:36:67:0c:96:88:96:18:b2:
e8:0e:eb:15:e6:e9:ca:b3:3a:f5:a8:a9:2e:aa:2c:de:48:e4:
5a:98:a8:cc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy
MDFFQTY0MzQwHhcNMjUwMTAzMDI0NjI1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc3NGY4MC1kZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8p2vor57kkEWIncz2V5uY+F1ejjFphXZtbeExDhoPYf7xqkLNUGRobv63SLV
6PLH73IjPu/91sXjHt8k4YvYXrRKoLzO/2E41qoix98wNI0VlljtWESilMKHG48m
xioPoIOcEj5lPbDY4u0A77ux8WNe+sM70LaUTevXqZxrE9sfv5p5YbsyS9IXGov7
HPWmYofwBATQ72BonyJL1BUUmFIlvtcUOH8Pn/8OFliciXKeKmYmJGl0urc0zW7C
e7vXIZeLvH33oZC2e+e5nQ6MvKYEyD9YCvYEEhN0U9NxFKJOrZvbAQE/kmR0bxiH
pdWSkuV/KFolL7yR27SvM9wI1QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFCePjT4
GDHXMk7sKgKIRipGEEQLMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND
NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa
RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkREMTUvQzc2MUEwQUFDQzUyMTFFREE4MjkxRDEwQzRGOUFFMDIvRTFDMTczRjAx
RUZEMTFFRTg4RTQ1QzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBADKAGwDBALKAgADBAHLB4IDBADLGmQwDQYJKoZIhvcNAQEL
BQADggEBACt3xNqDvGzGULMYcqu9ewsbkE9xdzI3bz9mtgILDKUQjBXwOpvMZdOV
gK8H/sTsW6X2307XJr2ojupEPIQS77iqhtkSoqryTJ/q+AR/VluvkKpaYziYR2Cj
iMoRB1YbMKRarAMN4Q3ytZg5KESOANui4mYXZofvu1HwpnkB2Ha7s7GPyquvfSoI
m38Htywnlv1+DBJe8JaRl/fIBJ9dHWi1pEuwym4bbZQ+s5xEybpNQok+vwJt8Q/x
AENCyW3LbDjayRBHQPhTpHOgr11lwIAyU2+UG3oC+a7Ch3EoucscleQ2ZwyWiJYY
sugO6xXm6cqzOvWoqS6qLN5I5FqYqMw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:30 2025 by rpki-client