Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa
File: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (raw, json)
Hash identifier: C5+qR+xwM5riTT+23t/1tPZQq66L4etzO1hAZvNu09M=
Subject key identifier: 69:3D:6F:96:B3:CD:1B:23:DF:E1:BB:48:93:44:55:37:4C:6E:08:7B
Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Certificate serial: 017B
Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa
Signing time: Thu 05 Dec 2024 02:17:04 +0000
ROA not before: Thu 05 Dec 2024 02:17:04 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 7600
IP address blocks: 203.20.226.0/23 maxlen: 23
203.20.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E5CB
Validity
Not Before: Dec 5 02:17:04 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67510d1f-4a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:df:30:a1:f4:75:e8:d5:64:d9:cc:6e:72:
94:09:a1:b6:46:3a:0f:40:ff:0c:47:7e:aa:07:12:
89:f9:13:47:59:49:4b:a8:cc:eb:1b:97:a2:f0:52:
45:ac:8b:05:07:18:09:5b:f8:d3:fd:82:54:58:6e:
3d:22:44:cc:d7:7a:e5:07:3c:5f:ea:a8:16:fc:d1:
0a:c7:6d:94:c5:1d:84:99:9b:f6:b0:85:55:3e:94:
9c:4a:42:91:8a:53:75:43:e9:2a:9f:c6:23:49:72:
6c:e5:59:20:05:e9:c3:a2:7c:f9:c7:10:a1:8c:20:
1e:d7:ca:33:af:f9:15:4a:ef:1c:c3:a3:35:68:67:
a6:9e:80:45:05:f5:6b:c5:42:d5:f2:72:72:11:56:
2f:f8:b5:22:06:95:50:8c:c3:86:b3:a7:85:57:72:
da:06:87:ca:76:b1:9a:4c:2f:08:0d:9d:a0:67:36:
af:91:f8:10:55:63:be:f7:f7:d3:60:66:eb:18:83:
22:23:f8:f0:cd:86:f9:1b:c9:8e:31:98:99:14:1a:
1f:dc:07:14:30:05:75:2b:ed:52:a0:f7:ce:35:a6:
ba:44:89:9f:a4:79:a2:89:ff:d3:c5:bd:33:5c:04:
c8:47:39:b7:ff:e9:de:3e:a2:4e:f9:9d:53:b3:34:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3D:6F:96:B3:CD:1B:23:DF:E1:BB:48:93:44:55:37:4C:6E:08:7B
X509v3 Authority Key Identifier:
keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.20.226.0/23
203.20.247.0/24
Signature Algorithm: sha256WithRSAEncryption
59:21:cd:e1:d7:8e:0c:c1:be:b2:40:62:6f:c8:64:f3:5d:0c:
81:38:b2:2e:7d:7f:3f:5f:af:78:4c:28:5b:1f:d4:81:d0:b6:
71:ea:1b:74:cf:8b:96:92:e0:89:ca:d5:97:b1:20:25:65:e2:
d1:08:fe:27:fb:7b:29:9a:54:34:a4:27:3e:a2:a7:8b:83:e5:
54:4f:47:6a:08:88:8a:1e:b5:5e:1b:d8:a6:23:d6:af:de:08:
06:40:11:b4:07:75:6f:e6:fc:13:3d:2b:27:94:3b:3f:27:87:
5d:27:3f:cf:77:c9:f6:b6:70:f4:18:c8:b6:b3:ac:22:e8:1a:
4d:b0:0e:0d:ca:26:9d:fb:18:ff:e7:71:92:e3:ba:68:c9:7f:
bc:36:59:62:84:dc:8d:03:e6:f2:29:a5:6a:ae:83:bd:6d:95:
da:17:c2:55:12:d0:1e:94:46:4f:a3:ec:15:5b:bc:c0:4b:a8:
80:03:26:6f:a2:13:07:88:01:fc:fe:32:df:6a:17:60:25:6f:
16:0a:96:ee:44:ee:d5:bc:6c:ab:21:bf:a1:e4:89:72:ab:37:
68:9d:31:4f:ba:28:bd:87:3b:95:6e:44:d5:56:1a:2d:cf:9d:
c6:35:6e:ea:6f:cd:ec:de:35:d6:3b:c8:cb:e6:ee:d3:fd:cb:
c9:7c:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:33:20 2025 by rpki-client