Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa
File: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (raw, json)
Hash identifier: odRzv1rTZxMhuETYW/aFCGmGEfOypP1WnK3dBBfEcvk=
Subject key identifier: C4:63:66:14:2B:C1:EE:A2:30:33:75:D0:05:2C:BD:CA:3A:FA:EE:3E
Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial: 03
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa
Signing time: Fri 14 Feb 2025 02:50:20 +0000
ROA not before: Fri 14 Feb 2025 02:50:20 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 4764
IP address blocks: 203.31.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F62D
Validity
Not Before: Feb 14 02:50:20 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67aeaf6c-0020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:6f:f3:5f:63:9c:96:5c:95:73:d3:fe:0d:
73:ae:9f:ca:b7:9d:d1:7c:65:b6:6f:3b:d9:85:44:
77:b4:4a:16:6d:7b:97:a0:c6:69:37:b9:e1:a3:64:
86:2e:e7:f3:c0:6a:a5:f0:76:f5:26:3f:c8:fc:ec:
d0:d3:1c:88:d6:0b:0b:69:cc:c0:fb:15:9d:ee:07:
73:c8:db:3f:17:98:80:19:6b:19:69:de:88:ae:0d:
2d:e6:68:74:5d:44:78:ed:bd:5c:17:f1:c1:29:1b:
41:53:c4:ee:6e:ff:f6:ad:21:36:f6:0f:31:9f:04:
a5:cb:5a:e5:0a:d7:f4:98:3e:dd:af:95:f3:3d:70:
20:35:90:91:4c:63:37:ca:d3:14:7f:0f:55:92:a4:
21:48:07:89:e0:fd:6b:a1:e6:6b:05:f2:3c:a7:2e:
cb:84:dc:fc:9a:c6:1f:dc:be:1d:3a:50:50:f5:3c:
c4:df:b4:43:d9:eb:cb:bf:2a:5b:99:1b:55:4c:eb:
59:c1:8f:17:0b:5d:74:ad:88:3f:d8:78:c3:00:fe:
cd:0d:62:55:75:8b:98:2a:a6:99:f1:b9:6c:5d:17:
e9:1f:a0:d6:21:a9:73:d8:f9:f7:1a:9e:be:1a:26:
ff:ed:e4:f6:bc:84:ce:99:31:9b:56:66:3d:cd:c3:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:63:66:14:2B:C1:EE:A2:30:33:75:D0:05:2C:BD:CA:3A:FA:EE:3E
X509v3 Authority Key Identifier:
keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.31.96.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bd:f2:aa:c0:ce:08:04:44:84:19:4f:8e:06:90:07:78:04:
67:e8:4d:dd:61:35:44:89:a8:6d:9f:ab:41:7e:ff:5b:a7:3b:
70:35:82:b2:54:86:41:ab:8e:6d:5f:d5:6e:10:f0:c6:93:05:
09:9a:95:e8:b0:9a:c8:4e:fb:a8:07:b6:c4:79:27:ed:b3:8f:
0e:8c:f7:0e:0d:10:d4:74:15:8d:e0:41:8e:80:98:77:99:e8:
9d:36:c5:3e:62:ab:8a:82:7a:fd:b2:fb:33:c9:12:e7:83:45:
99:a7:c0:02:b9:85:a9:15:40:a0:fe:e6:b1:4c:b9:9a:2f:95:
86:44:36:95:15:2b:7f:3c:47:38:08:99:a5:a7:8c:0e:ea:e6:
fa:8c:0d:52:9c:98:7a:e7:47:39:34:ff:71:9b:05:93:2e:36:
7a:76:97:82:1c:57:bd:a0:a1:d8:4a:79:2c:e5:f7:74:c9:23:
82:90:f5:fd:4c:f6:47:7c:95:ae:4d:64:2a:ee:1f:45:81:bf:
35:8c:85:72:33:f5:76:1e:1e:7f:47:60:7a:63:50:76:a7:0b:
03:64:b4:43:dd:ce:75:d8:8c:5f:c5:b8:10:39:f8:f4:fc:bc:
3b:ea:da:51:79:3a:60:ba:28:5a:d4:12:ff:f5:af:b8:f2:5d:
74:13:ac:c3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RjYyRDExMC8GA1UEBRMoNTQ5MjQ2MjEwNUNFQjA1MkRCQTlEQUU4QkI2MzVGMDVG
Nzc3MTYxRDAeFw0yNTAyMTQwMjUwMjBaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3YWVhZjZjLTAwMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKrW/zX2OcllyVc9P+DXOun8q3ndF8ZbZvO9mFRHe0ShZte5egxmk3ueGjZIYu
5/PAaqXwdvUmP8j87NDTHIjWCwtpzMD7FZ3uB3PI2z8XmIAZaxlp3oiuDS3maHRd
RHjtvVwX8cEpG0FTxO5u//atITb2DzGfBKXLWuUK1/SYPt2vlfM9cCA1kJFMYzfK
0xR/D1WSpCFIB4ng/Wuh5msF8jynLsuE3Pyaxh/cvh06UFD1PMTftEPZ68u/KluZ
G1VM61nBjxcLXXStiD/YeMMA/s0NYlV1i5gqppnxuWxdF+kfoNYhqXPY+fcanr4a
Jv/t5Pa8hM6ZMZtWZj3Nw4iJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxGNmFCvB
7qIwM3XQBSy9yjr67j4wHwYDVR0jBBgwFoAUVJJGIQXOsFLbqdrou2NfBfd3Fh0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNjJELzJEQTU3QzNDRUE3
MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0Zo
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVkpKR0lRWE9zRkxicWRyb3UyTmZCZmQzRmgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjYyRC8yREE1N0MzQ0VBNzAxMUVGODE1NEMzNkJDNEY5QUUwMi82REFGQjFFQUVB
N0UxMUVGOTNBOTE3MjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMsfYDANBgkqhkiG9w0BAQsFAAOCAQEAMb3yqsDOCAREhBlP
jgaQB3gEZ+hN3WE1RImobZ+rQX7/W6c7cDWCslSGQauObV/VbhDwxpMFCZqV6LCa
yE77qAe2xHkn7bOPDoz3Dg0Q1HQVjeBBjoCYd5nonTbFPmKrioJ6/bL7M8kS54NF
mafAArmFqRVAoP7msUy5mi+VhkQ2lRUrfzxHOAiZpaeMDurm+owNUpyYeudHOTT/
cZsFky42enaXghxXvaCh2Ep5LOX3dMkjgpD1/Uz2R3yVrk1kKu4fRYG/NYyFcjP1
dh4ef0dgemNQdqcLA2S0Q93OddiMX8W4EDn49Py8O+raUXk6YLooWtQS//WvuPJd
dBOsww==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:09:59 2025 by rpki-client