Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
File: 4A4C8CD0F67311EBA0F18818C4F9AE02.roa (raw, json)
Hash identifier: 3gaCcI2B39Ypqww+a42sCy+UnmO00x0eV5GOdvcimLM=
Subject key identifier: F4:2E:97:89:CD:46:A9:69:BD:70:1D:32:54:BA:53:D6:C0:E7:2E:CD
Certificate issuer: /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
Certificate serial: 04C2
Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
Signing time: Sat 28 Sep 2024 23:43:21 +0000
ROA not before: Sat 28 Sep 2024 23:43:21 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 136423
IP address blocks: 203.25.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B714
Validity
Not Before: Sep 28 23:43:21 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f89499-9974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:54:df:1d:22:cb:cb:51:7d:f9:56:6c:25:
7e:d1:32:cc:f6:aa:f6:19:06:38:74:67:ab:d4:88:
6c:5d:bc:7d:ee:d1:28:6e:33:3a:64:dd:f4:fa:19:
39:ea:22:54:a0:bc:4e:76:68:20:d4:ca:26:3a:85:
50:39:64:2e:d9:2e:c5:ce:39:e1:8b:fa:66:2c:9a:
49:f7:cb:58:61:92:f1:80:31:2c:4b:2b:d3:d4:68:
42:35:c1:fe:2c:a8:69:0f:44:93:bb:a8:54:6a:48:
32:ff:be:92:ae:51:6c:44:d5:b2:00:d4:cf:5d:0c:
11:ba:9e:53:12:6e:46:d3:5e:f1:00:01:e8:2e:df:
e1:19:c8:57:04:90:f3:08:9d:42:b4:b3:ce:da:71:
c7:9d:87:99:a6:62:d6:4f:ef:fb:25:73:2a:52:ee:
60:89:ab:73:8b:54:6a:9a:bc:7d:44:5b:f1:5b:e7:
6d:c1:18:d0:c5:33:58:4a:5d:d9:ac:64:3a:e9:d1:
e5:47:2a:3a:d0:ec:39:46:81:b5:7f:b0:0c:e6:06:
2a:fa:b4:e2:d7:5a:2f:f1:f9:d0:5e:b1:56:ff:4c:
e8:46:43:af:64:23:d9:dc:aa:2d:a9:64:4a:e1:3d:
1d:1b:70:aa:c6:2c:f3:63:89:6a:c9:9d:c3:1d:ed:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:97:89:CD:46:A9:69:BD:70:1D:32:54:BA:53:D6:C0:E7:2E:CD
X509v3 Authority Key Identifier:
keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.25.82.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f2:a2:0e:cc:35:e9:7c:99:fc:14:f2:4f:54:cf:e6:4c:cc:
82:b0:93:cc:e9:e7:ff:79:90:39:ca:c6:a0:30:09:bb:7c:55:
8e:b5:89:a3:98:bd:5e:da:95:bf:33:27:06:2b:34:df:e7:e8:
42:97:39:7f:1b:43:38:4f:cd:8d:2c:1c:51:a9:1c:64:5b:4d:
d9:fc:27:60:67:11:72:c3:78:30:26:38:29:e3:7f:82:de:56:
94:12:f0:9a:d4:00:4f:0a:1d:b7:08:d3:14:3f:51:02:dd:b4:
e4:d9:c3:d8:dd:50:82:22:d9:4e:52:52:77:38:64:d2:b2:cf:
e4:a6:31:5d:09:27:35:c0:f1:1a:74:4e:93:ea:52:45:ac:c0:
9f:ea:3f:40:86:ae:19:64:bd:0d:f2:4f:36:97:87:ad:3f:03:
2c:95:41:a6:2f:98:90:bf:4f:52:ef:2a:8d:8a:57:b4:16:e4:
95:5b:19:ad:fb:42:c1:31:f1:bc:5d:28:7e:e4:00:de:8b:39:
51:1f:09:be:05:69:b0:cb:c6:25:0a:4c:43:4e:ac:55:06:4c:
b6:55:f0:fa:c0:31:79:8a:3e:0f:59:bf:22:8d:73:c8:84:8b:
b3:b4:da:04:f3:26:40:f2:83:d0:2d:14:36:70:f6:90:f8:a3:
43:e5:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:11 2025 by rpki-client