Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/455B2534FD0811EF85ADED79C4F9AE02.roa
File: 455B2534FD0811EF85ADED79C4F9AE02.roa (raw, json)
Hash identifier: EqPvfZWybFxDEzuqUOMumy7hGqKdVROQozF26OVvW/M=
Subject key identifier: A3:EA:17:1E:72:6E:61:18:74:D2:BC:0D:24:57:52:A5:91:FB:96:05
Certificate issuer: /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Certificate serial: 03
Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/455B2534FD0811EF85ADED79C4F9AE02.roa
Signing time: Sun 09 Mar 2025 17:02:24 +0000
ROA not before: Sun 09 Mar 2025 17:02:24 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 4848
IP address blocks: 202.88.200.0/22 maxlen: 24
202.88.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DC32
Validity
Not Before: Mar 9 17:02:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67cdc99f-0c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:a2:a6:63:66:b1:90:1d:a6:b0:60:81:89:
2c:99:93:d6:f8:43:80:d7:03:12:83:79:96:7d:fb:
3c:c3:9a:ad:ae:96:ba:a2:6b:7a:3a:59:80:d7:a3:
58:19:20:1e:8b:8b:90:9b:c5:2d:33:5c:09:27:1b:
d7:70:85:1b:cd:d9:77:45:b4:7b:81:0d:c4:b1:39:
7a:e4:d0:84:59:8a:0c:ac:bb:c1:b3:7b:7d:0c:35:
af:26:23:b0:cf:02:c7:8c:5f:37:e5:47:58:84:66:
63:8b:81:b4:5d:57:8d:ad:1f:b1:36:0a:7e:54:20:
1d:d5:40:88:6d:89:94:f4:f6:29:58:22:5d:f9:72:
de:26:1b:08:dd:49:3c:df:70:96:1f:72:8e:65:68:
1a:85:19:87:f4:a2:a2:31:d8:04:97:5c:e2:fb:5b:
67:fd:47:38:ab:be:4c:9c:71:c8:7e:56:c1:5c:cb:
cb:07:a4:ad:3a:f8:99:26:f2:38:13:47:bf:0b:e0:
b1:93:56:31:0c:c8:6a:9a:53:f4:44:78:22:7e:8f:
9f:02:03:ea:05:83:bb:d2:d0:03:05:79:66:07:4b:
32:d7:06:31:f2:85:f1:e3:69:7e:bb:42:61:2f:47:
a8:17:cb:93:9f:d5:9c:ae:68:f6:71:7e:98:3b:7f:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:17:1E:72:6E:61:18:74:D2:BC:0D:24:57:52:A5:91:FB:96:05
X509v3 Authority Key Identifier:
keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/455B2534FD0811EF85ADED79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.88.200.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:98:e7:84:b9:a5:6b:18:c4:49:96:22:3e:13:0d:6f:ae:44:
ca:b8:7a:07:2d:4c:c8:51:d0:2c:03:16:cd:99:e9:29:f8:b3:
82:d5:44:4d:77:5d:7e:74:38:80:80:f2:bb:de:67:e1:0a:0c:
b5:68:3a:d2:44:c5:11:35:90:26:ad:61:62:ba:5c:8a:43:9d:
c8:09:c9:19:04:45:53:9a:18:d7:b9:af:e7:2b:9b:a9:27:af:
a5:ba:f2:36:7c:72:70:87:e9:7a:0c:84:38:e2:fd:0c:55:34:
52:31:ad:3b:5c:3e:f4:90:d2:f6:21:d8:12:9a:23:5c:bf:d2:
44:53:68:95:89:03:5d:83:86:db:06:e9:b3:b0:bf:91:70:7f:
8d:e7:f1:a5:3d:e8:c2:d8:95:22:af:55:42:0b:0d:60:30:86:
e2:68:84:b5:5a:ab:96:64:75:39:95:f2:99:07:1f:85:2c:0b:
97:6c:f6:53:ef:d9:33:65:ae:3c:32:88:2e:78:71:89:cc:23:
73:bb:8b:05:6f:7e:2f:b0:6e:79:0e:35:8f:67:29:6e:8f:ac:
5e:30:76:a4:8c:d9:95:5a:69:43:7e:9c:e7:be:8b:74:94:ea:
4b:4d:7a:8e:6a:fd:92:cd:b0:9b:91:ee:03:10:ce:4b:67:82:
8a:8f:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:45:02 2025 by rpki-client