Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/EE4D73F2AE5611EDA021E516C4F9AE02.roa
File: EE4D73F2AE5611EDA021E516C4F9AE02.roa (raw, json)
Hash identifier: rHhV9X+494LZVhsBFnMPP35cu2Qc4CF3Pf3vW78mDqc=
Subject key identifier: 38:72:34:9F:D0:DE:E7:EC:31:5C:63:35:9E:07:FD:C3:7B:63:8C:69
Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Certificate serial: 0183
Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/EE4D73F2AE5611EDA021E516C4F9AE02.roa
Signing time: Thu 27 Feb 2025 04:56:12 +0000
ROA not before: Thu 27 Feb 2025 04:56:12 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 7545
IP address blocks: 203.22.205.0/24 maxlen: 24
203.30.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E67
Validity
Not Before: Feb 27 04:56:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67bff06c-e109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:75:ee:40:96:ff:73:13:0e:15:83:39:98:
1e:13:f9:a2:df:55:a7:00:3a:2a:e5:9c:45:24:c1:
5f:47:0b:f5:1a:4a:2b:c9:ee:f4:09:97:29:04:d3:
f6:a1:cd:cf:0c:9f:9f:64:b6:17:45:4d:bf:df:6e:
f7:5d:6b:5c:eb:f2:07:54:d2:cd:81:79:01:6d:40:
50:46:24:08:73:f6:d0:5a:81:de:23:06:89:35:bb:
44:1a:ba:79:22:c2:eb:12:8d:67:71:55:3c:9d:56:
25:d4:76:af:4d:cd:48:b8:d7:36:bd:bc:3e:e9:ee:
0c:af:96:d1:34:71:2d:1a:8c:31:08:4d:8f:1f:24:
2c:e3:59:dd:9c:0b:6a:e3:09:80:f5:fe:57:7c:7d:
1b:c9:b6:9c:31:91:be:61:6f:ef:52:4e:06:f9:6d:
55:f0:52:aa:2c:1c:69:4c:9b:6d:4c:cd:42:ab:70:
b8:45:b3:31:6b:ba:40:79:75:cd:75:12:f6:80:49:
23:ea:e7:e3:bb:4d:c7:96:84:d4:88:d5:b9:eb:89:
7a:d7:a0:4d:3a:60:67:a4:3d:7c:88:02:31:8e:9e:
86:15:72:d9:c4:37:d9:cb:3b:0b:6e:fa:cf:2a:10:
9e:7c:f8:1e:e8:a8:52:e0:01:b8:21:45:6b:13:9b:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:34:9F:D0:DE:E7:EC:31:5C:63:35:9E:07:FD:C3:7B:63:8C:69
X509v3 Authority Key Identifier:
keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/EE4D73F2AE5611EDA021E516C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.22.205.0/24
203.30.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:b7:54:d0:94:97:51:85:00:08:65:7f:be:50:62:ca:43:18:
e2:5a:c7:08:4a:be:24:92:85:d7:a1:a9:7b:90:df:7b:09:0e:
48:c3:2d:eb:fa:02:7f:f2:bd:cb:c0:cf:d1:47:f9:fe:c2:4e:
74:b4:00:b5:5d:da:c1:18:6e:31:21:e1:b3:55:e0:df:50:3f:
a7:1a:b6:8c:f3:a9:64:27:06:34:9e:5f:2b:ac:e3:af:60:34:
44:7b:49:35:e8:8d:7d:9c:c7:76:32:23:22:1a:27:68:9d:62:
5c:a0:77:3b:e6:ac:28:66:00:78:2c:d1:ea:2d:47:a1:aa:d0:
0f:d8:24:b6:7c:b9:5d:d6:a7:c1:ed:e6:e3:84:4c:73:f5:6f:
46:1d:34:d6:3c:fc:2f:3f:0b:cb:1c:9d:91:09:2f:ff:2a:fa:
04:b5:3a:6c:6c:cd:cf:4a:b6:17:a0:d1:6b:f7:11:5e:88:ec:
8b:80:91:50:af:7a:92:7e:1c:b7:d7:25:bb:14:a9:7a:6c:8c:
2a:ec:ab:06:56:1b:be:9c:d6:1f:b5:b8:3c:dc:d7:c8:ec:d7:
fa:28:4c:41:0f:0f:fe:e2:4c:7d:71:c9:37:da:e9:ef:e2:b2:
1f:de:bc:26:63:cb:e8:8c:5b:b6:d3:ea:63:49:e8:01:a6:c8:
6b:64:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:10:00 2025 by rpki-client