Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa
File: 2C04F1F202CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog=
Subject key identifier: 1B:B9:1F:AC:19:7C:BE:00:01:64:78:DA:EA:0D:CD:37:33:46:0B:BC
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2406
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa
Signing time: Fri 26 Jul 2024 16:33:39 +0000
ROA not before: Fri 26 Jul 2024 16:33:39 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 24451
IP address blocks: 203.177.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9222 (0x2406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207
Validity
Not Before: Jul 26 16:33:39 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a3cfe3-4b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:55:48:f1:5a:15:ea:48:56:43:48:97:9b:
d5:9d:95:bc:f0:44:70:d2:3b:32:6c:a2:05:14:29:
18:1f:6a:f4:6a:37:60:17:2a:70:e0:d6:65:b8:b3:
85:55:05:c7:5c:52:fd:14:c4:a8:03:80:ed:29:42:
b3:55:27:f4:c7:11:ff:9b:77:c7:e8:96:bb:28:d8:
f9:5a:82:e0:70:e6:20:43:e4:8b:66:e0:23:5a:86:
90:16:5b:05:3e:75:69:d0:dc:5c:3a:f3:95:fd:06:
48:7a:7a:3a:d6:e4:72:be:76:cd:99:c0:8e:e8:8a:
2f:b9:c2:a3:77:b6:b5:36:54:93:ac:1b:19:49:6b:
b3:a8:af:9b:a0:ab:4f:20:de:d0:27:2e:f1:7c:08:
68:58:59:a9:56:d4:b4:24:6e:d5:9b:44:82:9b:d8:
c4:94:1b:66:c3:b1:a6:7d:71:d4:5d:50:3a:e5:f0:
dc:d2:6b:62:b3:58:80:cd:d2:7b:f1:9c:6a:0d:5d:
a4:db:6a:cc:76:ab:52:00:5d:07:af:01:ff:bf:25:
ee:97:e9:18:fe:f0:e0:db:c0:9c:94:16:47:ee:93:
08:84:7d:88:41:11:43:c3:4d:ad:ed:0a:0a:7e:f9:
47:ca:3a:bb:1e:94:a6:31:95:40:e6:28:4f:83:94:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:1F:AC:19:7C:BE:00:01:64:78:DA:EA:0D:CD:37:33:46:0B:BC
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.177.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1c:36:aa:7d:25:ea:66:48:0e:2d:17:b7:01:fd:d2:5c:7a:
39:39:31:5f:db:a2:8f:49:70:b4:79:ca:b3:8e:dc:cd:e2:ce:
40:f8:09:06:1f:e4:cb:02:1b:da:48:06:ad:46:3e:81:74:34:
e8:50:a0:cc:ea:47:54:e2:6a:c1:f9:c5:d4:15:ff:1c:e6:71:
49:a4:34:a0:e5:f0:fe:d7:5c:15:83:7a:c0:c2:0e:57:5b:73:
c0:a4:86:b6:57:ff:90:47:34:a7:4f:cf:16:a6:b4:19:88:3f:
bc:4f:ed:f7:56:07:b7:c0:b8:71:e2:bb:f2:33:e9:5c:b5:7e:
d6:c2:e1:b1:4c:ec:f2:b0:1a:2d:b0:59:4f:2d:b9:92:fc:32:
74:9a:bd:f9:17:65:a6:49:b9:01:2b:7b:08:c8:72:20:20:c6:
97:37:ba:21:26:7b:64:1b:5d:c8:ce:59:86:4a:a6:42:9a:4c:
52:a5:69:6a:86:c2:29:ed:ad:43:01:da:05:5f:5c:8e:d0:4b:
ce:51:e2:15:28:bf:15:32:09:37:c1:15:86:8b:0d:ae:63:f9:
b5:0a:95:21:91:09:e1:2a:77:aa:e2:1f:d8:15:79:85:aa:83:
e3:bf:fa:80:ef:84:9b:04:cc:95:24:f4:8f:06:7e:b1:73:09:
1b:dd:bd:91
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjQwNzI2MTYzMzM5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmEzY2ZlMy00Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssJVSPFaFepIVkNIl5vVnZW88ERw0jsybKIFFCkYH2r0ajdgFypw4NZluLOF
VQXHXFL9FMSoA4DtKUKzVSf0xxH/m3fH6Ja7KNj5WoLgcOYgQ+SLZuAjWoaQFlsF
PnVp0NxcOvOV/QZIeno61uRyvnbNmcCO6IovucKjd7a1NlSTrBsZSWuzqK+boKtP
IN7QJy7xfAhoWFmpVtS0JG7Vm0SCm9jElBtmw7GmfXHUXVA65fDc0mtis1iAzdJ7
8ZxqDV2k22rMdqtSAF0HrwH/vyXul+kY/vDg28CclBZH7pMIhH2IQRFDw02t7QoK
fvlHyjq7HpSmMZVA5ihPg5R7hwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBu5H6wZ
fL4AAWR42uoNzTczRgu8MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMkMwNEYxRjIw
MkNFMTFFNkIxNjczMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLsVEwDQYJKoZIhvcNAQELBQADggEBAGocNqp9JepmSA4t
F7cB/dJcejk5MV/boo9JcLR5yrOO3M3izkD4CQYf5MsCG9pIBq1GPoF0NOhQoMzq
R1TiasH5xdQV/xzmcUmkNKDl8P7XXBWDesDCDldbc8CkhrZX/5BHNKdPzxamtBmI
P7xP7fdWB7fAuHHiu/Iz6Vy1ftbC4bFM7PKwGi2wWU8tuZL8MnSavfkXZaZJuQEr
ewjIciAgxpc3uiEme2QbXcjOWYZKpkKaTFKlaWqGwintrUMB2gVfXI7QS85R4hUo
vxUyCTfBFYaLDa5j+bUKlSGRCeEqd6riH9gVeYWqg+O/+oDvhJsEzJUk9I8GfrFz
CRvdvZE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:37:09 2025 by rpki-client