Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AC0C25102A4111EBA1B1BB3DC4F9AE02.roa
File: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier: 0NcwENIPa3aVs9LiCMI6VRR24OQw/5jsXsJdB5KTDNI=
Subject key identifier: 55:39:B4:17:27:3A:B1:EA:DD:94:67:5C:0A:A2:95:F0:C7:61:D5:23
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 0752
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AC0C25102A4111EBA1B1BB3DC4F9AE02.roa
Signing time: Tue 02 Jul 2024 23:11:12 +0000
ROA not before: Tue 02 Jul 2024 23:11:12 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133113
IP address blocks: 203.151.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D
Validity
Not Before: Jul 2 23:11:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66848910-5e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:a2:72:b8:25:84:79:65:1f:3b:f5:5e:81:
80:5d:78:b1:a0:8a:6b:d2:32:67:01:a1:6a:74:1d:
34:92:17:c2:0d:80:b7:b0:59:2d:ed:77:2e:f2:96:
30:df:7f:a2:6a:79:04:2a:b5:07:62:60:79:5b:1a:
a7:65:47:80:41:ef:18:d4:97:27:f7:ab:93:00:c9:
f9:9a:9e:b2:b2:76:25:fc:8b:53:77:17:37:0a:fc:
cf:48:e7:56:17:f5:cf:32:5f:5a:c6:8a:58:db:ca:
49:0b:18:7d:35:d3:27:21:e9:d6:13:ef:b8:94:30:
1b:e2:44:97:80:de:89:f7:de:a3:15:b6:86:90:48:
77:f9:27:20:10:e7:ab:1c:8a:16:9d:4c:e4:54:73:
3a:02:dc:d0:b9:00:5a:60:11:3d:ba:a3:f6:67:7f:
73:0b:5c:be:47:ca:57:4e:1f:9a:af:d8:41:8b:b1:
7e:76:87:e4:ca:17:ee:51:45:96:16:4d:6f:dc:82:
af:64:eb:3c:fb:9a:bd:8c:5c:9f:c2:4b:e2:08:be:
85:57:e1:11:1a:52:e6:32:5e:88:eb:9f:ac:54:30:
5a:13:c4:f8:d9:4a:50:fd:21:e1:02:f3:32:eb:c0:
d3:d4:d5:28:0a:13:ef:7f:71:ac:4b:80:e5:4f:59:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:B4:17:27:3A:B1:EA:DD:94:67:5C:0A:A2:95:F0:C7:61:D5:23
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AC0C25102A4111EBA1B1BB3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.151.211.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a5:d7:f5:7f:ed:3b:e2:e7:6e:51:81:45:83:e8:14:f1:f7:
7f:25:95:4a:ab:4b:00:93:45:3e:c3:d3:8f:d2:5d:1b:2b:ca:
74:65:f1:12:d9:e3:b5:61:e3:63:42:78:61:86:f7:c7:01:64:
c3:96:b4:16:3d:55:28:fe:a6:0a:14:00:07:de:61:58:72:d2:
5d:a2:40:c1:9e:f6:42:95:02:90:ab:67:9d:00:3e:df:c2:23:
68:46:eb:f4:1b:c1:0f:5f:52:3b:58:64:60:66:a1:cb:7f:17:
b3:96:ec:69:61:86:f1:22:47:b3:9b:f6:69:47:92:85:53:e6:
ba:bb:28:0b:24:7b:d5:04:49:62:47:8f:71:70:bc:7e:98:e6:
d0:f8:f9:6f:96:9c:89:07:7f:e9:3d:14:de:0f:1f:f1:13:85:
e8:53:ab:e6:47:17:2b:d6:9d:30:44:3f:8c:c1:55:af:79:66:
50:17:42:15:0a:2c:aa:18:fb:cb:e8:31:77:ce:42:2d:74:19:
d1:2d:85:5a:b3:6e:8b:19:c6:09:c9:96:d7:46:18:45:d0:6f:
bf:ae:70:2b:4a:1c:51:8d:f4:45:d2:65:8f:a5:45:9a:17:e0:
4c:83:fc:32:b5:3e:9e:8d:cf:cf:11:39:4a:b8:3a:da:f9:3c:
a8:62:46:d1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjQwNzAyMjMxMTEyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg0ODkxMC01ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwgaicrglhHllHzv1XoGAXXixoIpr0jJnAaFqdB00khfCDYC3sFkt7Xcu8pYw
33+iankEKrUHYmB5WxqnZUeAQe8Y1Jcn96uTAMn5mp6ysnYl/ItTdxc3CvzPSOdW
F/XPMl9axopY28pJCxh9NdMnIenWE++4lDAb4kSXgN6J996jFbaGkEh3+ScgEOer
HIoWnUzkVHM6AtzQuQBaYBE9uqP2Z39zC1y+R8pXTh+ar9hBi7F+dofkyhfuUUWW
Fk1v3IKvZOs8+5q9jFyfwkviCL6FV+ERGlLmMl6I65+sVDBaE8T42UpQ/SHhAvMy
68DT1NUoChPvf3GsS4DlT1kKgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFU5tBcn
OrHq3ZRnXAqilfDHYdUjMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvQUMwQzI1MTAy
QTQxMTFFQkExQjFCQjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLl9MwDQYJKoZIhvcNAQELBQADggEBADil1/V/7Tvi525R
gUWD6BTx938llUqrSwCTRT7D04/SXRsrynRl8RLZ47Vh42NCeGGG98cBZMOWtBY9
VSj+pgoUAAfeYVhy0l2iQMGe9kKVApCrZ50APt/CI2hG6/QbwQ9fUjtYZGBmoct/
F7OW7GlhhvEiR7Ob9mlHkoVT5rq7KAske9UESWJHj3FwvH6Y5tD4+W+WnIkHf+k9
FN4PH/EThehTq+ZHFyvWnTBEP4zBVa95ZlAXQhUKLKoY+8voMXfOQi10GdEthVqz
bosZxgnJltdGGEXQb7+ucCtKHFGN9EXSZY+lRZoX4EyD/DK1Pp6Nz88ROUq4Otr5
PKhiRtE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:11 2025 by rpki-client