Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
File: B2B210782A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier: dGroT90n4HpSSarELnS9ycmTSfu76/xv3XLB7XMogw4=
Subject key identifier: 38:4A:35:ED:C2:2D:5A:29:A8:6E:9A:B3:AB:98:8C:E0:D9:39:D1:35
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 075F
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
Signing time: Tue 02 Jul 2024 23:11:24 +0000
ROA not before: Tue 02 Jul 2024 23:11:24 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 38718
IP address blocks: 203.150.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887 (0x75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D
Validity
Not Before: Jul 2 23:11:24 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6684891b-8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:7f:a8:47:61:7a:00:c2:b2:2a:0f:62:7c:
89:29:97:6f:2e:04:6a:1d:53:b0:6f:22:09:b0:52:
24:8c:e9:ce:f9:03:78:19:36:b5:f6:81:35:83:5b:
64:54:e3:5a:60:8b:bb:fa:45:d2:f2:1c:b0:a2:af:
6d:1c:3b:8f:0e:73:2f:9d:c2:d9:3f:c2:df:43:6f:
2a:82:83:07:46:26:c1:9e:09:bc:a7:6c:50:fc:f5:
54:3d:75:45:78:7a:10:c7:d4:3d:a4:ce:f2:c7:7d:
d8:18:35:84:21:74:e4:0e:bb:21:6a:2c:e9:4c:f0:
d0:bd:c5:41:c8:0a:2f:02:c5:fa:5b:91:2a:4c:e9:
fa:63:99:ee:24:c2:4e:ee:49:6c:9b:0a:61:07:9b:
87:85:36:79:87:76:cc:29:bb:21:64:d6:15:4d:bb:
dd:c8:a6:19:2f:1b:40:ab:82:0d:85:bd:d1:e9:eb:
ea:c7:64:f9:93:6a:3e:bd:8c:e1:da:c1:87:95:1a:
66:9e:ca:c5:04:37:7c:be:8b:af:69:1b:23:d2:66:
5d:fb:0d:88:8e:01:9e:71:19:c5:10:7c:25:85:81:
7f:14:c9:15:2b:98:d4:cb:98:ac:cd:0b:08:72:a1:
5e:77:5a:a8:5a:44:0c:42:9d:7d:d9:2c:c5:4c:11:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:35:ED:C2:2D:5A:29:A8:6E:9A:B3:AB:98:8C:E0:D9:39:D1:35
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.150.22.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ab:75:3e:19:af:6c:62:79:7a:34:dd:80:2e:c4:e1:4f:c3:
3e:2d:6c:38:69:77:bb:5e:4d:2e:2c:44:cd:00:cb:8f:ea:fa:
ee:83:7d:51:17:fe:dc:4d:e6:8d:04:98:04:72:7f:13:9e:1e:
5e:bf:ea:92:b6:c7:fc:a9:2a:2c:03:3f:3f:dd:6b:f9:63:43:
03:ac:2b:ef:3f:31:6c:d1:59:01:c2:f9:a4:ea:40:88:0c:e8:
db:d4:ce:3a:b5:dc:96:d5:a2:de:ce:0f:1a:6e:db:5b:1a:0c:
e8:7e:f0:08:e9:a3:1e:92:f9:78:95:a0:60:10:57:bd:dd:eb:
fa:b7:cc:8d:0f:66:f9:8d:63:53:24:7f:66:64:8c:e3:40:81:
2e:67:93:17:41:d9:2d:0d:79:3c:f7:2f:39:fe:fc:5d:a9:d4:
7a:1d:a4:af:67:54:18:33:95:7c:f7:95:8b:a8:b4:04:81:97:
ca:60:87:c4:30:b4:31:71:81:73:80:10:84:ed:c7:8c:a1:af:
64:ca:c9:95:a2:7a:53:6b:e6:d4:cc:1f:66:55:f5:05:73:d5:
7f:16:58:36:da:f0:a1:73:5c:80:0d:ed:c0:82:ca:74:7f:42:
91:71:6d:2e:88:b1:da:5c:01:a6:77:11:65:0e:95:77:c3:e7:
2c:5a:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:13:51 2025 by rpki-client