Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/747C668ECCD911EF9B52C877C4F9AE02.roa
File: 747C668ECCD911EF9B52C877C4F9AE02.roa (raw, json)
Hash identifier: 2HfG6RBJNjp2Sln53/9DqAKwbPABxc8TXP+QorUFDfg=
Subject key identifier: F7:24:A1:8C:C2:74:A6:28:9F:8C:97:8E:04:4B:A1:82:FE:31:DC:E5
Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Certificate serial: 40
Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/747C668ECCD911EF9B52C877C4F9AE02.roa
Signing time: Tue 07 Jan 2025 09:26:21 +0000
ROA not before: Tue 07 Jan 2025 09:26:21 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 153325
IP address blocks: 203.19.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932
Validity
Not Before: Jan 7 09:26:21 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=677cf33c-9e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:29:62:0a:53:62:02:fa:62:94:bd:51:e4:29:
71:1d:d7:df:aa:14:7c:06:9f:5a:85:a0:ee:ab:73:
3b:ef:0c:e3:9d:2a:91:51:17:da:04:2e:ad:81:97:
87:b2:f8:d7:63:d4:aa:78:d1:e7:9d:03:20:83:4a:
fc:43:d0:24:35:fe:89:e2:c2:2f:52:8d:16:6f:92:
d4:bd:9a:a3:d2:7a:2d:90:f7:4c:72:47:73:4e:49:
be:75:89:ab:93:0c:9b:5b:41:44:5f:ab:bd:c4:f4:
ad:ca:6d:bc:88:0f:1d:9a:f6:64:5b:e6:6e:92:6b:
2a:54:8e:75:cc:5c:c9:5d:f7:6b:aa:a4:15:f2:9a:
e5:c7:cf:6f:61:cc:97:2a:34:8a:08:b9:df:74:f7:
aa:fb:13:cd:ff:5b:08:eb:ba:c8:a6:f0:8d:07:4d:
4b:3d:4a:b3:3a:62:ff:1f:c7:4c:f7:79:3d:68:d0:
40:73:f5:a4:e9:89:43:b4:61:5d:32:ad:39:72:15:
5d:3e:73:b9:4e:99:28:46:2d:16:b7:42:9f:5f:b8:
ff:a3:4a:40:bf:45:0c:96:fd:02:0d:c6:5d:83:c7:
79:10:43:23:f0:5b:a9:dc:ed:2b:47:74:5c:a5:84:
57:ee:d7:e8:1d:e1:34:02:63:02:e0:36:d4:dd:d1:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:A1:8C:C2:74:A6:28:9F:8C:97:8E:04:4B:A1:82:FE:31:DC:E5
X509v3 Authority Key Identifier:
keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/747C668ECCD911EF9B52C877C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.19.243.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c9:b7:99:e8:1e:2e:c5:6f:b7:d8:97:60:bc:51:4f:e3:0c:
3e:df:72:d6:8f:06:d8:49:f8:40:93:30:ce:72:70:7d:f1:fc:
cd:d0:88:5c:51:9e:30:6b:cc:40:d5:35:0c:9e:d8:1e:e6:b3:
3b:72:b0:86:2b:2d:5a:66:ee:62:b6:ce:2b:ed:8c:b8:fa:df:
de:50:38:88:70:06:60:d8:0a:c1:90:05:eb:0d:94:eb:1e:43:
8a:0b:62:ea:00:9e:ef:b7:3c:3a:34:57:e0:f2:50:8e:19:8d:
7b:40:c4:2e:b2:73:fa:04:98:2d:f1:f3:8c:20:5f:6b:84:1d:
81:40:8d:c1:fa:b4:68:7c:df:7a:0e:4d:ce:bc:88:f6:33:4a:
1d:fe:c2:c3:d5:6f:22:3b:54:b6:c2:51:a3:70:89:64:3d:1a:
f4:19:6a:52:24:b9:6e:3f:8a:86:3a:e1:80:5f:d3:51:0c:0e:
ea:6e:9e:2e:2a:0a:06:3c:b6:f8:45:29:57:18:cb:00:30:16:
c3:96:6a:c2:80:2e:f2:cc:57:2e:10:d4:3d:ca:8e:20:94:55:
a7:6c:8d:c8:4c:a6:28:a7:14:51:0d:db:49:7f:76:bc:65:3c:
2f:7c:ae:1a:fd:34:4d:76:9e:6b:fb:37:6e:b7:b7:30:28:0a:
13:0c:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:51:02 2025 by rpki-client