Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
File: 4967F6B8533511E8A678701BC4F9AE02.roa (raw, json)
Hash identifier: 1riiNEo45WZ6XH/Os//x78+gBRpcFmxijL/HJsGk51k=
Subject key identifier: 4E:37:DE:2F:FB:D5:D8:6D:F9:55:1D:CF:40:7F:42:AA:F2:79:55:A6
Certificate issuer: /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial: 149A
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
Signing time: Fri 20 Dec 2024 16:54:29 +0000
ROA not before: Fri 20 Dec 2024 16:54:29 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133787
IP address blocks: 203.0.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5274 (0x149a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A803
Validity
Not Before: Dec 20 16:54:29 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6765a145-6397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:d6:d1:89:57:f9:4c:79:3a:56:f4:e2:8b:
bb:d6:31:45:41:3d:3c:ed:2a:59:a1:c5:33:62:54:
29:c7:54:12:ef:38:c1:eb:82:85:db:69:fa:3d:71:
13:86:36:55:39:3d:ca:6d:4f:b2:04:7c:90:95:b7:
ac:13:71:8e:a5:a7:13:0a:22:ec:0e:ca:97:8d:b7:
0c:33:f0:c5:4f:7d:5d:cc:cc:89:ec:c7:63:07:b4:
67:8e:44:69:0d:cf:f4:0c:6c:7b:67:41:c4:da:89:
8a:de:24:f7:37:85:51:94:07:b9:99:5d:7e:21:ee:
42:ed:11:ab:98:c6:6b:d5:67:90:94:46:9e:98:84:
37:f6:34:09:8a:b2:08:c0:d9:a1:30:92:7f:33:08:
69:1c:7e:f4:48:b5:c5:a4:c2:5a:fa:fe:ad:c5:23:
9c:9c:a8:cf:e4:fb:c4:51:a7:e8:e0:59:56:73:6e:
71:1c:54:fb:5d:57:58:2e:27:1a:a9:42:16:0b:09:
1f:1f:54:7b:b3:d6:0f:fd:ba:bf:52:89:a2:ac:04:
af:a7:74:67:3a:85:99:1e:ae:9c:8e:85:43:9d:f9:
b7:35:a7:df:9a:90:27:07:67:23:a9:b7:61:78:9c:
db:4e:ec:14:09:d6:fd:1d:5a:e3:3a:64:0b:e7:35:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:DE:2F:FB:D5:D8:6D:F9:55:1D:CF:40:7F:42:AA:F2:79:55:A6
X509v3 Authority Key Identifier:
keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.0.229.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ec:de:59:db:9e:eb:9a:60:7c:c7:0f:66:83:a8:a2:27:10:
1d:f7:3b:7e:bf:ca:8a:28:34:63:93:1e:01:5d:75:4c:ff:c1:
46:5e:79:89:87:15:cf:bf:c9:a2:86:c6:08:ab:c2:4b:9a:66:
fb:3f:f1:a4:d9:13:9e:a4:99:07:79:f5:25:2c:a1:91:ee:e0:
fc:ec:e0:5b:a4:30:f4:cd:aa:45:44:af:10:33:92:37:08:22:
4c:af:e4:d0:20:14:49:39:67:f2:1f:49:53:c1:5a:13:cb:84:
6a:c1:de:6f:ab:f5:fa:21:ca:ff:57:75:39:4c:6b:01:06:23:
ac:cc:64:b3:01:b6:a9:f2:e1:06:2c:7a:86:8c:4f:76:9b:c4:
9a:52:10:76:d3:16:3b:a7:8e:74:32:7e:94:4b:67:af:f8:6f:
19:60:01:89:31:99:53:a8:19:c2:6f:76:59:3c:1c:28:74:9e:
ae:d7:51:85:5e:93:7c:16:d3:07:1c:e9:0d:8c:e1:36:9c:c9:
c0:43:5b:ce:b7:88:da:4a:12:b9:aa:3a:89:f6:3e:ab:f8:7f:
45:12:45:dd:58:bc:d6:dc:04:e1:76:a6:7c:46:e1:4f:cc:80:
60:1c:bf:dc:67:e5:49:a1:62:20:de:33:df:88:22:23:6d:bf:
02:81:8f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:47:02 2025 by rpki-client