Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/67AFCD36F73911EE8BEC0A76C4F9AE02.roa
File: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (raw, json)
Hash identifier: VVrcitZ2B7U6+APe/mOfl0d7tYYMkpvIARKDnYAu3Cs=
Subject key identifier: 5E:45:A0:87:0D:D5:E1:F7:50:0E:55:35:F4:7A:7D:80:0C:94:3B:2A
Certificate issuer: /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial: 3475
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/67AFCD36F73911EE8BEC0A76C4F9AE02.roa
Signing time: Wed 26 Mar 2025 14:50:46 +0000
ROA not before: Wed 26 Mar 2025 14:50:46 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 23703
IP address blocks: 202.78.16.0/20 maxlen: 20
202.78.31.0/24 maxlen: 24
2405:d980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13429 (0x3475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DA76
Validity
Not Before: Mar 26 14:50:46 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e41446-8e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:78:c3:14:f4:48:8e:d6:a2:78:f7:84:c2:
fc:a6:52:b6:70:92:08:7c:7e:fa:11:ae:3b:b4:15:
23:0d:c1:70:a2:fb:ca:b2:f4:82:3d:f0:2c:ed:72:
06:4f:76:62:95:44:1b:50:7a:5b:d0:85:88:0c:82:
a0:6e:97:d2:fd:b5:d6:d6:6a:75:74:be:9b:08:27:
b4:5b:3c:89:f2:48:fe:5d:55:7f:04:76:2c:f2:04:
20:c2:b7:1b:f3:d5:00:bb:69:7f:29:38:02:fd:c9:
ea:41:06:7b:e1:50:c7:bd:b0:08:d4:d3:73:3e:48:
d3:47:01:99:0e:69:70:0b:8f:c6:02:2c:57:b3:96:
4a:d9:33:b1:7a:c0:bf:ff:7c:89:d9:d3:35:76:62:
7d:c2:63:e6:e8:a4:99:7c:e3:48:c7:e7:26:de:fe:
f5:bf:c4:e8:3f:58:c7:d5:2d:df:08:ee:da:04:cc:
b4:b5:26:4e:88:93:9e:0d:61:c2:7d:41:5c:55:39:
be:01:a5:b1:a9:3f:f0:e4:7a:b2:54:8e:e2:ce:1b:
96:a4:68:66:86:b3:aa:87:c1:e5:c2:8e:23:63:15:
5c:14:3a:f8:f0:82:33:b5:e9:35:4f:1a:0b:16:fd:
48:9c:e0:c6:65:37:da:be:a3:fe:79:c4:78:fe:22:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:A0:87:0D:D5:E1:F7:50:0E:55:35:F4:7A:7D:80:0C:94:3B:2A
X509v3 Authority Key Identifier:
keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/67AFCD36F73911EE8BEC0A76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.78.16.0/20
IPv6:
2405:d980::/32
Signature Algorithm: sha256WithRSAEncryption
1f:2d:39:c4:c0:28:1b:2f:b6:c3:67:f4:60:34:16:74:40:52:
99:a6:18:10:99:ff:b1:b8:c6:d3:c1:c1:4a:dd:2a:d3:60:4c:
4a:9a:58:23:2d:51:7e:58:d3:0c:18:5c:64:52:df:31:e1:50:
b2:6e:f9:b1:59:e9:61:2d:73:f9:bb:74:61:35:12:c6:73:68:
57:f9:6a:e4:88:e8:fc:30:f2:de:b2:1f:9e:88:d0:24:22:5f:
79:a0:6e:14:b1:13:cb:ab:c8:72:0f:56:ce:27:31:81:77:a7:
d4:62:df:db:14:cc:63:5c:63:a0:d7:b4:71:0b:fa:fa:66:52:
b8:27:98:64:cf:68:0f:e0:f3:34:53:58:2c:ea:cf:b6:25:cc:
ff:a1:78:43:97:9f:02:e4:c6:71:7a:7e:15:e0:eb:55:64:c3:
8d:ee:bd:0c:b0:58:5a:4c:6f:51:6d:e1:93:f5:a5:fa:da:3b:
d0:58:e7:4a:43:e2:bf:2a:2e:9a:c7:c6:74:ec:69:37:e5:87:
a9:ed:cc:c0:a0:de:66:85:6d:57:61:0b:d4:aa:9a:41:6b:0f:
b5:9b:72:8e:6f:1a:3e:ce:57:d1:92:a8:23:e6:d0:f4:3f:cf:
12:ac:74:e2:ad:a1:88:d3:a2:33:a1:ef:7c:e5:13:73:d7:8c:
17:76:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:00 2025 by rpki-client