Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa
File: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (raw, json)
Hash identifier: oiEt1rSnnQC96y7U5OAZrGjpRkXOL8LC2qqopZOBYVo=
Subject key identifier: D0:62:A9:95:08:38:33:80:C4:45:60:98:D8:64:0F:3F:E3:97:6D:E8
Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial: 02
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa
Signing time: Wed 26 Feb 2025 04:47:33 +0000
ROA not before: Wed 26 Feb 2025 04:47:33 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 4764
IP address blocks: 203.6.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161477
Validity
Not Before: Feb 26 04:47:33 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67be9ce5-810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:c1:b2:61:cf:3a:36:4b:f0:6b:9b:a8:36:
41:4b:e8:7f:69:c1:e7:b0:e7:3f:66:9f:e7:a4:21:
4c:90:08:5c:86:dc:1a:fc:33:bf:f4:ed:06:24:1b:
5b:b5:da:da:3a:f6:3c:13:3c:57:72:17:a6:91:9d:
bd:65:5b:22:d1:a7:56:08:8d:77:98:0c:8f:f6:80:
2d:46:80:24:ba:85:7d:3c:ce:b7:4c:2a:b6:ef:cc:
84:49:2f:be:9a:85:40:d7:d0:ca:92:82:97:77:49:
74:69:c1:f6:e8:e8:f1:20:49:e5:70:7f:e4:df:4f:
67:60:0c:42:f0:bf:3e:3a:ea:13:20:2c:bb:d2:84:
97:eb:04:b8:f3:71:0a:32:25:c3:f5:95:e5:7e:ba:
57:b8:42:18:b7:a0:26:b7:79:09:39:64:2b:47:1c:
2a:28:5c:5e:e0:0f:96:6a:be:06:97:7d:b3:38:0a:
6e:ce:9d:0b:d5:bf:26:26:8e:7f:aa:59:f5:1c:ba:
fc:3f:2b:77:14:ec:9f:45:1f:5d:79:bf:8b:08:79:
5e:d6:c4:a6:4c:97:2b:1c:40:06:c0:7d:7a:42:1c:
58:59:ab:01:c4:de:fc:e5:0a:47:55:63:9b:7b:8c:
d3:e9:6e:c4:ca:6e:4d:4b:46:dd:e5:c4:d8:df:22:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:A9:95:08:38:33:80:C4:45:60:98:D8:64:0F:3F:E3:97:6D:E8
X509v3 Authority Key Identifier:
keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.6.241.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a3:c9:42:7d:9a:87:fc:fa:7b:f9:cb:89:20:2d:39:ed:82:
54:cc:5d:3a:9c:6d:43:b7:26:97:37:9e:ec:3e:cb:41:ab:20:
4f:c9:c7:5c:73:98:85:fa:f9:5a:3d:a3:17:27:e6:9f:0f:c8:
44:39:48:7c:5e:04:13:d8:81:8c:e1:b2:ad:c5:5a:2f:25:5a:
56:48:f2:9f:06:82:d8:d4:b1:ca:cb:f3:19:e5:d7:7a:91:2c:
ed:1d:ed:9e:3a:a4:83:20:c2:3d:94:bf:93:25:2f:e2:7a:40:
ce:d5:83:29:3f:ee:c5:51:d6:8c:19:37:9b:c3:3d:bd:a4:d8:
e7:6a:f6:9f:7b:40:7a:20:20:85:de:06:19:be:e4:90:21:7d:
e2:b5:53:dc:5f:09:28:84:28:28:aa:f7:da:a1:79:c2:ea:10:
2e:83:d9:3c:67:21:07:ba:3a:90:c0:6b:ad:b8:c1:f8:60:72:
95:83:a8:67:ed:b6:b5:cb:b6:26:24:d7:af:25:62:85:40:77:
8a:03:ed:6d:ee:1f:f5:18:01:e3:26:65:a0:4e:ae:a0:93:79:
36:b5:7b:e2:1f:b0:c7:63:1a:b8:5c:21:d7:1a:dc:a2:e9:03:
31:39:65:ef:90:31:ed:7d:4d:4c:3b:12:67:ed:53:df:20:cf:
15:e7:fa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:51 2025 by rpki-client