Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/1F63746CE05211EFBD383A20C4F9AE02.roa
File: 1F63746CE05211EFBD383A20C4F9AE02.roa (raw, json)
Hash identifier: VOel1POJoQ7s7LhjyoUrYXOKEPTMqO4vLpn42Kn6V74=
Subject key identifier: B4:50:D7:5E:36:2F:8B:5A:FB:E1:A3:ED:F6:BC:44:10:B5:58:32:F5
Certificate issuer: /CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Certificate serial: FB
Authority key identifier: AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/1F63746CE05211EFBD383A20C4F9AE02.roa
Signing time: Mon 03 Feb 2025 04:28:08 +0000
ROA not before: Mon 03 Feb 2025 04:28:08 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 38438
IP address blocks: 203.3.184.0/24 maxlen: 24
203.3.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B2CD
Validity
Not Before: Feb 3 04:28:08 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=67a045d8-20cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:9e:3e:64:45:4e:c2:52:ca:a9:57:a0:ff:
73:96:bc:68:2c:a3:4f:9b:78:1c:ec:5e:0a:a7:2c:
2d:f8:d7:a7:48:4c:6e:f3:c1:71:48:05:37:7b:e8:
62:a6:6b:0a:e6:f1:7a:bd:53:e1:eb:5c:3a:6e:bd:
fd:8e:cc:79:ed:00:29:3f:ca:c3:fa:d1:55:e0:6d:
94:96:b5:3b:46:f5:c0:f1:b6:44:44:2d:15:1a:c5:
3c:cf:95:d4:5c:66:2e:e7:cc:76:20:10:f9:e7:6c:
57:c6:64:9d:c3:cc:76:4d:1c:3a:1e:4c:51:7f:7d:
42:c9:0b:68:00:ef:de:e0:e7:4a:78:41:03:43:92:
96:f3:5e:b5:3f:9b:2a:08:d6:9a:d5:b8:c9:33:33:
b6:82:cb:29:46:64:61:8b:2f:cf:79:7e:1a:83:0a:
fa:69:ef:2d:d6:00:12:fe:06:1e:8b:e2:ff:25:97:
b3:0c:ae:e5:28:8a:e1:d2:d6:fc:94:85:36:d9:cb:
39:b8:41:96:c5:8b:d8:c9:4b:9c:8b:4a:0c:5e:53:
55:f9:5c:28:47:5c:1c:ec:66:c2:41:82:db:2b:6c:
2e:25:5f:b6:e7:81:ce:d0:e0:66:13:41:c8:c1:d0:
2d:f6:35:54:a0:5d:f8:57:85:df:87:4c:f4:30:ea:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:50:D7:5E:36:2F:8B:5A:FB:E1:A3:ED:F6:BC:44:10:B5:58:32:F5
X509v3 Authority Key Identifier:
keyid:AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/1F63746CE05211EFBD383A20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.184.0/23
Signature Algorithm: sha256WithRSAEncryption
34:4c:e6:be:a2:41:da:9b:51:7d:6c:93:d3:15:02:0a:a3:eb:
f5:54:63:2d:b4:7e:ec:3b:f1:7f:aa:9e:6c:f9:65:0a:c2:7d:
51:ef:77:68:2c:67:2c:fc:a6:53:b5:64:00:17:06:8c:d5:ce:
47:35:b9:ae:99:5a:2f:a6:bd:54:50:dd:e1:03:d3:e0:46:d9:
21:69:07:f4:27:b3:83:12:aa:f7:d5:36:ec:69:b3:69:b6:70:
41:b8:e0:08:43:1f:1b:3b:3f:57:3d:15:7d:d1:f9:39:b2:23:
f0:aa:db:d5:96:f5:dc:c6:0a:e2:d3:f4:68:0a:27:70:d4:67:
34:04:2f:4a:e7:65:0e:12:51:37:14:4e:50:df:61:27:b3:73:
41:0b:1b:0a:b4:af:51:15:91:3a:9b:25:e7:cd:f9:5a:17:11:
23:b9:a7:bc:09:38:34:61:b1:6a:e5:a6:62:6a:8e:57:67:aa:
6d:28:c1:97:13:9a:d8:f3:4a:6c:20:39:40:b4:d8:f4:67:e7:
c3:26:6b:f0:29:45:9c:b4:f3:2e:16:b1:0b:df:80:a8:b1:58:
a8:b7:9a:45:e2:37:c6:71:a0:47:df:1c:c1:9a:f1:ef:56:2f:
8b:4a:21:af:be:fa:2a:98:47:4a:bf:3a:31:33:70:b6:ba:50:
e8:21:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:32:39 2025 by rpki-client