Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/95B42498B93411EB980CB25DC4F9AE02.roa
File: 95B42498B93411EB980CB25DC4F9AE02.roa (raw, json)
Hash identifier: 926xbIS78MWvAJl9waSnlayl1FhzcrACLDXqg1Jgi0c=
Subject key identifier: DE:4F:D6:96:CB:9A:E6:B2:83:B0:F7:BB:7F:7A:A1:C7:02:56:1B:AA
Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial: 057F
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/95B42498B93411EB980CB25DC4F9AE02.roa
Signing time: Sat 30 Nov 2024 23:32:28 +0000
ROA not before: Sat 30 Nov 2024 23:32:28 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 1221
IP address blocks: 203.28.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407 (0x57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DDB4
Validity
Not Before: Nov 30 23:32:28 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674ba08c-4312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d0:85:2d:2d:a7:ba:58:66:0d:7f:16:42:89:
73:08:d5:b4:c6:5f:ac:23:15:13:15:85:ce:99:92:
ee:8c:86:13:dd:a1:b6:c4:ef:3c:23:7b:b9:30:98:
5b:53:05:f6:c0:0e:5e:d9:0c:2b:8e:05:a9:a6:2b:
31:1c:a8:dc:da:97:56:4a:46:f7:b9:29:b6:08:50:
bc:a6:f9:01:0c:ad:a0:8b:55:5d:f0:7f:a8:6e:90:
b8:a7:79:ff:a6:2d:83:b5:9b:05:0e:72:03:24:b3:
78:d6:19:ff:09:b5:15:4b:25:53:e1:1a:69:1e:6e:
71:fa:64:dc:18:6f:7e:6e:1d:a5:7b:5a:bf:38:4f:
2f:77:f8:50:ef:80:d0:07:6c:04:9b:43:a1:b8:0b:
4c:45:a1:cf:26:a4:27:12:38:8b:e3:b4:09:38:8f:
07:88:e9:c6:f2:a2:eb:c2:b7:d2:af:9a:86:4b:9c:
34:c8:82:fa:cd:41:52:11:bf:bf:8c:a9:1a:92:89:
8d:a8:51:a8:05:26:44:c0:ae:82:c7:dd:f0:ef:2c:
b6:0a:e5:ed:79:41:71:b4:46:91:7c:6a:2e:12:8d:
c4:8d:cd:09:4f:0f:2f:20:7b:60:27:16:b0:f9:30:
28:5f:9a:a9:93:ae:83:42:80:45:4a:44:77:bf:48:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:D6:96:CB:9A:E6:B2:83:B0:F7:BB:7F:7A:A1:C7:02:56:1B:AA
X509v3 Authority Key Identifier:
keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/95B42498B93411EB980CB25DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.28.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:36:fb:39:8e:0a:a8:a1:7d:c2:1e:df:83:3c:64:2d:63:0e:
56:90:a4:c9:fd:25:37:e2:7c:5a:b0:88:86:b7:88:ce:98:14:
6d:d5:c3:5e:1e:0a:8f:84:5d:bf:52:58:dd:f2:68:a9:2d:4e:
38:e0:91:1e:c3:da:99:78:d8:9c:6a:db:cc:f3:90:e9:43:7e:
29:b0:ad:2f:01:6a:89:f7:32:a8:17:b7:69:60:78:b3:5b:14:
cb:0a:3d:d1:ff:49:d9:ed:ce:d1:a2:b7:d1:b0:d2:03:45:c9:
2c:2a:e2:c2:f8:d4:99:97:8e:33:37:81:26:de:8c:b5:b2:7b:
ae:f7:70:0d:c6:9a:10:42:71:35:bf:c0:04:0f:63:63:1a:ad:
78:30:f3:9f:a5:08:96:15:7b:d7:63:3e:73:97:e7:3b:f1:c8:
9c:a7:98:06:e6:28:b6:9c:50:e9:6d:57:ae:e3:ce:29:a4:81:
08:cd:e7:c7:37:e9:d9:06:fc:75:31:31:16:73:cb:46:52:b8:
75:bb:b0:60:37:a6:9e:bf:a7:d2:42:42:ad:74:8f:0f:17:0e:
40:14:c0:27:44:04:99:25:12:98:8f:2c:e9:d1:55:57:59:24:
9b:80:a2:27:e1:d5:20:09:87:fc:26:5b:e9:73:00:59:a0:92:
f5:42:81:c8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG
MTU4MkY1NDYwHhcNMjQxMTMwMjMzMjI4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRiYTA4Yy00MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+NCFLS2nulhmDX8WQolzCNW0xl+sIxUTFYXOmZLujIYT3aG2xO88I3u5MJhb
UwX2wA5e2QwrjgWppisxHKjc2pdWSkb3uSm2CFC8pvkBDK2gi1Vd8H+obpC4p3n/
pi2DtZsFDnIDJLN41hn/CbUVSyVT4RppHm5x+mTcGG9+bh2le1q/OE8vd/hQ74DQ
B2wEm0OhuAtMRaHPJqQnEjiL47QJOI8HiOnG8qLrwrfSr5qGS5w0yIL6zUFSEb+/
jKkakomNqFGoBSZEwK6Cx93w7yy2CuXteUFxtEaRfGouEo3Ejc0JTw8vIHtgJxaw
+TAoX5qpk66DQoBFSkR3v0gtUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN5P1pbL
muayg7D3u396occCVhuqMB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5
MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkREQjQvQTYwMDgzMTZCOTMyMTFFQkI5NUQwNjNDQzRGOUFFMDIvOTVCNDI0OThC
OTM0MTFFQjk4MENCMjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLHKcwDQYJKoZIhvcNAQELBQADggEBAKk2+zmOCqihfcIe
34M8ZC1jDlaQpMn9JTfifFqwiIa3iM6YFG3Vw14eCo+EXb9SWN3yaKktTjjgkR7D
2pl42Jxq28zzkOlDfimwrS8Baon3MqgXt2lgeLNbFMsKPdH/SdntztGit9Gw0gNF
ySwq4sL41JmXjjM3gSbejLWye673cA3GmhBCcTW/wAQPY2MarXgw85+lCJYVe9dj
PnOX5zvxyJynmAbmKLacUOltV67jzimkgQjN58c36dkG/HUxMRZzy0ZSuHW7sGA3
pp6/p9JCQq10jw8XDkAUwCdEBJklEpiPLOnRVVdZJJuAoifh1SAJh/wmW+lzAFmg
kvVCgcg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:14:20 2025 by rpki-client