Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa
File: 3A304DB4F54411EE8FF34627C4F9AE02.roa (raw, json)
Hash identifier: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=
Subject key identifier: 6E:C0:3E:7B:52:1E:DD:D4:79:1D:DF:50:83:04:DE:8B:29:5B:71:A5
Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35
Certificate serial: 3470
Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa
Signing time: Tue 18 Mar 2025 15:00:51 +0000
ROA not before: Tue 18 Mar 2025 15:00:51 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 198949
IP address blocks: 202.7.8.0/21 maxlen: 21
203.5.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13424 (0x3470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304
Validity
Not Before: Mar 18 15:00:51 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d98aa3-b2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:26:6e:05:17:fc:bd:84:40:3c:80:30:f0:
65:e2:77:d8:73:eb:b3:d1:1f:44:35:cc:db:59:65:
d2:bb:26:fb:72:84:e7:c0:02:72:4c:07:10:77:87:
24:11:3c:03:ed:ef:02:4f:9d:2d:fd:58:cc:1d:18:
4a:1e:bb:a5:e2:5d:7c:9f:1a:86:8f:32:1c:85:17:
23:bc:2b:19:31:05:50:71:cb:e5:e7:3a:d0:79:18:
cd:55:27:7b:5d:75:31:31:33:06:27:2a:05:5e:bd:
4a:e0:63:f6:a8:2f:57:2f:50:9a:32:dd:5c:83:f0:
8c:64:02:f5:95:8f:79:bc:6f:9f:07:f5:80:54:94:
1b:e3:ec:b7:10:74:fe:b2:53:28:ff:7b:a6:5b:26:
f5:3a:fa:6c:aa:82:9b:17:65:28:55:ac:26:58:f0:
04:83:6d:1e:c0:eb:76:14:ce:60:e5:72:2d:c2:3b:
0b:01:06:d2:67:6f:28:3b:eb:92:9f:8d:fc:be:c8:
4c:50:98:19:0b:67:1f:11:06:bd:b6:c5:f5:17:29:
d5:0c:30:fb:43:81:2c:b7:a7:e0:41:f1:95:4d:2b:
e5:3b:28:18:71:be:8b:ec:be:6c:5e:09:47:06:2a:
0e:22:a3:56:6c:86:76:87:51:12:f8:df:f0:71:c0:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C0:3E:7B:52:1E:DD:D4:79:1D:DF:50:83:04:DE:8B:29:5B:71:A5
X509v3 Authority Key Identifier:
keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.7.8.0/21
203.5.121.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e2:3e:a3:99:d9:7c:fc:ba:20:df:e9:0f:70:2a:8f:66:8e:
de:10:7f:14:62:79:9f:c1:ff:c1:ed:23:65:b1:43:1a:1f:eb:
bf:1f:5a:0c:a1:92:2f:1b:bf:b8:2d:90:71:56:40:68:ba:4e:
4e:a2:c0:ac:02:54:4e:6d:ef:64:8f:db:3d:f6:96:ea:0c:00:
a1:c1:91:b3:cf:53:09:cf:b3:98:06:75:c5:92:8e:25:df:8c:
7c:7f:ad:4c:d1:0c:c7:47:de:28:84:55:0f:2d:bf:60:d1:92:
3d:43:33:65:10:1c:26:0b:23:fb:a1:26:f9:94:e4:8c:3d:3c:
a6:3f:c8:cd:90:58:5e:24:46:97:2b:77:ad:a1:2f:4f:88:42:
6d:14:14:59:b9:d8:39:b7:35:94:b7:d0:fb:d5:52:63:38:1f:
5c:bb:f0:9d:7b:f8:1a:b1:bb:b1:86:f1:00:82:1b:5a:6f:9a:
20:34:4f:3f:e1:1a:0b:cf:37:ae:da:50:cc:5c:71:3e:51:a3:
fc:fb:e7:e5:2e:30:1e:a4:e7:6e:fb:fa:ef:9f:5a:bb:14:3f:
c8:fd:d0:30:1f:44:c7:60:2e:29:3e:8f:f1:e8:0e:7a:03:b2:
c1:68:64:22:79:25:e1:d9:80:1d:39:99:37:30:6e:af:6b:f1:
67:8b:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:21:42 2025 by rpki-client