Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
File: 2E0FE566659A11ED8981D533C4F9AE02.roa (raw, json)
Hash identifier: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=
Subject key identifier: 91:02:62:B9:1E:87:52:7C:CA:3A:B1:21:03:F5:5C:71:6B:E6:96:3A
Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial: 01F3
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
Signing time: Thu 05 Dec 2024 01:45:41 +0000
ROA not before: Thu 05 Dec 2024 01:45:41 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 209242
IP address blocks: 203.19.222.0/24 maxlen: 24
203.89.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917544F
Validity
Not Before: Dec 5 01:45:41 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675105c4-a6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:5e:dd:42:23:27:c9:e5:0a:f2:e3:dc:76:
da:ce:c2:c8:d6:0e:1f:51:0c:4f:0f:b4:81:0b:ee:
5b:93:75:95:bb:8a:c0:ce:d8:6b:10:35:0f:59:00:
42:78:29:03:4f:7a:9e:09:59:e2:35:ab:6d:16:22:
55:e3:74:0a:77:f6:6d:3f:a8:6c:4e:83:75:1d:41:
58:16:a1:b2:3e:06:de:5f:25:da:e1:25:aa:89:60:
c6:b5:fb:f8:36:ca:bc:83:35:20:47:a2:03:5c:b2:
5f:03:38:aa:79:4a:ea:6b:48:e5:9f:02:e9:50:54:
16:fe:fd:32:26:be:7d:e8:46:8c:00:84:c3:83:97:
fa:a4:a4:3b:5d:e6:64:12:4b:fe:27:da:03:04:f9:
46:6e:ce:fc:73:15:2e:26:2f:10:11:1d:27:81:72:
69:3a:67:88:aa:e8:1f:86:9d:14:73:5e:e7:c0:54:
64:e0:6b:15:e1:f8:cb:3f:af:1a:3e:9a:e3:d8:4a:
5d:07:b1:35:5c:50:71:c6:3b:41:2a:4f:16:66:29:
9f:dc:4e:65:bd:5e:51:0e:7b:88:d5:41:9c:54:c8:
23:58:c5:46:81:88:b3:d6:5a:43:31:6c:55:91:44:
fc:6f:9b:83:4a:ca:e2:48:9d:61:f0:cb:ee:aa:d6:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:62:B9:1E:87:52:7C:CA:3A:B1:21:03:F5:5C:71:6B:E6:96:3A
X509v3 Authority Key Identifier:
keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.19.222.0/24
203.89.5.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6b:12:64:28:f5:68:07:34:81:11:21:79:cd:15:f4:e2:bb:
02:ea:fc:0d:18:b9:d1:fc:28:a2:1e:83:8a:bb:a1:dd:35:ee:
3e:bf:85:88:d9:9f:1c:32:ea:70:88:88:8e:11:c2:88:6b:ab:
57:5b:f1:b1:56:0d:0e:c6:de:e5:ce:9e:4a:76:6d:f7:10:3a:
2b:b5:d8:1d:13:f0:98:05:25:2e:da:37:b2:b5:fe:11:37:61:
13:1c:e8:af:52:ff:ff:9b:d1:8b:eb:ee:16:46:59:bb:4b:4c:
fb:ad:92:21:83:ed:fa:10:29:60:4f:a8:37:d8:e5:1a:1b:f7:
72:72:b1:01:af:80:6a:2d:f6:c4:1d:4f:6d:1f:38:f7:8e:ff:
c2:9d:49:74:34:21:ad:fd:4c:73:13:eb:46:c8:20:1a:35:48:
42:3d:38:03:fa:27:0f:2a:6f:27:63:ef:e6:83:00:5d:f7:fc:
e5:b9:49:78:9b:32:e7:aa:2d:92:e4:a8:7c:2b:98:a9:74:e3:
6e:c9:25:99:60:c9:2d:89:b1:69:0a:50:03:07:37:f5:c0:9c:
3e:82:d8:c1:1c:90:e0:e4:01:6b:7a:33:a5:83:61:a4:92:7e:
2a:0b:50:17:62:39:ae:33:b7:47:c8:71:7d:46:bd:11:ad:9b:
cb:f5:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:42 2025 by rpki-client