Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/236FAC269DE011EDA182F455C4F9AE02.roa
File: 236FAC269DE011EDA182F455C4F9AE02.roa (raw, json)
Hash identifier: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=
Subject key identifier: 0F:0B:F1:60:13:DF:46:75:82:37:78:5C:5C:8A:BC:F1:8E:11:91:F4
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 018B
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/236FAC269DE011EDA182F455C4F9AE02.roa
Signing time: Wed 15 Jan 2025 02:28:24 +0000
ROA not before: Wed 15 Jan 2025 02:28:24 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 7545
IP address blocks: 203.25.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0
Validity
Not Before: Jan 15 02:28:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67871d47-aaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:f2:7e:be:63:b0:0c:28:c3:a0:09:5d:1e:
75:64:f6:b6:a8:b5:a5:70:34:b5:0f:5e:0b:40:0a:
3c:12:43:23:c7:a5:f9:76:b9:bc:21:c3:3e:df:12:
05:af:bf:03:9e:17:85:18:13:a7:ce:f6:a9:34:c6:
53:04:f1:72:77:be:b7:45:fb:d9:88:ea:78:97:b4:
e4:94:fa:06:f2:73:0e:f4:63:6e:97:ee:02:54:23:
05:c5:84:b6:84:a1:3b:d6:ae:e3:30:df:78:fd:ea:
71:61:76:59:99:cc:06:99:81:8c:a7:18:60:ae:f1:
71:b6:fa:5c:6b:e4:7e:45:8c:b6:50:07:de:a7:79:
56:ae:53:c1:96:36:10:0d:26:c7:9e:6d:5a:0b:24:
05:57:84:c2:3a:26:6f:4d:1d:9e:e5:dc:05:79:09:
c8:ad:18:8a:9f:b6:e0:65:0d:c9:8d:0e:33:1e:89:
84:8a:31:8c:37:c2:90:f6:ea:02:04:34:cf:39:4e:
9b:90:95:b8:54:ef:f8:6e:41:24:39:ac:76:57:39:
7f:7f:d6:eb:b1:c1:82:2b:ba:e9:9e:d6:5f:61:a9:
a1:22:81:75:f4:18:12:87:41:b4:5e:af:bd:e6:be:
0a:f1:8f:0a:1b:df:e1:77:de:28:ea:84:52:fb:c9:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0B:F1:60:13:DF:46:75:82:37:78:5C:5C:8A:BC:F1:8E:11:91:F4
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/236FAC269DE011EDA182F455C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.25.134.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:0e:15:03:06:8e:70:f0:2d:71:32:83:4a:52:ea:d9:cb:36:
6c:25:5c:7c:a1:45:ea:91:fb:12:7c:7d:4a:c7:c1:47:f5:14:
9a:bf:20:68:ad:b3:6e:20:62:38:58:b2:49:40:fe:af:74:68:
12:dc:c3:6d:36:2d:d0:f9:b0:9f:18:60:55:5c:2c:02:81:fb:
11:82:23:16:57:88:b6:20:ad:12:b2:dc:a3:44:fd:d7:60:7b:
17:7c:95:03:75:ad:33:71:8e:8e:ee:7a:a8:4d:0d:4a:ec:79:
c1:f2:e7:b4:64:a4:4f:7c:1d:12:cb:7b:1f:c0:db:b0:e1:8c:
91:7f:28:2f:69:65:49:99:a6:0b:bb:b8:10:9b:fa:12:41:f9:
e9:22:7e:9c:1c:7f:4f:f9:f5:ed:cd:fe:48:df:48:49:ae:35:
ea:c8:f6:14:43:7d:ba:45:92:fb:ee:78:41:c1:98:8b:93:ce:
73:66:be:16:8c:70:c0:c0:7f:dc:d4:01:74:5d:75:15:4c:b7:
9e:b1:5b:bd:ce:50:6e:9a:92:8d:05:f8:71:46:c1:bb:49:c0:
31:93:75:55:b3:2c:bb:a4:91:84:be:7b:f8:4f:fe:38:56:e1:
f5:d6:0f:e1:a8:d8:bb:0b:29:6a:05:69:ea:5f:37:e1:b5:56:
3d:49:85:4d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5
QzUxMjIyRTYwHhcNMjUwMTE1MDIyODI0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg3MWQ0Ny1hYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4Tyfr5jsAwow6AJXR51ZPa2qLWlcDS1D14LQAo8EkMjx6X5drm8IcM+3xIF
r78DnheFGBOnzvapNMZTBPFyd763RfvZiOp4l7TklPoG8nMO9GNul+4CVCMFxYS2
hKE71q7jMN94/epxYXZZmcwGmYGMpxhgrvFxtvpca+R+RYy2UAfep3lWrlPBljYQ
DSbHnm1aCyQFV4TCOiZvTR2e5dwFeQnIrRiKn7bgZQ3JjQ4zHomEijGMN8KQ9uoC
BDTPOU6bkJW4VO/4bkEkOax2Vzl/f9brscGCK7rpntZfYamhIoF19BgSh0G0Xq+9
5r4K8Y8KG9/hd94o6oRS+8ljwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA8L8WAT
30Z1gjd4XFyKvPGOEZH0MB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw
MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JFRDAvRERCNTg5QTA4MDE5MTFFREJCQkUzMDZFQzRGOUFFMDIvMjM2RkFDMjY5
REUwMTFFREExODJGNDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLGYYwDQYJKoZIhvcNAQELBQADggEBAOQOFQMGjnDwLXEy
g0pS6tnLNmwlXHyhReqR+xJ8fUrHwUf1FJq/IGits24gYjhYsklA/q90aBLcw202
LdD5sJ8YYFVcLAKB+xGCIxZXiLYgrRKy3KNE/ddgexd8lQN1rTNxjo7ueqhNDUrs
ecHy57RkpE98HRLLex/A27DhjJF/KC9pZUmZpgu7uBCb+hJB+ekifpwcf0/59e3N
/kjfSEmuNerI9hRDfbpFkvvueEHBmIuTznNmvhaMcMDAf9zUAXRddRVMt56xW73O
UG6ako0F+HFGwbtJwDGTdVWzLLukkYS+e/hP/jhW4fXWD+Go2LsLKWoFaepfN+G1
Vj1JhU0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:26:11 2025 by rpki-client