Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
File: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (raw, json)
Hash identifier: RRFkv0+MhucpLar3G+6nK3AMY5KxybMxRqr09USf+uU=
Subject key identifier: 69:32:C3:37:AC:14:01:B3:A1:C0:5D:3D:EA:AB:66:04:6D:31:6E:DD
Certificate issuer: /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Certificate serial: 015F
Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
Signing time: Wed 29 Jan 2025 02:37:16 +0000
ROA not before: Wed 29 Jan 2025 02:37:16 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 9336
IP address blocks: 203.15.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918557B
Validity
Not Before: Jan 29 02:37:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6799945c-5557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:ef:8f:dc:89:9f:c2:d0:2d:a8:e7:0f:4b:
60:b1:4c:bb:41:d1:46:86:59:e4:be:1a:a9:f8:5c:
c9:d3:4b:90:82:f7:14:db:f8:f7:1f:41:59:e0:3c:
9c:61:17:45:f0:5f:b2:fb:7f:e4:82:a8:81:0e:17:
33:8c:76:14:09:7a:08:5b:c4:4c:78:f4:79:0c:4b:
34:9a:1f:cc:0c:9f:5b:52:c2:b8:08:de:05:98:49:
50:fe:99:0b:5a:fc:44:08:12:28:e6:c0:c5:63:39:
de:d4:2c:87:d2:a8:22:d3:4e:bd:71:10:67:de:ed:
3f:c7:18:3c:64:76:ce:0d:7b:64:36:12:2c:18:f6:
28:d6:7d:ac:f6:02:02:fe:5c:58:7d:54:58:7c:f8:
3b:be:d8:2c:74:39:a2:12:91:71:5a:8b:b9:f4:be:
7a:d6:a6:c4:14:6f:c7:84:14:5e:51:e3:d1:aa:c8:
32:47:ef:69:e9:af:f9:4d:84:a1:04:37:ad:7b:47:
8b:24:72:74:db:8f:b4:9b:66:74:a0:b7:fc:b7:c8:
c2:53:47:24:72:04:7d:27:24:5b:18:99:c6:7a:f5:
3e:37:8e:98:6d:8c:fa:65:b9:60:47:4a:ab:7a:dd:
54:25:dd:45:0c:2f:31:5c:44:bb:d4:5c:fb:60:8f:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:C3:37:AC:14:01:B3:A1:C0:5D:3D:EA:AB:66:04:6D:31:6E:DD
X509v3 Authority Key Identifier:
keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.15.172.0/23
Signature Algorithm: sha256WithRSAEncryption
05:29:5d:08:f0:e5:12:af:8a:24:fe:34:54:88:f0:96:b3:b3:
b1:80:78:a1:ba:c6:2d:bb:35:50:ca:a7:e8:25:24:79:ac:6b:
3b:95:68:d2:ba:58:02:e2:d9:29:35:b2:aa:87:a0:48:57:f9:
56:eb:38:f0:41:06:c1:c4:e8:e5:89:83:d4:30:86:51:6e:10:
94:39:86:f6:c5:3d:16:a7:a5:31:81:e6:a2:92:3e:b7:90:2c:
94:49:e6:b7:b9:31:47:bc:ad:a5:43:74:3a:fa:05:ad:53:2c:
d3:b5:3e:23:20:cf:99:ce:82:0d:0e:f3:56:ac:a5:c3:6e:4a:
bb:55:ec:c9:02:37:f8:a5:a8:b5:30:ef:9f:f4:6a:90:97:3c:
7c:57:c6:80:21:a6:4d:1e:b7:7f:b1:b7:23:57:cb:5a:a4:07:
f7:20:93:cb:dd:95:a3:dc:61:97:81:b2:8d:8c:00:73:42:b7:
73:6b:37:6e:1b:5f:ef:bf:1b:8c:e1:06:7c:38:94:af:25:7a:
63:93:03:30:15:76:b2:88:92:fc:af:89:a3:c3:fa:17:d2:86:
8b:7e:f1:56:b2:be:e9:24:08:60:30:54:29:76:ac:f8:3d:08:
76:84:f7:6e:cd:c9:2d:2d:18:7d:9f:e1:1c:c4:06:a3:d0:8c:
67:9a:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:18:42 2025 by rpki-client