Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/C2F87DA8093C11F0ACC8900EC4F9AE02.roa
File: C2F87DA8093C11F0ACC8900EC4F9AE02.roa (raw, json)
Hash identifier: c5UVlK2hXPxkdo032mtK+W3Mw20PYlQ7gtmtkLL62Cg=
Subject key identifier: BA:50:C3:FA:FC:87:67:08:0F:E0:05:16:15:64:7A:CF:19:09:D5:5D
Certificate issuer: /CN=A918BAEC/serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
Certificate serial: 02
Authority key identifier: 7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/C2F87DA8093C11F0ACC8900EC4F9AE02.roa
Signing time: Tue 25 Mar 2025 05:48:23 +0000
ROA not before: Tue 25 Mar 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 163.223.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BAEC
Validity
Not Before: Mar 25 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67e243a6-15fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0a:91:0a:54:4a:de:e5:cd:fe:2b:3c:23:e6:
77:9a:0c:10:c0:f1:9c:29:fd:83:86:62:ea:3c:b1:
34:68:c5:8b:9e:d1:54:a4:ae:bf:7f:61:66:bc:15:
47:08:02:fa:99:6e:a8:e9:93:22:04:dc:3f:89:66:
7e:d6:a8:6c:2f:7d:d8:8d:01:09:cf:13:72:50:22:
5c:97:b7:13:91:d9:31:5f:65:a2:75:4e:08:c4:e3:
04:10:b8:4f:dc:6c:cb:de:0c:62:3e:89:1d:5e:35:
8b:82:e9:0c:ea:f1:ef:9c:d4:ef:ee:eb:4c:71:aa:
60:ea:e6:31:a1:4e:e6:78:0c:96:a2:dc:5f:91:e4:
d4:a8:00:2f:7a:19:60:2c:27:b9:35:79:85:78:ac:
c6:d5:6b:4c:e6:92:78:d1:ee:4f:e6:09:a4:0a:ea:
5f:25:35:2f:23:bb:bb:70:4c:27:3d:08:f5:47:64:
54:57:5a:ff:e3:c5:f2:88:b3:e1:3d:e6:ef:39:37:
4e:15:52:35:54:7b:cf:23:b9:7f:ae:85:b8:26:50:
06:93:e1:10:88:09:09:27:36:0c:4d:97:90:cc:09:
61:f7:cb:99:8d:0a:ad:7b:b9:2d:25:08:24:da:51:
76:14:8b:b8:d5:6a:04:17:f7:cb:4f:c2:f2:50:02:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:C3:FA:FC:87:67:08:0F:E0:05:16:15:64:7A:CF:19:09:D5:5D
X509v3 Authority Key Identifier:
keyid:7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/C2F87DA8093C11F0ACC8900EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:bc:44:a7:43:44:24:74:f3:8d:f5:e1:2f:19:0d:d7:90:df:
7f:0f:6b:c5:20:b8:3c:9d:21:6a:66:bb:8a:e0:dc:3f:2a:85:
48:e6:af:ef:b6:46:a5:d2:b4:d6:4f:73:1a:65:70:aa:7c:e3:
aa:ad:96:8d:1b:e5:cb:5c:9c:b7:f1:78:ef:f7:0a:ac:ef:b4:
f4:02:f0:87:83:91:7d:f2:53:43:2a:77:71:64:49:68:d4:00:
dc:84:03:3d:9f:7b:64:28:cb:47:94:13:01:6b:e6:33:0f:34:
be:15:c5:bc:8c:40:d1:41:7c:53:0b:c7:55:96:1d:f6:52:87:
07:bc:d1:18:4d:d3:1d:3f:07:e4:7b:9a:d6:38:bd:39:2b:8c:
8f:63:98:d2:09:0c:d7:c8:03:9e:e2:c9:7d:a5:55:86:61:1e:
05:d3:6f:75:7a:af:02:77:f3:c5:96:75:86:2a:a3:78:ca:e1:
ca:34:2a:1f:2d:23:6e:d8:87:4c:92:af:1d:4d:c9:e9:f7:44:
8d:b5:93:4c:e1:99:7f:b3:14:96:86:a4:b1:e4:89:f8:8f:ed:
fc:fc:b5:f9:ff:ec:0f:8e:44:56:11:c5:f9:f1:46:ec:83:ed:
ac:44:58:13:80:d6:ab:47:74:85:a4:0e:0c:92:c1:b6:58:cc:
4a:c6:a1:f7
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QkFFQzExMC8GA1UEBRMoN0ZFMDVCQTJFRTg2RUE4N0IxODRDM0ZGNUZCMTFCM0JB
QTE0OEFFQzAeFw0yNTAzMjUwNTQ4MjNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZTI0M2E2LTE1ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDzCpEKVEre5c3+Kzwj5neaDBDA8Zwp/YOGYuo8sTRoxYue0VSkrr9/YWa8FUcI
AvqZbqjpkyIE3D+JZn7WqGwvfdiNAQnPE3JQIlyXtxOR2TFfZaJ1TgjE4wQQuE/c
bMveDGI+iR1eNYuC6Qzq8e+c1O/u60xxqmDq5jGhTuZ4DJai3F+R5NSoAC96GWAs
J7k1eYV4rMbVa0zmknjR7k/mCaQK6l8lNS8ju7twTCc9CPVHZFRXWv/jxfKIs+E9
5u85N04VUjVUe88juX+uhbgmUAaT4RCICQknNgxNl5DMCWH3y5mNCq17uS0lCCTa
UXYUi7jVagQX98tPwvJQAvUPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUulDD+vyH
ZwgP4AUWFWR6zxkJ1V0wHwYDVR0jBBgwFoAUf+Bbou6G6oexhMP/X7EbO6oUiuww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQUVDLzY2MjNBNjUyMDkz
QzExRjBCMjg0ODgwREM0RjlBRTAyL2YtQmJvdTZHNm9leGhNUF9YN0ViTzZvVWl1
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZi1CYm91Nkc2b2V4aE1QX1g3RWJPNm9VaXV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkFFQy82NjIzQTY1MjA5M0MxMUYwQjI4NDg4MERDNEY5QUUwMi9DMkY4N0RBODA5
M0MxMUYwQUNDODkwMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaPftDANBgkqhkiG9w0BAQsFAAOCAQEAqLxEp0NEJHTzjfXh
LxkN15Dffw9rxSC4PJ0hama7iuDcPyqFSOav77ZGpdK01k9zGmVwqnzjqq2WjRvl
y1yct/F47/cKrO+09ALwh4ORffJTQyp3cWRJaNQA3IQDPZ97ZCjLR5QTAWvmMw80
vhXFvIxA0UF8UwvHVZYd9lKHB7zRGE3THT8H5Hua1ji9OSuMj2OY0gkM18gDnuLJ
faVVhmEeBdNvdXqvAnfzxZZ1hiqjeMrhyjQqHy0jbtiHTJKvHU3J6fdEjbWTTOGZ
f7MUloakseSJ+I/t/Py1+f/sD45EVhHF+fFG7IPtrERYE4DWq0d0haQODJLBtljM
Ssah9w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:40:40 2025 by rpki-client