Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa
File: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (raw, json)
Hash identifier: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=
Subject key identifier: 5F:03:04:24:09:5B:8D:78:A0:6F:8E:A4:8C:C8:28:AA:FE:09:97:48
Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial: 017C
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa
Signing time: Wed 05 Feb 2025 02:28:19 +0000
ROA not before: Wed 05 Feb 2025 02:28:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 45577
IP address blocks: 203.20.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F00E
Validity
Not Before: Feb 5 02:28:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a2ccc2-f524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:8e:d4:47:28:40:7b:15:cd:20:c6:7d:72:
3c:6e:16:a9:8c:ed:f3:f9:fc:ff:72:b8:1d:7f:af:
12:df:01:9f:ca:81:96:40:d3:b6:68:9e:42:fe:77:
6f:c2:e4:de:c8:ad:58:2b:a7:39:90:6b:5d:57:bb:
54:b6:ee:70:60:83:42:7c:62:17:20:61:18:fa:87:
19:b6:9f:76:cd:76:bb:6d:31:9e:c0:fc:25:1f:1c:
ff:33:5e:be:53:71:c4:a7:94:47:ae:56:3b:ae:47:
75:2b:cb:5a:10:35:0b:7c:1c:35:39:05:21:11:25:
de:c0:71:ca:e4:85:80:92:90:c6:04:49:e0:f2:b4:
ab:0b:cf:7d:38:d9:0f:43:84:9c:6e:78:be:77:cc:
c7:1e:66:36:65:7f:a4:8c:36:9c:83:1c:a5:a9:0c:
62:95:0e:79:a3:38:11:a8:e5:a5:c7:22:c9:58:c2:
8b:40:5e:a5:c6:7a:64:45:3a:c8:d9:44:fd:79:cd:
6e:c8:d6:d7:41:48:bc:73:38:54:fd:85:af:37:34:
fe:38:ba:7d:cb:95:a1:9e:84:be:29:14:1c:02:41:
4b:64:c7:3e:1d:11:e4:30:dd:2e:4f:90:a0:42:fd:
fc:3a:2a:07:b9:f4:3f:b7:e3:0b:ce:d7:d4:9e:c6:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:03:04:24:09:5B:8D:78:A0:6F:8E:A4:8C:C8:28:AA:FE:09:97:48
X509v3 Authority Key Identifier:
keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.20.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b0:c5:88:ae:3f:d1:39:91:46:f7:12:d9:f8:0e:86:d3:22:
0e:28:3e:ed:97:a5:06:3d:b5:4d:ff:75:6e:9b:e2:bc:94:0c:
ae:4a:ae:00:d2:c1:5a:2f:b5:37:58:e9:b7:15:c6:5d:88:04:
3a:ba:51:df:11:89:5c:2b:17:d4:e2:38:71:ec:03:0d:1e:84:
51:10:4d:17:a9:a8:00:c8:31:87:48:ad:42:15:79:c2:b9:d8:
7b:e4:e9:2d:21:49:5e:2b:d4:a1:3c:67:09:d1:13:65:e7:c2:
ef:44:47:59:47:bd:84:c0:6e:a6:0f:bf:3b:45:0e:77:18:e4:
55:a5:a1:5f:22:5b:d7:e3:c0:1b:64:a6:d2:51:db:0c:65:1b:
23:88:fc:e4:c0:d3:31:f2:6a:ed:b4:d5:2c:5f:f5:eb:3e:0d:
de:97:df:04:0d:b7:31:95:6d:3a:21:b9:b0:37:eb:64:09:81:
fd:85:dc:e8:95:54:7b:af:fc:07:e1:40:e9:52:88:01:fe:49:
fd:c4:6f:42:4e:af:ec:05:48:cd:a5:ef:11:66:ee:29:3a:f5:
84:d7:f9:16:eb:be:65:30:0e:fd:4f:37:5f:d1:d3:6b:47:76:
cd:5c:14:ab:1a:10:a2:60:f2:8f:db:61:9c:79:73:c4:6d:4c:
4b:3b:72:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:33 2025 by rpki-client