Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/0211478AB48E11EF81F55F3CC4F9AE02.roa
File: 0211478AB48E11EF81F55F3CC4F9AE02.roa (raw, json)
Hash identifier: wW6HtygaJuqa+MnCVL4XlwdsV1VvmruGQrlj4oWNX84=
Subject key identifier: EA:F9:08:F9:B2:91:E1:57:62:28:48:8A:F7:69:88:B6:AA:E3:E0:64
Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Certificate serial: 2078
Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/0211478AB48E11EF81F55F3CC4F9AE02.roa
Signing time: Fri 31 Jan 2025 15:20:51 +0000
ROA not before: Fri 31 Jan 2025 15:20:51 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 16509
IP address blocks: 203.34.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8312 (0x2078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199885
Validity
Not Before: Jan 31 15:20:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679cea52-1f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:ed:d8:54:72:94:a9:9f:ca:4f:f3:aa:6f:
07:4f:f1:c8:fe:31:e9:5f:b2:a1:5c:af:37:87:64:
4a:7f:b1:6c:c3:a8:cb:82:37:cd:89:93:7b:6f:5c:
66:51:43:4d:55:fe:89:5e:fa:8e:e0:ad:9d:e1:1b:
85:9e:3d:d8:4c:e5:ad:0a:e5:21:6b:1a:24:d0:ff:
a8:0a:36:6f:cc:67:be:03:b0:b4:a3:4a:4a:0c:14:
7f:a2:5e:44:8d:4e:53:80:d3:5d:46:b6:36:26:71:
3b:bf:fb:38:42:d9:78:19:5f:26:c3:d2:fd:d7:85:
3e:a1:ab:07:9a:bd:5c:38:12:c3:df:fb:0d:84:bf:
b9:e4:31:c3:d9:ec:41:68:13:79:c6:3b:ef:06:da:
07:a5:11:9c:55:7b:05:60:66:a3:9b:3e:64:9e:25:
68:36:44:e6:f7:85:ca:39:9f:70:f3:72:99:bb:e8:
40:e4:79:82:58:5b:03:35:84:04:be:39:16:5a:19:
bb:c1:82:2a:6e:de:93:c1:68:9a:68:d6:da:d8:06:
3d:26:0b:03:40:2f:57:b0:b7:d6:58:77:0b:90:d5:
17:ce:5b:6e:fd:f3:de:fb:59:fc:f1:ee:1b:5b:d3:
97:29:9d:ba:2c:ae:3b:f4:70:b5:ec:66:3f:1b:8e:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:08:F9:B2:91:E1:57:62:28:48:8A:F7:69:88:B6:AA:E3:E0:64
X509v3 Authority Key Identifier:
keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/0211478AB48E11EF81F55F3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.100.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f5:4e:a3:3d:a4:36:51:c0:70:d9:95:88:bf:64:f5:41:f6:
1d:aa:35:2b:94:6a:6b:7b:c8:d4:e2:cc:56:65:4f:d8:e7:87:
87:11:9f:d1:8d:ed:c3:2b:ae:6b:65:f7:cf:12:f6:43:91:ec:
fa:bd:12:b0:8a:c5:bf:4a:d3:5c:6f:64:c9:cc:25:ca:c3:60:
5b:50:f8:31:68:82:15:8f:9a:ac:83:91:0e:10:e2:b0:18:4b:
07:ec:b6:93:30:d4:49:d9:b1:97:f3:e1:1d:53:03:33:ec:cd:
b5:70:ec:8f:69:d4:62:7f:e1:f0:c0:f4:53:ff:38:40:30:21:
06:e8:e0:aa:5a:34:55:21:23:89:5e:1b:48:c4:22:95:d2:60:
03:27:ed:2a:c8:89:e4:11:05:81:ac:48:9e:60:44:a4:b3:d8:
f0:18:50:bf:58:77:f8:9b:ad:f8:f5:18:1c:c2:ee:b5:b7:f4:
61:83:1c:37:9c:ee:ef:43:c8:e4:56:94:b6:5b:09:bd:e2:99:
bb:13:48:b1:f1:7e:93:07:05:2c:52:c3:27:2a:f5:4d:2b:2d:
e1:98:93:98:c3:20:59:9c:17:e5:3e:9a:15:4b:46:4e:6f:9e:
e9:45:dc:9a:5c:4b:23:49:0b:7c:5d:62:98:ce:09:00:16:13:
66:cd:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:08 2025 by rpki-client