Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/1E75BFFA062311F084ABB51CC4F9AE02.roa
File: 1E75BFFA062311F084ABB51CC4F9AE02.roa (raw, json)
Hash identifier: UKf1PhGBjzHATMGTv648kOTke4/dUT/Ksv5RydXXc3w=
Subject key identifier: B2:D8:51:1F:71:6B:83:72:41:5E:33:F2:8D:CA:8A:63:F9:B7:13:1F
Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial: 0588
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/1E75BFFA062311F084ABB51CC4F9AE02.roa
Signing time: Fri 21 Mar 2025 07:07:15 +0000
ROA not before: Fri 21 Mar 2025 07:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56307
IP address blocks: 203.3.178.0/23 maxlen: 24
203.3.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1416 (0x588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A9EE
Validity
Not Before: Mar 21 07:07:15 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67dd1023-a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:46:5b:5c:aa:18:fb:9b:12:81:37:d8:06:
56:7a:07:2f:c1:b6:5e:59:e4:2d:6c:f8:3f:15:74:
92:06:61:f5:e2:49:4d:9f:d2:98:fa:87:9a:26:66:
a6:18:18:80:59:1e:cf:3a:14:3c:c6:ff:c7:1d:7e:
fd:db:52:3c:99:1a:5d:2f:74:33:c3:6f:1b:de:f2:
84:ba:7f:2b:7a:41:49:a3:07:49:68:2e:d3:68:52:
8d:b6:cd:cc:27:73:c8:e0:b7:b1:36:8d:49:57:f1:
19:ff:f5:2d:d4:3d:ad:12:1e:5e:d1:94:44:94:d2:
8f:a6:81:92:bc:98:e8:a0:4f:80:87:42:db:a8:9f:
68:18:3f:f0:b5:ae:91:12:67:34:a3:97:4e:1e:6d:
33:d8:43:48:6d:71:9e:82:5d:67:94:e5:a6:de:1e:
2b:cf:58:d4:f3:45:b8:55:ff:12:34:8a:80:d4:10:
2a:7d:3f:b4:fb:2d:8b:f3:c6:5d:67:cf:7c:ae:f0:
02:39:e3:b7:dc:91:b1:bc:af:e6:be:24:f5:ce:4d:
fe:e7:bb:94:e0:34:c7:1c:b8:04:e2:5f:33:09:81:
11:d7:f7:cf:4e:30:60:e9:25:35:d8:69:9c:49:f5:
55:fa:7d:98:5a:13:c9:2f:5a:d6:db:83:9a:c5:3c:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:51:1F:71:6B:83:72:41:5E:33:F2:8D:CA:8A:63:F9:B7:13:1F
X509v3 Authority Key Identifier:
keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/1E75BFFA062311F084ABB51CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.178.0/23
203.3.188.0/23
Signature Algorithm: sha256WithRSAEncryption
74:68:8c:ae:ef:0e:61:d4:75:22:b5:1a:1b:51:bb:ab:d3:fc:
cb:00:2a:79:2a:31:ff:f9:6e:64:0d:0b:63:f4:5c:b9:43:3b:
63:41:70:b4:4b:d4:1c:15:92:28:97:61:0c:c0:73:95:7a:5d:
1f:4d:4c:46:19:b9:ae:d7:f5:d3:a5:8a:2d:a0:18:15:77:2e:
33:9d:92:5c:86:40:21:ce:e1:4d:6b:a4:4c:ea:4d:93:4f:cc:
9e:bb:04:78:17:76:8d:cd:99:85:f9:9d:ae:ea:29:88:c3:5f:
95:74:03:68:72:95:f1:c8:d2:19:37:00:03:a5:1a:81:40:6e:
50:71:0b:25:0d:41:8f:dd:8b:a9:d3:94:ae:bb:d1:30:f5:b4:
53:0d:79:4f:d0:35:c0:fb:60:d4:58:69:3b:b7:a1:90:3c:fa:
2a:b5:ab:b6:22:51:01:82:b9:8f:80:b5:78:85:64:7d:83:b4:
7d:fe:99:b7:eb:01:2a:c2:ec:d0:2a:93:9e:2f:d9:bc:85:14:
60:45:63:6d:e9:18:d6:d8:45:4f:05:1d:18:6a:54:d9:bd:74:
b7:9e:c9:6c:ca:3d:8e:a3:50:54:bd:f1:f4:a0:3f:04:aa:89:
44:b5:58:f7:b8:63:d6:54:08:f7:db:6c:e8:1e:5f:31:5f:19:
d5:9c:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:25 2025 by rpki-client