Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
File: 25C80478053A11F08A0D6F31C4F9AE02.roa (raw, json)
Hash identifier: PQY0mTJA0slWwObUdYpstelwiTL+prFfmuh+/qU35kg=
Subject key identifier: 1D:46:2C:45:54:07:42:1B:37:C8:B9:18:7F:1B:E8:10:48:ED:66:21
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: 0C
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
Signing time: Thu 20 Mar 2025 03:19:35 +0000
ROA not before: Thu 20 Mar 2025 03:19:35 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 4764
IP address blocks: 203.23.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84
Validity
Not Before: Mar 20 03:19:35 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67db8947-65f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:4f:08:80:30:91:40:59:1e:44:68:d9:dd:
e2:c9:de:73:db:cb:6c:48:52:71:b5:0a:04:90:82:
1c:29:af:49:a0:9a:be:cb:d5:b4:75:54:31:4c:a1:
c4:28:49:7d:89:d4:06:0b:3b:b1:87:4b:30:25:55:
60:69:d6:d9:c6:4a:51:62:13:5a:21:65:0d:e6:8f:
83:6a:79:90:39:d8:5a:82:f4:dc:4b:c1:20:78:78:
14:6a:16:99:db:e0:67:97:3a:e0:87:14:3c:96:18:
63:22:17:18:c1:5a:46:d6:a3:a9:52:28:fa:cc:4d:
b2:80:d6:64:2d:c7:76:1c:dc:03:26:f5:69:dd:17:
1d:31:0f:0e:09:5e:c4:16:ad:95:fd:31:e0:4d:2b:
13:cf:a1:73:82:3b:18:eb:4a:68:b8:a9:e0:0f:5b:
a5:51:2d:16:ad:33:03:0d:e3:72:7d:43:5f:4c:3c:
92:34:05:06:a5:f4:c3:b5:e3:19:26:77:90:0f:f4:
fb:33:00:c3:6c:b8:ab:c1:34:aa:43:35:d6:d1:62:
97:d7:5b:cb:68:64:98:d3:4e:fc:4d:2c:ea:46:3f:
81:2d:11:f3:d7:fb:21:0a:20:fb:03:88:be:29:7a:
25:1e:35:3c:41:2b:b6:e9:38:14:1a:54:dd:c8:41:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:46:2C:45:54:07:42:1B:37:C8:B9:18:7F:1B:E8:10:48:ED:66:21
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.23.57.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c8:27:22:82:58:1f:e7:ed:32:db:42:e7:f2:cb:b9:f7:35:
bd:be:57:a0:21:c1:2c:32:60:ce:c9:eb:63:26:85:d4:22:cb:
af:47:46:42:21:d9:88:da:4d:d7:b0:37:b1:0d:ab:b7:1d:f9:
2a:04:0a:f2:ad:83:42:54:4c:e0:fa:85:0f:ca:57:b7:07:a5:
2e:3b:f4:f0:78:5f:86:23:33:a5:65:46:40:69:c6:c0:1d:2f:
85:56:06:d7:8c:e3:b2:87:2a:33:01:b6:54:89:5b:85:2d:ba:
32:98:f3:dc:f7:b3:d2:e9:97:4c:f5:14:17:24:99:49:74:8f:
0d:57:48:8a:f6:10:dd:e5:3c:de:ba:71:f9:83:b9:8b:7d:20:
59:cc:8c:9e:49:95:37:05:d1:87:cd:af:51:4a:81:b6:98:c3:
40:24:6b:4f:4b:87:9c:68:d3:b5:33:9b:e6:9c:f7:b3:c2:0a:
d9:72:58:56:b9:fe:e8:9a:bb:e1:b6:39:bc:15:50:ac:79:27:
d6:d9:45:09:e9:1e:df:50:aa:ca:d6:af:5b:a7:e5:7b:e4:81:
ff:88:1d:c8:c2:ed:0c:8e:5e:43:5c:21:92:72:17:22:e0:73:
e1:e5:6e:6a:db:ab:67:64:05:49:d8:68:4c:62:80:6a:97:7e:
73:3a:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:08:21 2025 by rpki-client