Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/E11B4E9E051F11F0AD77753FC4F9AE02.roa
File: E11B4E9E051F11F0AD77753FC4F9AE02.roa (raw, json)
Hash identifier: tN7XrcdoarGJoE1RdPj/CCm6dWvl1EGT3dxhZCMygsY=
Subject key identifier: 7C:5B:91:AE:90:23:70:A1:BC:5C:4C:13:8F:B2:E4:6B:31:CE:AF:06
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: 02
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/E11B4E9E051F11F0AD77753FC4F9AE02.roa
Signing time: Thu 20 Mar 2025 00:11:33 +0000
ROA not before: Thu 20 Mar 2025 00:11:33 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 7545
IP address blocks: 203.23.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84
Validity
Not Before: Mar 20 00:11:33 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67db5d34-a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:f6:48:c1:ea:80:2f:99:dd:83:10:91:2f:
5d:cb:a7:53:85:e7:de:5b:11:24:e3:67:1a:7f:51:
2c:68:78:8f:ae:6d:83:84:01:62:1a:77:cc:fd:47:
7f:41:96:c5:f2:aa:b5:aa:4a:9e:53:5e:5b:65:d3:
3a:12:70:6a:38:0b:fc:c5:05:8b:02:b8:5b:99:21:
5b:07:2f:da:aa:f9:af:0f:60:97:ff:94:b9:aa:dc:
32:6f:ce:a5:9e:34:35:25:b6:45:15:4a:5a:96:a3:
ec:c6:20:0e:50:3b:c6:c1:6b:1b:6f:de:63:52:58:
65:cb:a0:0a:c2:64:b1:00:a6:1e:cd:6a:bf:af:4e:
88:a8:97:e1:bd:c9:47:1d:b5:ed:5b:6b:8f:08:e8:
bc:db:4f:f9:b0:3d:78:94:75:38:e6:1d:3e:ca:c4:
dc:48:02:4c:e0:9b:96:c9:ef:4c:96:87:cc:0e:72:
86:c5:ba:d5:1a:31:20:57:99:e7:b4:b3:4e:43:cc:
14:9f:a4:73:bb:2f:2e:c6:6e:d7:83:79:5f:ee:a5:
8d:ea:87:02:42:6f:71:fa:9e:ce:47:d9:e2:8e:dc:
6f:99:e2:cf:88:94:db:4e:45:64:cd:49:a7:9a:0e:
21:80:49:2b:ca:2a:70:45:ae:a8:6e:07:be:ed:b3:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5B:91:AE:90:23:70:A1:BC:5C:4C:13:8F:B2:E4:6B:31:CE:AF:06
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/E11B4E9E051F11F0AD77753FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.23.57.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a2:65:07:f5:de:e1:66:89:b5:41:c8:41:3d:fa:a7:cd:2c:
e8:ae:a8:af:39:f1:69:a0:65:54:f6:16:ca:5e:18:2c:0e:99:
95:bc:08:4d:7f:87:2d:de:aa:96:e5:d9:f0:32:5b:12:50:01:
fb:54:80:67:46:35:34:ea:c4:36:7f:f2:89:b7:e3:eb:3e:81:
01:ed:95:c3:5e:e6:2d:ef:65:96:61:58:30:7a:18:43:35:81:
ce:41:9c:55:9e:94:f7:cc:dd:3f:b7:64:5f:a1:a2:28:d1:87:
0b:b9:5a:06:f0:bc:fd:74:87:b7:1e:69:a9:8c:e9:67:d3:d4:
ec:35:ee:37:3d:c9:f2:d0:03:5a:54:25:47:55:1e:fe:c2:2b:
89:2f:5c:b3:7a:7f:35:31:01:9c:9e:85:5d:f0:c0:45:b8:84:
c5:8e:68:39:2b:64:57:50:df:46:ad:28:34:21:c6:f5:91:1c:
15:0d:48:6b:96:90:95:54:e7:62:39:93:e5:73:00:c4:0a:bd:
bc:8e:f4:69:0b:10:fb:ca:46:4a:6b:d9:3b:25:32:e0:90:d0:
96:2c:86:0d:6d:b6:ac:2a:52:bd:6c:d2:3e:dd:0e:f1:a8:0a:
59:0e:66:96:65:96:7c:2f:ef:57:69:f7:81:1a:49:fd:17:f9:
25:82:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:29:13 2025 by rpki-client