Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa
File: DB701E584E6311EEBED9743CC4F9AE02.roa (raw, json)
Hash identifier: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20=
Subject key identifier: 82:8A:2C:D8:2A:06:17:BB:0A:A0:57:73:88:74:AB:0F:89:AF:0E:8E
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0A5F
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa
Signing time: Wed 26 Mar 2025 19:59:50 +0000
ROA not before: Wed 26 Mar 2025 19:59:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 10204
IP address blocks: 203.78.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2655 (0xa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493
Validity
Not Before: Mar 26 19:59:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e45cb6-8ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:40:3f:35:f3:ec:86:a2:07:91:17:10:9b:
e1:2c:81:42:7e:54:bd:67:8d:ea:e4:54:82:2d:14:
a1:33:7e:df:f1:b1:53:4c:f5:45:48:10:70:18:db:
bf:ab:da:ee:dc:ab:91:85:d7:c3:45:64:7b:3c:10:
03:f6:db:14:20:a8:ce:39:bd:6b:5c:8f:5b:86:88:
f1:61:4b:ef:47:7a:9e:a1:1a:d8:ce:08:31:4a:b6:
bc:5c:4d:8e:d3:a7:93:11:d6:0c:1c:88:8a:2f:d4:
35:f9:6f:30:e7:d4:c9:8a:8f:1c:15:e5:69:d1:16:
af:b9:bc:79:e4:40:0d:48:d4:90:54:4f:c6:64:12:
c9:22:ca:d8:05:2f:1e:5d:d9:76:d2:60:5c:a4:8a:
40:9b:92:56:64:53:87:5e:b3:30:f9:c3:20:d1:d5:
46:c6:b5:d5:40:c4:15:cb:51:37:79:2c:0a:65:ab:
40:88:27:fc:4e:9d:67:c7:fc:4d:3e:5e:de:5f:e2:
5f:9a:25:5c:e2:3f:79:6a:d4:69:f0:a0:07:02:ec:
6b:85:e9:a4:8f:26:f5:ff:e1:af:77:d3:8b:11:a5:
27:f1:a5:40:bf:d9:3a:56:5a:3d:72:69:17:f8:11:
16:5b:84:ec:b0:a0:c9:a5:32:cf:c5:cf:a7:55:0d:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8A:2C:D8:2A:06:17:BB:0A:A0:57:73:88:74:AB:0F:89:AF:0E:8E
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.200.0/22
Signature Algorithm: sha256WithRSAEncryption
42:37:00:d2:28:7c:29:53:d0:c1:64:35:1f:d5:da:f5:d3:e4:
f3:3a:b7:36:93:df:ec:e3:8d:79:e4:63:d9:2a:09:ab:b3:34:
74:21:6f:9d:e2:f6:53:9f:cb:60:50:08:6c:f4:48:10:6c:db:
1f:9b:72:30:a4:15:61:3d:5d:57:a1:b8:5a:a3:ad:cf:d8:68:
5c:0c:29:c6:74:1b:b4:ee:5e:a4:fe:af:ea:85:94:bb:06:f5:
9f:15:b1:65:eb:21:67:38:6b:44:9c:b7:16:fd:27:d2:ba:6c:
fb:bf:ac:5a:71:cb:07:b0:ab:d8:3e:81:23:74:8b:33:1c:47:
ef:3e:40:ae:ea:db:1a:5f:94:38:00:33:88:28:69:ae:77:0c:
b0:20:4f:9d:4e:bf:7a:39:f4:63:17:7b:8a:c0:9d:71:08:66:
25:af:24:a6:72:da:7c:fc:d5:ba:49:f4:1a:db:b8:21:c8:c4:
14:85:19:36:1f:43:cf:26:be:48:cf:1f:9f:a7:0c:df:a0:bf:
70:34:1d:29:ba:58:a9:77:fa:47:c3:56:04:17:eb:fc:ac:df:
01:56:b8:b8:9b:fa:9f:2b:5d:26:ba:16:f8:50:2d:b2:24:8a:
38:be:9e:81:6d:a1:55:bd:c6:b2:0b:3d:08:31:f3:fa:0d:8b:
37:69:7f:d9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4
M0NCRTE4NjcwHhcNMjUwMzI2MTk1OTUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U0NWNiNi04ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2VAPzXz7IaiB5EXEJvhLIFCflS9Z43q5FSCLRShM37f8bFTTPVFSBBwGNu/
q9ru3KuRhdfDRWR7PBAD9tsUIKjOOb1rXI9bhojxYUvvR3qeoRrYzggxSra8XE2O
06eTEdYMHIiKL9Q1+W8w59TJio8cFeVp0Ravubx55EANSNSQVE/GZBLJIsrYBS8e
Xdl20mBcpIpAm5JWZFOHXrMw+cMg0dVGxrXVQMQVy1E3eSwKZatAiCf8Tp1nx/xN
Pl7eX+JfmiVc4j95atRp8KAHAuxrhemkjyb1/+Gvd9OLEaUn8aVAv9k6Vlo9cmkX
+BEWW4TssKDJpTLPxc+nVQ1D0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIKKLNgq
Bhe7CqBXc4h0qw+Jrw6OMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4
RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvREI3MDFFNTg0
RTYzMTFFRUJFRDk3NDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALLTsgwDQYJKoZIhvcNAQELBQADggEBAEI3ANIofClT0MFk
NR/V2vXT5PM6tzaT3+zjjXnkY9kqCauzNHQhb53i9lOfy2BQCGz0SBBs2x+bcjCk
FWE9XVehuFqjrc/YaFwMKcZ0G7TuXqT+r+qFlLsG9Z8VsWXrIWc4a0Sctxb9J9K6
bPu/rFpxywewq9g+gSN0izMcR+8+QK7q2xpflDgAM4goaa53DLAgT51Ov3o59GMX
e4rAnXEIZiWvJKZy2nz81bpJ9BrbuCHIxBSFGTYfQ88mvkjPH5+nDN+gv3A0HSm6
WKl3+kfDVgQX6/ys3wFWuLib+p8rXSa6FvhQLbIkiji+noFtoVW9xrILPQgx8/oN
izdpf9k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:57:31 2025 by rpki-client