Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa
File: A3FED87EFC7C11EF9988DB39C4F9AE02.roa (raw, json)
Hash identifier: b9kFI2LP+2ffZX2yHsw0CgRPAE32uqdcH6V4JxpMSsg=
Subject key identifier: 18:07:B3:DB:2A:59:D2:7E:57:CA:8B:CA:C8:7D:FD:9F:6C:E2:52:69
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 5FBB
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa
Signing time: Sun 09 Mar 2025 00:22:53 +0000
ROA not before: Sun 09 Mar 2025 00:22:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 133929
IP address blocks: 210.0.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24507 (0x5fbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323
Validity
Not Before: Mar 9 00:22:53 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67ccdf5d-e018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:6f:fe:ba:cd:93:0c:9a:92:3d:8f:36:7b:
ad:02:5a:3b:2d:8a:b7:39:e9:75:e6:f2:94:ea:d3:
fb:eb:3f:e6:9e:0a:2e:eb:4a:7d:49:b6:5e:92:41:
40:31:bb:3c:fd:5a:a6:2b:4e:aa:84:5e:be:de:c5:
cf:ec:2a:79:b8:4e:49:06:22:b8:ac:c0:6f:4e:08:
6a:d1:7f:30:1d:3d:18:03:c9:90:a2:e0:4d:2f:22:
f0:ce:86:e6:5c:96:ad:f6:be:86:35:08:c4:c5:dd:
b4:74:c4:f7:1a:35:3d:10:00:6d:42:e3:f3:5b:3b:
80:f2:84:c1:67:13:c2:28:13:c3:12:41:06:e7:50:
b2:53:c0:56:de:71:10:4a:ee:ad:c2:00:34:88:69:
5e:35:06:97:3f:53:6f:45:46:a8:a9:81:49:d0:b1:
cc:8c:09:ef:04:b2:d4:b8:b5:6e:26:45:09:9c:bc:
7d:fe:c1:c6:7b:e1:7f:fa:b7:d6:03:66:19:10:d5:
ea:01:75:61:1a:43:92:4f:2a:a7:a3:d8:2e:73:27:
41:8e:a4:7a:65:ef:94:28:87:ce:b1:17:8a:c5:f3:
8f:7d:38:ce:8b:1b:fb:34:ec:69:b7:35:f9:fb:8e:
69:23:4b:71:67:3a:fb:ba:3a:f9:b8:cc:81:ed:cb:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:07:B3:DB:2A:59:D2:7E:57:CA:8B:CA:C8:7D:FD:9F:6C:E2:52:69
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.0.225.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2e:e3:b0:eb:95:66:57:f8:52:a0:95:e4:4f:c5:0b:3a:c1:
7b:03:71:02:e1:d7:f4:ac:52:a2:ed:52:ee:c2:09:66:60:f0:
3c:e9:f5:31:27:d7:5a:64:0a:15:e8:1d:06:e1:99:06:5a:20:
68:99:da:48:be:6e:64:f0:e0:12:12:16:5b:9f:0c:18:e8:b9:
04:6f:a9:fd:eb:88:ea:6c:5d:7c:b0:56:ed:48:2e:7f:39:1a:
06:30:4b:2e:80:95:1b:ee:9f:aa:31:27:ab:43:5a:bb:12:06:
eb:67:1e:c2:b8:f0:7b:e4:9d:be:9f:5d:67:8e:f9:00:1e:9e:
7c:f9:00:bb:71:47:2b:0e:4d:bd:c1:88:e0:6b:5d:4d:ab:0a:
6a:13:ea:17:d3:b4:18:92:5c:12:00:7b:62:a3:72:4a:38:53:
2a:c6:32:b1:d2:c7:e3:de:be:a6:8b:d4:16:e0:01:51:52:52:
a3:7b:89:f3:48:6a:be:06:72:39:e5:aa:41:4d:b9:38:e3:8a:
d0:dc:05:a3:3f:c6:04:9d:62:55:03:bb:1f:be:89:00:89:f3:
8d:b1:28:25:96:05:a0:ea:82:c5:b9:e5:f0:a9:c1:fb:7a:41:
58:8f:b2:9c:fa:e1:f9:d8:ee:96:b3:e9:c8:4a:c0:44:74:c6:
bd:c8:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:52 2025 by rpki-client