Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa
File: 07D85DDEA7C811EF92C28379C4F9AE02.roa (raw, json)
Hash identifier: ZcWeD92UYMu6fLpMaSqSsvoWJIwNEm94vjjCo7cjTrY=
Subject key identifier: 1A:FE:71:74:1F:52:6B:BE:E6:FD:82:8D:64:67:14:A5:65:6B:8E:89
Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial: 48
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa
Signing time: Sat 29 Mar 2025 07:02:39 +0000
ROA not before: Sat 29 Mar 2025 07:02:39 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 7545
IP address blocks: 203.22.108.0/23 maxlen: 23
203.22.108.0/24 maxlen: 24
203.22.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4786
Validity
Not Before: Mar 29 07:02:39 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e79b0f-e9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:3c:c4:72:11:c2:1e:71:d9:46:c2:66:a4:
42:99:e4:11:16:24:c2:ae:58:6d:cb:f4:66:fb:93:
62:71:0c:e3:48:10:bc:38:7c:90:c1:13:be:a5:d5:
6e:64:89:dd:7c:c3:59:2a:4f:89:9f:2b:97:bf:a7:
a2:2c:a7:d4:7b:62:95:be:df:e5:43:48:c1:f6:c1:
93:34:43:40:93:a0:01:c0:9e:46:fc:6f:9c:3f:a9:
0f:b7:15:7b:b5:ab:bf:15:5a:65:83:fc:89:28:72:
b5:32:00:ce:9b:07:cd:43:05:1e:ad:7c:de:93:28:
e0:4a:42:8d:1f:e1:61:4a:a0:27:20:66:33:15:0e:
0b:51:66:74:96:b3:16:fa:18:30:bc:43:61:40:38:
d3:f5:5c:38:57:d8:9b:b2:3c:80:23:5f:3c:97:eb:
71:ed:38:cc:e2:69:62:40:09:e8:2b:86:8b:fc:56:
83:8a:c7:4d:e7:8f:db:3b:60:e4:50:b9:97:42:26:
42:65:79:c0:1b:e2:f3:2b:9f:08:b4:fd:62:c5:3c:
2d:17:2f:dd:68:58:db:3d:be:ad:d5:28:b4:43:44:
f2:f4:62:a5:d2:81:b3:6b:e3:6d:be:38:3c:6f:81:
c0:98:fb:9d:12:8a:bf:99:48:02:52:6a:21:8d:06:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:71:74:1F:52:6B:BE:E6:FD:82:8D:64:67:14:A5:65:6B:8E:89
X509v3 Authority Key Identifier:
keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.22.108.0/23
Signature Algorithm: sha256WithRSAEncryption
01:fd:f8:b2:c1:44:90:4e:d5:73:32:42:aa:16:c2:7a:2b:29:
a4:23:b6:b5:f9:c7:13:ee:9f:0f:e6:84:32:82:cc:73:f9:7f:
6f:cf:6e:73:90:93:db:86:be:60:0f:c9:01:35:2b:74:93:ee:
4e:75:25:30:55:1f:3b:74:6a:f6:77:04:19:97:89:7f:af:4a:
d5:33:c5:c4:8c:81:d7:a7:ce:d4:e6:62:12:4f:30:ca:8c:8d:
7e:62:31:3e:81:0e:92:67:86:75:ee:4d:99:80:d3:40:e9:85:
6d:7a:a1:fc:f2:7b:f8:a7:bd:23:c2:36:2b:f4:0e:ce:58:e6:
c3:05:1e:fd:32:36:7a:bd:c2:de:75:34:db:66:c7:46:cd:65:
5f:fd:98:94:13:63:13:75:41:f1:08:f5:c3:b6:1c:c3:69:6f:
0b:33:13:f1:35:0d:33:1c:5e:a8:89:da:83:90:ff:56:02:b6:
66:6c:23:db:ae:7a:ef:2e:74:c8:e1:34:ce:6e:97:f4:88:a4:
6c:b8:be:ef:e5:dc:1f:17:e9:73:87:f8:f2:5e:a5:0c:e1:f0:
46:8a:ee:48:ff:a1:0d:37:0c:8e:4e:d3:e7:b4:f1:50:b2:ce:
5f:20:5f:89:7f:5d:72:ea:03:74:51:e3:61:b8:0f:ee:95:b5:
3d:8f:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:07 2025 by rpki-client