Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/ACBFA1221CD111EFB2BDF412C4F9AE02.roa
File: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (raw, json)
Hash identifier: ifFLN+8twN04B6jY6cx/b65AiJj/Z2yB7h3ev34IjTI=
Subject key identifier: 88:09:CF:05:BC:6B:C3:FB:0E:7C:E4:92:78:17:BA:63:4C:9E:AB:DE
Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial: 026A
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/ACBFA1221CD111EFB2BDF412C4F9AE02.roa
Signing time: Wed 05 Mar 2025 03:16:57 +0000
ROA not before: Wed 05 Mar 2025 03:16:57 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 7545
IP address blocks: 203.30.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11D6
Validity
Not Before: Mar 5 03:16:57 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c7c229-96c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:c1:49:0a:82:9f:24:41:60:fe:3b:54:07:
33:45:aa:62:ab:90:4a:c8:47:07:00:90:41:de:cc:
01:89:85:c4:8e:72:50:99:2c:03:a9:4f:be:e8:7e:
ae:9a:16:3d:1c:a8:39:31:32:c0:8a:7e:91:79:19:
16:ed:31:e3:18:98:67:f1:d4:97:ec:99:e7:1f:f7:
40:2c:cf:b1:1d:69:20:c7:bf:4b:f9:28:6e:62:e0:
16:48:72:20:a7:b9:5b:f5:aa:11:09:05:75:66:08:
25:ed:72:1e:fa:aa:40:a5:fe:4c:69:2f:5b:f9:c5:
7e:c5:55:f6:cd:5c:a4:b1:6d:fb:ed:02:68:49:40:
3f:fd:78:35:40:46:4e:71:4f:f8:8a:75:5c:b3:00:
42:3a:f1:aa:51:4d:1b:ed:eb:de:0e:53:84:d8:f6:
ea:21:b7:d5:3b:4b:0f:8e:50:04:92:d9:80:8e:8c:
0f:df:7a:2f:17:7a:25:bc:4b:08:a1:cb:cd:f0:7e:
80:c1:fb:4c:c7:6c:ff:96:81:b3:2a:7a:59:f3:d7:
4c:3a:3d:c2:60:62:37:43:18:20:de:52:51:3f:a2:
91:8d:1b:5a:2d:1b:79:6c:6f:da:ea:2f:bc:7a:71:
82:28:bd:48:a8:88:11:64:38:bc:29:27:0f:5a:b6:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:CF:05:BC:6B:C3:FB:0E:7C:E4:92:78:17:BA:63:4C:9E:AB:DE
X509v3 Authority Key Identifier:
keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/ACBFA1221CD111EFB2BDF412C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.30.193.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f6:4e:1a:fc:9e:7d:da:8c:ff:19:6a:76:7c:fb:73:fe:09:
41:30:9e:5b:49:1b:4f:09:cf:de:11:43:ae:94:0d:7d:1f:0f:
b1:6e:c3:b7:d4:89:8c:19:83:1d:4e:79:cf:ac:b2:ef:dc:68:
eb:c2:0a:93:55:c9:b2:a6:45:15:2d:2e:91:1c:5a:98:c0:94:
70:78:ac:61:3d:e1:64:79:03:c1:6e:e9:f0:3f:da:9f:04:b2:
ea:55:05:a9:b0:76:fd:5e:67:6f:b2:56:de:1c:d6:84:bc:65:
00:e2:36:96:50:fa:b1:38:58:42:3b:c0:b9:45:2a:e0:85:69:
21:34:43:46:9d:51:bb:e1:75:28:48:f3:d1:cc:f1:dd:d5:2e:
70:8e:36:2c:7a:d1:a6:09:bb:b8:61:7d:1a:b4:6c:af:e9:1c:
cf:15:fc:a2:10:c1:d2:34:2f:0d:f2:54:db:94:11:5b:7c:d7:
31:b9:39:9d:49:b1:0b:3f:1b:c8:0c:5c:8c:fc:22:f1:ed:99:
8f:35:b0:1d:f1:e9:fb:5c:c1:32:17:e4:7a:c8:b0:88:4c:ee:
d2:33:c1:02:bf:12:1b:39:ec:b0:60:21:55:db:aa:10:61:a7:
23:15:ac:82:97:22:f4:02:7f:6e:77:d1:28:b0:e4:d3:37:43:
24:0d:8a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:54 2025 by rpki-client