Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/B751E508B4D311ED842F1B7DC4F9AE02.roa
File: B751E508B4D311ED842F1B7DC4F9AE02.roa (raw, json)
Hash identifier: MxFMdgMSMD0L74NyZzkS7wTBsVNzTNSr/LBJII+DpfY=
Subject key identifier: 29:A8:A2:37:F8:41:E8:D7:BF:A1:31:A3:F8:33:A5:EA:DE:83:C3:D4
Certificate issuer: /CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Certificate serial: 011F
Authority key identifier: 84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/B751E508B4D311ED842F1B7DC4F9AE02.roa
Signing time: Sat 25 Feb 2023 06:14:53 +0000
ROA not before: Sat 25 Feb 2023 06:14:53 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 65535
IP address blocks: 203.176.189.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Validity
Not Before: Feb 25 06:14:53 2023 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=63f9a75c-bb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:c1:63:31:bb:a7:4c:73:b4:3d:7f:cb:62:
0f:a7:65:5f:c0:e7:2c:fa:0b:e5:09:aa:ea:eb:f8:
b0:9b:e0:f6:60:2a:ae:ed:fe:a9:f9:6a:39:22:8f:
cf:9a:0c:80:9b:80:62:c0:21:66:50:ff:0d:6c:26:
45:c6:ff:16:a9:78:70:02:8e:15:6f:f0:01:b1:2e:
c2:67:14:51:96:ae:1f:02:3f:ed:76:d1:f4:ac:4d:
4f:dd:fc:c5:34:59:05:c4:05:19:da:9f:27:e4:f0:
00:bd:82:fc:6f:fc:d1:77:9d:84:52:e9:10:d9:aa:
63:6f:02:97:72:b7:f4:60:b1:9a:39:92:50:f4:bd:
b2:46:34:42:15:bf:78:77:e0:cd:af:a7:b1:89:e2:
f3:5f:25:49:be:41:f3:22:e8:0f:84:c7:d0:91:e9:
f5:32:1e:31:0f:f6:c7:35:e9:46:52:ce:3d:6e:e7:
95:77:3d:81:6b:b1:ef:b6:58:1b:4e:e4:92:b7:bc:
88:ce:9e:c9:94:2b:9a:1c:66:cf:d7:59:bf:e8:c6:
f7:61:a8:74:f8:7e:b2:11:27:c2:7a:5b:de:58:a6:
36:9c:72:1e:b0:b6:b1:21:5d:03:96:5c:d8:74:4f:
75:c5:db:74:a0:47:31:82:f2:62:4c:02:0d:ae:44:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A8:A2:37:F8:41:E8:D7:BF:A1:31:A3:F8:33:A5:EA:DE:83:C3:D4
X509v3 Authority Key Identifier:
keyid:84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/hHAUsVr6eB0igZK-BUFT22Zn1XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/B751E508B4D311ED842F1B7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
46:79:68:ca:bc:2f:41:18:34:e0:29:2d:77:37:fc:46:24:4d:
61:64:34:68:04:9c:38:ec:72:9a:7e:1b:94:ed:1c:27:25:b5:
50:1c:13:0b:0e:ec:60:b9:47:04:31:db:31:53:2a:57:13:77:
55:89:15:06:2b:89:73:05:15:59:db:ba:03:90:a4:92:48:17:
10:a0:0b:1b:b7:3a:dc:96:af:ea:7f:2f:dc:d3:22:57:8b:f4:
1b:87:fa:f5:ea:87:cb:ba:90:14:50:69:7c:a8:70:1f:c3:26:
0e:18:5b:f8:1d:90:35:9b:97:5b:9c:0e:3f:f4:e5:5a:a0:4a:
50:58:61:f7:55:ec:76:75:f0:52:2d:46:f3:d1:21:ed:97:a1:
58:46:f1:2f:c4:1c:19:be:b1:23:5b:a4:04:b0:b4:40:e6:f2:
d5:ba:cc:4f:63:06:0a:ea:a9:0e:82:b4:28:44:3d:ff:14:0f:
f2:e3:50:46:93:57:d2:7c:cb:88:c7:49:be:a9:d5:ab:63:4a:
f2:6b:3a:b1:a5:23:08:7b:63:30:cd:cc:2f:71:6c:d4:88:2c:
51:2f:3e:f4:ae:23:d1:ba:d0:be:71:21:80:42:01:62:da:8e:
26:92:d6:a0:8c:dc:09:e3:fb:28:d7:24:51:a3:06:50:a2:da:
94:a5:7c:18
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMyODcxMTAvBgNVBAUTKDg0NzAxNEIxNUFGQTc4MUQyMjgxOTJCRTA1NDE1M0RC
NjY2N0Q1NzYwHhcNMjMwMjI1MDYxNDUzWhcNMzgwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Y5YTc1Yy1iYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2sLBYzG7p0xztD1/y2IPp2VfwOcs+gvlCarq6/iwm+D2YCqu7f6p+Wo5Io/P
mgyAm4BiwCFmUP8NbCZFxv8WqXhwAo4Vb/ABsS7CZxRRlq4fAj/tdtH0rE1P3fzF
NFkFxAUZ2p8n5PAAvYL8b/zRd52EUukQ2apjbwKXcrf0YLGaOZJQ9L2yRjRCFb94
d+DNr6exieLzXyVJvkHzIugPhMfQken1Mh4xD/bHNelGUs49bueVdz2Ba7Hvtlgb
TuSSt7yIzp7JlCuaHGbP11m/6Mb3Yah0+H6yESfCelveWKY2nHIesLaxIV0DllzY
dE91xdt0oEcxgvJiTAINrkRyJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCmoojf4
QejXv6Exo/gzpereg8PUMB8GA1UdIwQYMBaAFIRwFLFa+ngdIoGSvgVBU9tmZ9V2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny84NjFGRDg3QUY1
QUExMUVDQkYxNUU3NzRDNEY5QUUwMi9oSEFVc1ZyNmVCMGlnWkstQlVGVDIyWm4x
WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hIQVVzVnI2ZUIwaWdaSy1CVUZUMjJabjFYWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEMyODcvODYxRkQ4N0FGNUFBMTFFQ0JGMTVFNzc0QzRGOUFFMDIvQjc1MUU1MDhC
NEQzMTFFRDg0MkYxQjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLsL0wDQYJKoZIhvcNAQELBQADggEBAEZ5aMq8L0EYNOAp
LXc3/EYkTWFkNGgEnDjscpp+G5TtHCcltVAcEwsO7GC5RwQx2zFTKlcTd1WJFQYr
iXMFFVnbugOQpJJIFxCgCxu3OtyWr+p/L9zTIleL9BuH+vXqh8u6kBRQaXyocB/D
Jg4YW/gdkDWbl1ucDj/05VqgSlBYYfdV7HZ18FItRvPRIe2XoVhG8S/EHBm+sSNb
pASwtEDm8tW6zE9jBgrqqQ6CtChEPf8UD/LjUEaTV9J8y4jHSb6p1atjSvJrOrGl
Iwh7YzDNzC9xbNSILFEvPvSuI9G60L5xIYBCAWLajiaS1qCM3Anj+yjXJFGjBlCi
2pSlfBg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org