Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/235C33AA841511EEB8881E26C4F9AE02.roa
File: 235C33AA841511EEB8881E26C4F9AE02.roa (raw, json)
Hash identifier: +YRAKRYqk613xfLgB0zdZc+SXbgEgwFsbZ4MAXHqfD4=
Subject key identifier: 17:43:C5:07:72:63:6F:32:66:F2:0C:9A:C8:30:E8:90:D8:58:FB:69
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0386
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/235C33AA841511EEB8881E26C4F9AE02.roa
Signing time: Sat 15 Jun 2024 05:11:11 +0000
ROA not before: Sat 15 Jun 2024 05:11:11 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 2914
IP address blocks: 203.32.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902 (0x386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75
Validity
Not Before: Jun 15 05:11:11 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=666d226f-5e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:04:01:5d:71:ca:6c:81:f4:cb:8d:26:6d:
62:01:18:97:56:6d:fc:12:af:d9:8f:b7:f8:85:d0:
3c:8d:31:79:6e:cc:6d:16:d0:e1:eb:c9:2a:9f:ce:
23:e0:6a:dc:3f:16:85:f5:22:c1:33:d7:f1:0e:1a:
a3:37:8d:74:1e:3e:df:93:73:6e:dd:c7:e1:11:35:
2c:d4:11:91:a0:e2:43:7f:3d:9f:c4:e3:b9:b1:d4:
15:79:70:d5:9f:52:51:2f:70:6e:c7:05:11:41:cb:
c2:5d:c5:cc:57:32:f6:b4:ab:fa:0b:74:ad:6e:01:
90:84:96:90:bd:20:7b:4c:34:7e:cb:79:28:16:a6:
49:db:ab:fd:ea:26:1e:09:c1:af:5c:13:70:c5:8e:
98:b5:f6:19:0b:cd:8c:63:46:7c:1c:21:2e:ef:a0:
f8:5a:6c:00:f5:d9:ef:62:34:aa:63:e6:50:b3:ff:
2e:88:5c:01:df:30:44:92:3d:77:f0:88:fd:7d:2c:
b9:1b:65:2a:64:f9:b2:01:0c:e2:69:b0:af:68:39:
3e:3e:50:ac:12:84:c0:92:82:27:6f:3d:7a:e0:b5:
ef:c9:81:b5:56:82:24:43:a0:48:24:af:ed:73:57:
84:23:a9:8f:ff:bd:4b:ca:f5:e5:3a:5d:e0:bc:f7:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:43:C5:07:72:63:6F:32:66:F2:0C:9A:C8:30:E8:90:D8:58:FB:69
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/235C33AA841511EEB8881E26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e5:64:8f:67:86:eb:0e:6b:9a:8c:ac:d7:5e:75:15:7a:79:
4e:68:82:fd:e3:20:43:f5:25:1a:8c:93:11:ec:ea:e7:0a:af:
74:7e:09:22:cd:98:81:72:0a:22:62:ab:93:32:cb:41:51:ec:
43:a6:71:01:6c:ed:e8:62:13:52:22:33:09:51:9c:ed:9e:09:
2f:65:b1:ac:b8:f1:cc:f2:bf:66:90:0a:30:9a:25:78:04:8c:
49:7b:00:5e:ac:a4:e7:65:f2:86:da:15:a5:3c:59:10:8e:6f:
24:59:65:75:7d:fa:ac:14:6c:87:de:e4:e2:e5:03:6a:1d:78:
52:2e:62:33:60:ff:18:16:98:d4:79:8a:51:80:6e:0f:2c:68:
9a:77:6b:e6:85:ca:df:6d:41:48:16:e3:1c:d9:67:be:c2:b2:
f6:b9:b1:bd:5d:09:31:af:bd:d7:91:d3:62:6d:90:49:08:c6:
61:ae:54:83:6b:54:38:da:f8:34:f4:c6:85:e7:9c:be:07:2f:
f3:0d:83:ae:94:19:75:93:c0:d5:99:b9:b6:5d:a1:4c:12:bd:
c4:3b:bb:0d:ac:29:c4:21:8c:0f:40:d1:6e:e3:2e:1c:01:f2:
47:cb:67:35:6f:f7:f7:2c:10:c6:80:60:ef:64:85:97:c6:58:
4a:53:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:52 2025 by rpki-client