Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/303D1C500B0B11F0953DF32FC4F9AE02.roa
File: 303D1C500B0B11F0953DF32FC4F9AE02.roa (raw, json)
Hash identifier: FC+fqAlaych01t/B72rpfJGPuN29XibJi0+PF0BWl3g=
Subject key identifier: 00:A7:D9:AD:43:7A:89:88:F6:3D:1A:AB:82:A4:E3:0A:80:0C:EC:60
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 02E5
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/303D1C500B0B11F0953DF32FC4F9AE02.roa
Signing time: Thu 27 Mar 2025 12:58:33 +0000
ROA not before: Thu 27 Mar 2025 12:58:33 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.155.136.0/24 maxlen: 24
218.33.80.0/22 maxlen: 24
218.33.92.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18
Validity
Not Before: Mar 27 12:58:33 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67e54b79-3839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:04:59:3a:2d:38:c0:3d:fa:b7:4a:cf:09:
d8:d5:18:60:e7:5f:1b:d5:40:c6:58:81:30:f4:94:
9e:05:ae:a6:dd:01:18:43:62:3e:fd:fd:96:d2:ef:
30:ed:2a:0d:16:26:54:3c:78:98:83:22:84:5d:26:
a7:bc:a3:35:a0:c7:b4:64:fb:d4:bd:02:85:35:47:
54:c1:b1:6b:ab:b6:db:8b:82:a3:b2:ae:2f:c4:34:
7b:68:21:bb:07:ac:ca:fd:3f:d6:f8:c3:3b:06:f1:
29:e2:11:fb:4b:42:e8:8b:db:07:12:cd:66:7b:1a:
01:25:92:64:9b:81:fa:a4:47:c6:35:8a:bb:78:93:
b5:88:c2:a0:f8:fb:79:43:10:79:c6:5a:ab:3f:ed:
0e:8a:5d:47:20:26:41:2d:b9:e0:96:b6:ad:38:4c:
5c:24:4d:41:27:b7:71:24:93:95:6c:19:83:21:56:
ad:9f:86:fd:bd:7c:6c:c2:1c:bf:52:8f:d7:e1:a7:
88:16:4f:0d:c9:88:f0:9c:1b:03:4f:3e:ef:57:b8:
ea:e3:a2:00:94:f5:a7:0b:ec:3d:67:3f:3b:05:41:
24:c3:99:43:53:c9:b0:89:be:3d:7b:90:5b:f6:0e:
a9:c9:91:88:7f:e6:c3:c0:66:c6:f6:2a:43:14:39:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A7:D9:AD:43:7A:89:88:F6:3D:1A:AB:82:A4:E3:0A:80:0C:EC:60
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/303D1C500B0B11F0953DF32FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.136.0/24
218.33.80.0/22
218.33.92.0/22
218.33.100.0/22
Signature Algorithm: sha256WithRSAEncryption
33:71:90:b7:c4:aa:53:94:c9:1e:34:90:43:ee:b7:a6:09:11:
a0:10:fe:87:15:54:bf:b3:56:70:56:2a:e3:5a:d7:41:f3:ca:
c7:4b:1a:cf:b3:d3:8d:de:f7:99:87:9b:91:7c:6c:43:ca:85:
74:2b:99:6c:28:7b:c9:2d:68:66:e8:44:08:ea:15:50:bb:9d:
45:23:91:08:17:3a:b1:bb:69:42:a2:59:73:53:28:6a:ac:7a:
e1:76:53:f3:e4:82:53:3d:39:cf:35:0e:56:cc:52:aa:1e:d5:
a5:4a:b3:be:30:8c:7d:be:37:f3:b7:b6:ab:ac:1f:be:e9:35:
79:ca:e9:54:7f:3c:b6:06:0c:71:84:ec:5d:06:20:6d:dc:55:
40:1b:ea:3b:62:fb:ab:f0:a3:a0:eb:66:a2:e3:ed:e1:eb:c4:
4f:fe:28:8f:51:a1:79:e4:e2:82:40:5d:78:d6:3a:27:92:98:
f1:db:6c:59:77:88:bd:68:46:c2:80:82:37:0a:6f:0d:ad:f5:
b6:77:59:7e:fc:0c:cb:d7:7c:a8:d7:ec:9b:e1:c7:7f:65:f4:
bb:a7:40:a0:87:8f:c4:25:ae:d2:80:f0:90:62:ff:a7:9f:4d:
24:50:d9:95:34:41:91:27:d4:ed:46:a8:ac:e8:a8:3b:52:87:
4d:4a:5d:6b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUwMzI3MTI1ODMzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U1NGI3OS0zODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwP4EWTotOMA9+rdKzwnY1Rhg518b1UDGWIEw9JSeBa6m3QEYQ2I+/f2W0u8w
7SoNFiZUPHiYgyKEXSanvKM1oMe0ZPvUvQKFNUdUwbFrq7bbi4Kjsq4vxDR7aCG7
B6zK/T/W+MM7BvEp4hH7S0Loi9sHEs1mexoBJZJkm4H6pEfGNYq7eJO1iMKg+Pt5
QxB5xlqrP+0Oil1HICZBLbnglratOExcJE1BJ7dxJJOVbBmDIVatn4b9vXxswhy/
Uo/X4aeIFk8NyYjwnBsDTz7vV7jq46IAlPWnC+w9Zz87BUEkw5lDU8mwib49e5Bb
9g6pyZGIf+bDwGbG9ipDFDmN7wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFACn2a1D
eomI9j0aq4Kk4wqADOxgMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMzAzRDFDNTAw
QjBCMTFGMDk1M0RGMzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBADKm4gDBALaIVADBALaIVwDBALaIWQwDQYJKoZIhvcNAQEL
BQADggEBADNxkLfEqlOUyR40kEPut6YJEaAQ/ocVVL+zVnBWKuNa10HzysdLGs+z
043e95mHm5F8bEPKhXQrmWwoe8ktaGboRAjqFVC7nUUjkQgXOrG7aUKiWXNTKGqs
euF2U/PkglM9Oc81DlbMUqoe1aVKs74wjH2+N/O3tqusH77pNXnK6VR/PLYGDHGE
7F0GIG3cVUAb6jti+6vwo6DrZqLj7eHrxE/+KI9RoXnk4oJAXXjWOieSmPHbbFl3
iL1oRsKAgjcKbw2t9bZ3WX78DMvXfKjX7Jvhx39l9LunQKCHj8QlrtKA8JBi/6ef
TSRQ2ZU0QZEn1O1GqKzoqDtSh01KXWs=
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:38:46 2025 by rpki-client