Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/307D6166D09611EFA2A9F476C4F9AE02.roa
File: 307D6166D09611EFA2A9F476C4F9AE02.roa (raw, json)
Hash identifier: TBh0mjBSfPDxaIl2QgmGHAAabIdCNBIDd/PwCXBjZQ0=
Subject key identifier: 38:32:32:99:F6:13:CC:8C:9D:76:C2:26:F8:AB:A6:7D:14:45:E1:65
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 023E
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/307D6166D09611EFA2A9F476C4F9AE02.roa
Signing time: Sun 12 Jan 2025 03:34:55 +0000
ROA not before: Sun 12 Jan 2025 03:34:55 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 202662
IP address blocks: 202.155.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18
Validity
Not Before: Jan 12 03:34:55 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6783385f-7db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:4b:97:66:28:c3:7a:72:5b:28:d9:b7:b0:
01:3c:f0:93:7a:d4:81:2b:96:a9:9f:80:0f:29:10:
2f:8d:0f:c0:38:cd:4f:ae:07:03:a7:6a:5c:3b:26:
4e:77:a4:07:6a:65:c1:4d:36:72:0a:ad:e0:d2:0b:
ca:f5:11:59:55:59:93:9e:a2:fb:3e:61:77:e7:ab:
09:9a:07:01:a0:ce:63:2a:4f:cb:ae:32:ee:ea:7d:
34:c5:36:cf:3f:b7:98:bf:25:b2:5d:c9:6f:98:20:
7c:6c:0f:cf:d1:c9:55:96:d7:1f:57:7b:e0:c3:37:
c4:41:e7:bc:b8:54:da:b1:23:e0:a1:ae:99:ce:d4:
ac:95:f3:75:4e:d6:f4:5c:51:ae:bc:9c:cd:60:60:
64:5c:72:49:49:cd:a0:b2:6f:76:55:a1:fd:fe:06:
ae:f2:1b:f8:bd:17:d8:b4:88:1e:aa:02:01:1b:40:
f1:f4:91:6e:f0:ac:ea:4f:5d:ec:bb:6b:ea:1f:f8:
60:2c:01:fd:35:98:bd:7c:e8:78:d9:88:23:9d:5f:
94:52:97:13:30:76:b1:3a:a9:06:7e:2c:e0:58:48:
ac:e8:a2:08:99:ad:f7:03:ed:f5:a6:03:e1:ec:c8:
93:46:5a:21:d4:97:9c:e2:e0:05:32:1b:16:84:3d:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:32:99:F6:13:CC:8C:9D:76:C2:26:F8:AB:A6:7D:14:45:E1:65
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/307D6166D09611EFA2A9F476C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5b:50:52:ae:2a:d8:98:ba:35:58:cc:9d:f0:a6:61:9c:49:
a8:59:35:a4:1e:24:65:44:11:9b:1e:b2:dd:3b:7e:05:84:5e:
04:26:d8:85:70:ed:91:0f:a2:3e:8d:91:2e:ec:4d:d4:c4:dc:
46:73:7a:85:00:b6:c3:4e:79:98:cb:e4:20:1c:82:17:96:5f:
c1:f7:d7:f7:4d:1d:8b:24:67:2d:27:c9:14:d3:c5:07:86:ff:
e4:9a:87:d5:bc:e2:0e:51:9c:75:73:90:23:2f:ad:7c:87:81:
93:1d:a9:4b:62:24:76:0a:0c:49:b9:7e:18:6f:44:af:21:f5:
77:5a:ba:55:33:b9:42:60:22:10:f4:3c:27:6a:f9:38:fc:28:
eb:10:87:17:72:e2:9a:5d:7c:3b:21:70:e2:75:bd:d4:b7:6b:
a7:2c:c2:26:23:46:ae:82:40:e4:63:b6:73:cf:f8:d3:c5:85:
04:46:59:25:99:32:5d:e2:81:f0:d2:c9:9b:bb:f0:ce:41:c9:
23:dc:1e:52:b9:97:29:52:ce:99:e6:19:c9:c1:1d:00:09:30:
34:36:9e:63:03:80:b2:48:6b:1f:c2:96:df:ea:79:f1:78:6c:
29:b6:7b:d4:c9:8e:e5:52:e6:ca:9e:60:c7:19:4e:3f:e6:0b:
d1:75:82:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUwMTEyMDMzNDU1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzgzMzg1Zi03ZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DpLl2Yow3pyWyjZt7ABPPCTetSBK5apn4APKRAvjQ/AOM1PrgcDp2pcOyZO
d6QHamXBTTZyCq3g0gvK9RFZVVmTnqL7PmF356sJmgcBoM5jKk/LrjLu6n00xTbP
P7eYvyWyXclvmCB8bA/P0clVltcfV3vgwzfEQee8uFTasSPgoa6ZztSslfN1Ttb0
XFGuvJzNYGBkXHJJSc2gsm92VaH9/gau8hv4vRfYtIgeqgIBG0Dx9JFu8KzqT13s
u2vqH/hgLAH9NZi9fOh42YgjnV+UUpcTMHaxOqkGfizgWEis6KIIma33A+31pgPh
7MiTRloh1Jec4uAFMhsWhD30JwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDgyMpn2
E8yMnXbCJvirpn0UReFlMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMzA3RDYxNjZE
MDk2MTFFRkEyQTlGNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKm54wDQYJKoZIhvcNAQELBQADggEBALRbUFKuKtiYujVY
zJ3wpmGcSahZNaQeJGVEEZsest07fgWEXgQm2IVw7ZEPoj6NkS7sTdTE3EZzeoUA
tsNOeZjL5CAcgheWX8H31/dNHYskZy0nyRTTxQeG/+Sah9W84g5RnHVzkCMvrXyH
gZMdqUtiJHYKDEm5fhhvRK8h9XdaulUzuUJgIhD0PCdq+Tj8KOsQhxdy4ppdfDsh
cOJ1vdS3a6cswiYjRq6CQORjtnPP+NPFhQRGWSWZMl3igfDSyZu78M5BySPcHlK5
lylSzpnmGcnBHQAJMDQ2nmMDgLJIax/Clt/qefF4bCm2e9TJjuVS5sqeYMcZTj/m
C9F1go0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:12:19 2025 by rpki-client