Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa
File: A88A0ED8FC7511EF92B63B46C4F9AE02.roa (raw, json)
Hash identifier: 9VCbcJprVhVD5YlwxMs2GmYF5PQFLfWW66YkA9K3Z1s=
Subject key identifier: 55:07:66:0B:14:7D:BA:AC:E4:03:1F:90:97:C6:0C:DC:33:A5:11:86
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 02BC
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa
Signing time: Sat 08 Mar 2025 23:32:54 +0000
ROA not before: Sat 08 Mar 2025 23:32:54 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 42831
IP address blocks: 202.155.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18
Validity
Not Before: Mar 8 23:32:54 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67ccd3a6-d51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:8e:f1:65:42:e2:a6:ca:48:73:ef:4f:fb:
b2:4c:33:33:01:97:91:95:ee:9b:a7:5b:b3:67:ec:
e5:e3:47:5a:1d:ce:c2:e5:3b:bd:fd:11:3a:04:ec:
90:bf:23:6b:c4:21:44:05:de:5b:99:0c:1c:d6:b3:
33:c1:73:6c:ab:61:90:17:7c:9b:86:fc:47:cb:1a:
43:85:d8:78:98:fd:54:1e:28:e1:9c:45:a7:33:a1:
01:e9:5e:8c:0f:e1:c4:ba:8b:fa:0e:74:06:e3:04:
a9:a2:89:e9:5d:59:e3:af:65:ae:ee:b9:17:40:1b:
1a:8c:38:6e:cb:4a:c8:9d:c1:66:4f:3b:04:48:53:
5a:39:e0:54:86:f6:d9:b1:5f:3c:92:b0:04:85:e9:
82:82:49:47:94:11:6c:c8:30:0c:7c:d6:51:23:cb:
71:e8:7d:dc:ba:b8:4a:f2:0a:e2:cc:50:8a:41:d8:
d8:1a:b3:54:11:be:0b:9a:22:6f:cf:30:b5:38:90:
90:29:ce:48:49:ac:fa:f7:9d:37:ff:df:1e:66:2f:
fc:ff:b3:43:0e:f3:cb:08:bc:e7:a0:36:90:c8:85:
ee:a5:9d:d1:6f:82:8f:c3:4c:6f:71:48:06:c3:9f:
4a:41:1d:7c:6f:af:5c:9a:a5:17:95:4b:c8:f9:d7:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:07:66:0B:14:7D:BA:AC:E4:03:1F:90:97:C6:0C:DC:33:A5:11:86
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8a:df:8b:ad:3b:1c:82:75:ec:0f:1b:41:a8:52:b4:17:0c:
e5:83:86:ce:38:bf:d2:a8:bb:43:84:1d:4f:62:d9:e5:30:a4:
c5:d1:a8:4a:85:e1:0f:97:75:b9:e3:ef:c8:37:f4:c1:be:2c:
ef:05:e1:2c:d4:1c:02:d4:6b:2a:cb:e4:de:73:3d:e0:42:2c:
3a:ab:b3:9e:e7:85:92:21:4b:d2:8e:78:1b:32:3d:24:a8:9a:
45:1f:2c:ea:6d:55:a7:f5:55:38:0f:8b:df:7e:f7:f8:9a:99:
b9:10:73:dd:62:1d:6d:12:5a:03:cf:5c:8e:e4:61:cf:33:5e:
8a:cd:0b:69:f4:86:87:37:1d:46:79:cf:56:8c:f0:fe:9c:dc:
a7:d8:d4:ac:aa:a0:f9:74:27:18:59:4f:76:68:1f:b9:92:a1:
68:58:0a:e2:6c:e1:3f:fb:12:99:57:01:65:e1:48:f2:99:e8:
d8:5a:93:2f:65:d7:58:28:e7:82:48:71:16:5c:09:c6:89:fe:
4d:cf:e2:df:07:31:95:79:79:9d:c2:27:2f:ad:4f:da:cf:5e:
0f:c0:0b:86:6a:15:26:05:48:98:e8:11:2b:e7:c5:b2:b0:23:
42:0e:52:95:c7:3a:78:8b:6a:9f:ff:de:ed:cf:d0:c7:98:66:
73:52:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:50 2025 by rpki-client