Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa
File: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (raw, json)
Hash identifier: d4YjT+wZz2FF52dbAjBXkm9vxrKKV8DOl0ST7TwKzd4=
Subject key identifier: 53:D0:46:AA:D6:BB:84:76:6C:42:3C:81:A7:09:6D:E4:C9:01:B0:14
Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial: 06C8
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa
Signing time: Sat 10 Feb 2024 22:30:30 +0000
ROA not before: Sat 10 Feb 2024 22:30:30 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 4826
IP address blocks: 203.30.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Validity
Not Before: Feb 10 22:30:30 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c7f905-a449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:4b:7d:ff:1c:0c:74:9e:22:d0:1e:3c:78:
4f:92:05:37:96:ac:a4:e9:48:21:bc:7f:48:64:7b:
55:df:c6:aa:10:8c:29:e9:80:05:de:23:b0:bd:d3:
7c:4a:dd:55:b7:64:c5:30:36:02:cc:79:b8:69:5d:
f0:1f:63:0d:5e:52:10:60:d0:be:8d:eb:ea:15:cb:
20:51:fe:94:14:13:f4:c1:75:57:22:7b:84:a0:7f:
5b:35:1b:9f:4e:98:03:65:ce:a0:a1:28:69:74:85:
ab:a8:39:8e:e0:ad:ff:9e:ce:30:b6:1e:5b:50:50:
27:2a:12:c3:8f:1b:5c:ac:03:3b:33:a3:fc:28:fb:
20:31:bc:17:ad:4f:9c:ee:dd:f6:b4:9e:08:d4:42:
5e:83:fe:dd:39:48:cc:af:e3:23:fb:a7:80:7e:7c:
03:df:40:6e:cf:44:48:7d:24:0c:aa:7a:7b:e1:87:
62:2e:8e:71:10:80:e6:2e:b8:19:fe:c2:1f:4d:43:
75:c2:56:09:3b:7e:36:5a:ca:c4:98:12:2c:94:64:
99:87:7b:d9:f7:1c:d7:69:09:59:6c:fb:8c:30:13:
df:12:05:25:b2:43:04:66:e6:dd:88:9c:6a:5d:93:
06:9c:1c:ef:b1:e1:04:82:40:85:f1:64:90:9b:06:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:46:AA:D6:BB:84:76:6C:42:3C:81:A7:09:6D:E4:C9:01:B0:14
X509v3 Authority Key Identifier:
keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.30.229.0/24
Signature Algorithm: sha256WithRSAEncryption
68:40:f7:4c:78:94:ef:98:89:3c:b7:35:ad:78:88:b7:8b:23:
2a:43:69:84:ce:01:ed:75:49:7a:b9:d5:2b:0e:2c:7a:cd:3f:
e2:d9:09:01:4d:93:ad:fe:7f:5f:f8:55:27:de:7e:fa:5f:e4:
8b:3b:72:38:48:3d:b4:3a:f9:9e:e5:34:73:62:22:da:04:9a:
f9:c5:a1:67:2f:5b:e3:bb:77:86:c9:3c:10:c1:7f:6d:b5:f9:
cc:ea:46:f9:9b:4e:d6:35:62:e2:15:79:75:78:99:b9:47:f4:
27:fe:8c:71:c1:6c:c2:1d:db:e3:3a:e6:a8:c5:0d:b9:a5:c3:
36:4f:2b:ba:cc:dc:b8:8b:2f:f9:38:3f:5b:f6:26:1c:17:c5:
c7:e7:6d:3c:3c:ac:ed:ab:2a:38:df:7b:ea:d8:d0:d0:20:df:
9f:b9:f1:13:9f:46:5c:9c:31:b7:7c:94:58:90:2d:ad:0a:14:
ec:64:cc:4f:e9:6f:23:df:64:1b:d2:88:df:52:84:6f:1f:e4:
8d:dd:27:8f:05:d4:30:f3:c4:37:bf:f5:35:96:20:14:e4:da:
a7:d6:f0:73:7f:fc:8c:02:c2:4a:f3:24:01:7d:69:39:e2:ff:
f1:01:e7:2e:2c:82:d1:38:49:c6:72:7b:17:fb:8b:48:08:39:
e8:f4:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:26 2025 by rpki-client