Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa
File: 63EBB7C6DDD311E8B6169878C4F9AE02.roa (raw, json)
Hash identifier: R2yXoda+8v4EKTUYZWQfzjjo3EZHnJ6pg9dQNLKqGJM=
Subject key identifier: A1:48:CA:B5:4E:57:0F:15:F9:87:75:49:7E:F5:09:C7:8A:08:58:66
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2994
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:27 +0000
ROA not before: Tue 31 Dec 2024 15:53:27 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 55476
IP address blocks: 202.80.233.0/24 maxlen: 24
2405:9800:c909::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10644 (0x2994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Dec 31 15:53:27 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741377-11a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:b9:55:40:95:5f:16:3e:f5:92:7f:ee:84:
d9:0c:94:47:76:16:f9:1c:b1:63:b6:00:79:9d:6c:
62:08:b4:f6:77:ea:b2:f9:39:c3:ac:29:42:2f:0d:
fd:49:50:d1:00:2b:ea:2f:98:51:09:54:56:e3:23:
ec:e0:22:a9:36:4c:40:e8:c5:fc:13:d5:6d:a8:78:
cf:d2:4e:a1:3a:5d:42:a3:e0:94:87:fa:3a:60:fe:
38:e9:d2:1a:9a:0f:2d:06:5c:25:55:3f:c3:a8:05:
0e:b8:d2:c9:c2:a5:45:e6:2a:b5:60:95:ec:08:5a:
8c:8a:a1:71:8e:7b:c0:da:9d:14:ed:74:83:8d:2f:
19:a4:31:31:1e:49:0f:49:9b:6f:6f:8a:02:ea:4b:
2b:a1:33:d5:a5:80:a7:24:38:40:d2:ef:74:d3:23:
9b:ae:91:b9:60:7e:e7:a5:90:00:50:f6:6c:29:27:
9d:c3:39:ef:9d:42:0e:b5:70:1f:6c:f4:97:62:0c:
a1:22:8d:76:a3:ff:ad:7f:42:b6:7b:7a:ba:06:72:
66:9a:a3:61:81:75:92:15:0a:d4:1f:cb:4a:cb:b3:
1f:f3:d4:94:a9:12:20:f6:66:6e:65:ed:e8:b0:07:
2d:28:b8:76:3f:9f:13:d9:07:b2:a2:8e:ac:ee:54:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:CA:B5:4E:57:0F:15:F9:87:75:49:7E:F5:09:C7:8A:08:58:66
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.80.233.0/24
IPv6:
2405:9800:c909::/48
Signature Algorithm: sha256WithRSAEncryption
06:a4:31:56:95:b4:6a:33:90:4f:24:5a:d6:31:2b:3e:94:07:
79:f2:29:ef:3f:e3:21:71:d1:ba:8c:36:50:f2:11:47:ea:0a:
f4:4a:16:9d:84:a3:2f:fc:77:c1:fc:ce:60:d0:cc:87:8e:ce:
1b:f6:34:18:22:ba:7c:de:9c:2a:70:c1:56:01:a4:f4:87:01:
fa:f0:e6:ef:31:28:36:64:c4:79:fb:63:51:c1:30:21:7b:90:
96:e0:59:49:f1:dc:f9:ea:8d:0a:8e:64:af:11:4c:b1:93:4f:
75:69:cc:c4:18:71:d5:c7:65:38:89:d4:30:51:70:9b:7b:2c:
dc:d0:33:4a:c3:71:cd:8c:c8:50:b9:40:0f:cb:32:75:22:25:
86:94:01:71:20:ed:5f:60:1c:2d:4a:0b:a4:72:01:5f:f5:66:
2d:2c:27:12:66:40:fd:88:be:c2:6f:cb:8c:a3:e4:f9:6b:39:
31:19:9a:8d:d2:72:48:ba:d9:5f:34:72:7f:33:f0:ec:66:d1:
ef:58:8d:c0:49:cd:3d:fb:13:59:2b:66:8a:b2:4f:77:32:2d:
eb:77:00:77:7d:24:09:73:63:c4:50:bc:64:a8:aa:13:ed:4a:
6f:ff:a6:f2:ec:0e:9e:36:48:8e:4c:14:ea:7d:7e:fc:5c:d0:
5f:ce:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:51 2025 by rpki-client