Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
File: 74D48D868CED11EF820CF762C4F9AE02.roa (raw, json)
Hash identifier: lEKcqkGGYKFU4hSf3vJKxp5n9BmHjN5M8357AH3FFg8=
Subject key identifier: 82:78:24:69:D1:1C:31:FF:E3:36:AE:2E:63:D3:1B:F6:FA:D6:D2:F9
Certificate issuer: /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial: 14
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
Signing time: Fri 08 Nov 2024 04:14:40 +0000
ROA not before: Fri 08 Nov 2024 04:14:40 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 24046
IP address blocks: 203.10.25.0/24 maxlen: 24
203.10.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Validity
Not Before: Nov 8 04:14:40 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672d9030-f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:8c:24:b2:bf:15:47:50:d6:dd:85:7d:59:
56:48:fd:f3:85:24:fe:d2:7f:eb:16:a3:9e:ff:0d:
05:ac:2d:3a:19:cc:84:62:75:e9:dd:f4:cc:2a:11:
24:e2:65:c7:9c:cf:93:2a:ef:4f:fb:5d:85:0f:60:
5a:80:62:be:bc:62:d6:a2:b9:6a:26:e6:8d:e1:37:
1c:7a:55:2c:d2:a9:0f:e6:47:3b:33:58:11:f3:4e:
f7:a1:7c:1a:c8:44:6b:ad:6f:bf:41:c7:a0:db:13:
53:6e:07:a6:c3:b5:7b:4c:b7:ef:05:ce:0f:1e:8d:
69:94:af:43:79:fa:41:f4:aa:23:a2:35:19:06:fa:
09:d3:fc:90:71:6c:d1:69:8d:7d:53:44:ce:3d:03:
6e:78:80:ab:35:a6:cb:8f:e0:50:bf:fc:6c:78:b3:
05:28:65:ed:2e:20:92:ab:4c:b7:ba:8b:61:38:3a:
d7:1a:15:07:6c:d4:9d:1d:b5:78:65:86:ec:4d:9b:
54:a7:a8:ba:a9:ff:80:6e:12:38:69:0f:40:8f:d9:
28:86:11:d3:4e:0d:1d:7d:bd:c7:8e:26:e8:b5:77:
12:fe:6f:d5:54:df:8b:de:3f:f3:7b:47:8d:fe:56:
9e:18:89:ee:cc:c4:75:cb:17:6e:5a:42:39:4d:e8:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:78:24:69:D1:1C:31:FF:E3:36:AE:2E:63:D3:1B:F6:FA:D6:D2:F9
X509v3 Authority Key Identifier:
keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.10.25.0/24
203.10.31.0/24
Signature Algorithm: sha256WithRSAEncryption
99:95:23:78:9f:68:93:1e:aa:78:10:94:6e:8a:f1:9b:a2:cc:
9b:5f:e7:19:26:1a:f2:d5:a0:96:5b:38:97:29:6c:e2:b9:13:
c3:33:9a:7e:6b:12:c7:94:47:1b:18:46:77:65:36:51:78:b8:
7f:31:15:ab:7f:7b:6f:4f:98:b3:51:34:a0:07:47:ec:26:49:
e8:bb:de:82:22:5d:48:3a:8d:c3:3c:d3:49:ec:c7:98:24:35:
76:10:c5:6b:58:50:85:fa:b0:31:c9:56:c5:e4:f8:bb:45:56:
ad:be:87:cc:c4:0f:7c:40:7a:33:96:28:fc:1c:50:88:4c:be:
e1:26:f6:11:98:36:90:e1:bd:88:1c:80:06:42:30:18:5e:44:
a8:e8:51:79:36:5a:18:6f:c9:ff:18:f5:ec:1d:6f:65:7e:88:
f4:33:ac:4f:20:0f:dc:e5:60:5e:62:8f:99:21:54:e7:4c:8b:
3a:f2:db:72:fc:be:36:0e:72:11:cd:65:47:5c:11:49:b9:40:
f2:ae:39:3e:15:f3:6e:dc:bc:e7:c4:ab:45:49:9c:4f:64:6f:
f4:11:ee:80:a9:cf:6d:91:97:d8:2f:74:bd:67:6a:1b:70:1e:
d2:1d:e1:33:2f:09:fc:3e:6d:ba:7f:71:48:2f:c4:68:59:6d:
92:8b:10:f2
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
ODYwQTExMC8GA1UEBRMoNjU2MjcxMTJFQUU3QjJDOTJGODlGN0E3OEE3MUEyQTRG
QTk1RjUzRDAeFw0yNDExMDgwNDE0NDBaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MmQ5MDMwLWY5ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQeIwksr8VR1DW3YV9WVZI/fOFJP7Sf+sWo57/DQWsLToZzIRidend9MwqESTi
Zcecz5Mq70/7XYUPYFqAYr68YtaiuWom5o3hNxx6VSzSqQ/mRzszWBHzTvehfBrI
RGutb79Bx6DbE1NuB6bDtXtMt+8Fzg8ejWmUr0N5+kH0qiOiNRkG+gnT/JBxbNFp
jX1TRM49A254gKs1psuP4FC//Gx4swUoZe0uIJKrTLe6i2E4OtcaFQds1J0dtXhl
huxNm1SnqLqp/4BuEjhpD0CP2SiGEdNODR19vceOJui1dxL+b9VU34veP/N7R43+
Vp4Yie7MxHXLF25aQjlN6ArtAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUgngkadEc
Mf/jNq4uY9Mb9vrW0vkwHwYDVR0jBBgwFoAUZWJxEurnsskvifeninGipPqV9T0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NjBBL0I1MEEzQzI0OEI1
NDExRUY5NDc0NzI0OUM0RjlBRTAyL1pXSnhFdXJuc3NrdmlmZW5pbkdpcFBxVjlU
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWldKeEV1cm5zc2t2aWZlbmluR2lwUHFWOVQwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODYwQS9CNTBBM0MyNDhCNTQxMUVGOTQ3NDcyNDlDNEY5QUUwMi83NEQ0OEQ4NjhD
RUQxMUVGODIwQ0Y3NjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAMsKGQMEAMsKHzANBgkqhkiG9w0BAQsFAAOCAQEAmZUjeJ9o
kx6qeBCUborxm6LMm1/nGSYa8tWglls4lyls4rkTwzOafmsSx5RHGxhGd2U2UXi4
fzEVq397b0+Ys1E0oAdH7CZJ6LvegiJdSDqNwzzTSezHmCQ1dhDFa1hQhfqwMclW
xeT4u0VWrb6HzMQPfEB6M5Yo/BxQiEy+4Sb2EZg2kOG9iByABkIwGF5EqOhReTZa
GG/J/xj17B1vZX6I9DOsTyAP3OVgXmKPmSFU50yLOvLbcvy+Ng5yEc1lR1wRSblA
8q45PhXzbty858SrRUmcT2Rv9BHugKnPbZGX2C90vWdqG3Ae0h3hMy8J/D5tun9x
SC/EaFltkosQ8g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:23:53 2025 by rpki-client