Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/588BD7269A1211E8B97A623AC4F9AE02.roa
File: 588BD7269A1211E8B97A623AC4F9AE02.roa (raw, json)
Hash identifier: KVkyGHEDYe6UG/J4dXnzUoXIppIbCqNkEnIga+9tHI8=
Subject key identifier: C6:A3:39:AD:0E:B8:2F:45:34:97:E0:4D:77:69:A9:5E:96:18:A3:0A
Certificate issuer: /CN=A914F2EC/serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B
Certificate serial: 33B2
Authority key identifier: D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/588BD7269A1211E8B97A623AC4F9AE02.roa
Signing time: Sat 16 Mar 2024 15:20:52 +0000
ROA not before: Sat 16 Mar 2024 15:20:52 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 45770
IP address blocks: 203.14.183.0/24 maxlen: 24
2001:df0:96::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13234 (0x33b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F2EC/serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B
Validity
Not Before: Mar 16 15:20:52 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f5b8d3-d211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:7e:13:8e:4e:c4:a1:bc:30:2f:41:fc:73:
e1:ee:a8:81:9e:3a:db:0a:7c:67:eb:a0:c4:a1:9e:
c7:51:11:6c:cb:1c:aa:91:fe:00:aa:3a:30:bb:c7:
40:93:c6:c7:44:e4:d8:34:c4:ad:48:f8:54:b4:1c:
8d:70:88:6b:81:3a:9a:b3:2d:e8:62:86:31:03:07:
2b:fa:94:92:99:38:23:75:38:ae:31:c7:ed:94:12:
c6:e0:8b:44:2e:3e:f0:1d:39:4b:92:fc:ac:37:d9:
b1:31:4e:f7:0c:12:6c:f6:c0:ff:e2:11:75:05:24:
f2:e9:6e:e8:06:ed:ac:28:df:bb:73:7a:08:51:f3:
d3:01:1e:50:98:69:49:7d:6f:0b:52:56:e6:43:55:
aa:fd:c8:df:c5:93:9b:f9:97:84:43:d4:7a:bf:c5:
09:5a:dd:9c:29:28:cd:87:3f:2f:59:5e:8b:03:b4:
26:2e:09:e6:4b:39:da:b5:7b:35:09:82:be:48:64:
99:34:2f:2e:97:47:65:81:33:0e:92:9c:70:7b:e8:
bf:05:81:ef:27:86:bb:74:96:c9:08:98:a8:bc:38:
70:af:8f:ce:a3:6f:6d:03:c1:2d:1d:ab:97:b3:40:
50:45:71:21:06:e1:38:16:4c:90:34:45:58:4d:e4:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A3:39:AD:0E:B8:2F:45:34:97:E0:4D:77:69:A9:5E:96:18:A3:0A
X509v3 Authority Key Identifier:
keyid:D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/588BD7269A1211E8B97A623AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.183.0/24
IPv6:
2001:df0:96::/48
Signature Algorithm: sha256WithRSAEncryption
29:1c:c8:aa:7f:c8:f3:61:07:c4:dc:f6:9d:a8:92:cc:5d:11:
20:8a:10:27:43:c9:c6:f1:31:3e:51:9e:94:5e:da:ca:2f:29:
0b:cb:49:73:83:7e:32:7d:1a:51:fb:3d:1e:8b:c9:c9:a9:bf:
a5:ed:5c:78:d5:31:70:78:b3:9f:c0:16:21:87:1e:39:f4:09:
aa:2b:08:66:9b:b0:ed:4a:7f:d5:8c:44:17:49:de:69:35:d2:
fb:8a:6a:b8:ff:13:13:22:96:8d:a3:41:7c:4b:a3:44:b0:a2:
bf:85:87:5c:7d:a1:f1:2c:2a:38:8a:c6:88:93:e2:8b:f5:81:
e0:01:71:8a:96:7d:81:f4:ee:d8:4c:8c:c2:35:92:d9:14:60:
a6:93:4a:ed:ea:6a:7a:cb:cf:08:f3:b1:0e:05:e8:2e:5e:64:
ca:09:61:a8:bd:ae:ad:10:a1:cd:57:96:fd:95:b7:02:8f:df:
4d:c8:6b:1a:1e:9d:0a:be:fe:09:db:a1:fc:82:1f:40:72:22:
4e:7a:d6:91:77:9e:36:ca:19:e8:23:c2:fe:10:e6:57:a6:b8:
fd:a6:fa:b0:45:a0:5a:e8:98:65:35:b0:aa:1f:ec:70:5b:ed:
9d:b5:e3:d0:84:c2:fd:5d:24:8f:09:57:55:96:79:fc:11:54:
7e:0f:81:01
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICM7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEYyRUMxMTAvBgNVBAUTKEQ5MDg2QjBERjkzNDJEQzJCMDkxQkFFODZDQjc3OUZD
NjI1OUJEN0IwHhcNMjQwMzE2MTUyMDUyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NWY1YjhkMy1kMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4SR+E45OxKG8MC9B/HPh7qiBnjrbCnxn66DEoZ7HURFsyxyqkf4Aqjowu8dA
k8bHROTYNMStSPhUtByNcIhrgTqasy3oYoYxAwcr+pSSmTgjdTiuMcftlBLG4ItE
Lj7wHTlLkvysN9mxMU73DBJs9sD/4hF1BSTy6W7oBu2sKN+7c3oIUfPTAR5QmGlJ
fW8LUlbmQ1Wq/cjfxZOb+ZeEQ9R6v8UJWt2cKSjNhz8vWV6LA7QmLgnmSznatXs1
CYK+SGSZNC8ul0dlgTMOkpxwe+i/BYHvJ4a7dJbJCJiovDhwr4/Oo29tA8EtHauX
s0BQRXEhBuE4FkyQNEVYTeR4twIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMajOa0O
uC9FNJfgTXdpqV6WGKMKMB8GA1UdIwQYMBaAFNkIaw35NC3CsJG66Gy3efxiWb17
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjJFQy9ENThBMjI2QzFE
OUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExjS3drYnJvYkxkNV9HSlp2
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJRaHJEZmswTGNLd2ticm9iTGQ1X0dKWnZYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEYyRUMvRDU4QTIyNkMxRDlDMTFFMjlCQzNCMjhCMDhCMDJDRDIvNTg4QkQ3MjY5
QTEyMTFFOEI5N0E2MjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBADLDrcwDwQCAAIwCQMHACABDfAAljANBgkqhkiG9w0BAQsF
AAOCAQEAKRzIqn/I82EHxNz2naiSzF0RIIoQJ0PJxvExPlGelF7ayi8pC8tJc4N+
Mn0aUfs9HovJyam/pe1ceNUxcHizn8AWIYceOfQJqisIZpuw7Up/1YxEF0neaTXS
+4pquP8TEyKWjaNBfEujRLCiv4WHXH2h8SwqOIrGiJPii/WB4AFxipZ9gfTu2EyM
wjWS2RRgppNK7epqesvPCPOxDgXoLl5kyglhqL2urRChzVeW/ZW3Ao/fTchrGh6d
Cr7+Cduh/IIfQHIiTnrWkXeeNsoZ6CPC/hDmV6a4/ab6sEWgWuiYZTWwqh/scFvt
nbXj0ITC/V0kjwlXVZZ5/BFUfg+BAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:15 2025 by rpki-client