Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa
File: 18164B6AB2C811EFA702DF80C4F9AE02.roa (raw, json)
Hash identifier: 7UFK5IvMzRZ9oqAbFOWW72hTsQEiovxWyIoXLKQd8RE=
Subject key identifier: 65:82:F8:C5:47:99:57:94:A0:8B:8A:6A:9D:DC:AD:18:70:88:DC:8B
Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial: 02
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa
Signing time: Thu 05 Dec 2024 05:16:34 +0000
ROA not before: Thu 05 Dec 2024 05:16:34 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 203.34.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Validity
Not Before: Dec 5 05:16:34 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67513732-8584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:bf:b3:ce:30:51:d5:1c:cc:79:41:07:23:
92:be:5f:46:84:b6:9d:0c:1c:47:22:06:13:ed:cb:
42:b9:ab:5b:e1:1b:b1:cf:32:ef:d0:9d:2e:1f:cc:
7b:e2:51:a3:f3:3d:8a:fc:82:82:94:f7:ba:31:e4:
40:25:99:0a:b7:4a:c9:ec:bc:04:6a:70:5e:9e:0c:
23:15:d2:bc:2c:9c:2b:16:ca:d7:ed:ce:ea:2a:ab:
26:07:a7:c1:e0:9f:9c:40:c9:35:e5:dd:bf:88:3c:
90:5e:55:af:9d:ad:86:24:cc:46:99:07:1f:ca:fe:
3c:9b:a8:c9:24:07:e6:6c:0c:49:4f:63:20:43:4a:
8a:5c:90:6f:66:c0:5e:bb:2c:48:14:9a:ac:a5:47:
0b:2e:30:6d:83:85:45:b1:8b:0f:23:67:77:52:eb:
13:00:c8:14:7e:27:d3:e2:34:1d:0d:92:e3:0a:9e:
2b:03:e0:70:5a:0c:58:6c:97:f4:a6:cf:17:d3:06:
04:67:5a:01:72:b2:28:77:fa:7d:92:7d:54:d3:3d:
68:19:00:89:95:4b:14:09:3d:ea:c8:69:13:fa:b4:
1d:a1:82:52:70:0a:f7:04:1e:34:55:db:9a:37:aa:
43:51:fb:cc:6f:50:e2:27:c6:75:5e:56:8e:87:82:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:82:F8:C5:47:99:57:94:A0:8B:8A:6A:9D:DC:AD:18:70:88:DC:8B
X509v3 Authority Key Identifier:
keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:da:39:5f:48:24:70:6d:4d:50:1d:a8:bc:cc:fa:8e:59:28:
78:70:3b:ef:93:35:dc:c7:e1:3e:78:29:55:db:3b:84:fb:05:
ff:01:3d:a7:05:2d:f5:68:08:8e:47:d1:71:5f:d6:b8:39:5c:
e8:7f:cf:1a:76:72:84:92:9c:aa:b0:fc:42:7c:aa:57:65:65:
ec:f4:bb:d7:4e:9d:be:53:52:19:4a:46:68:f6:68:04:8e:cf:
48:b9:76:80:ab:88:14:0e:5a:ac:7f:e2:20:f8:99:1a:6c:d4:
7d:e3:f7:99:ad:0f:c2:eb:4b:a0:99:54:e2:2a:10:b1:e9:63:
d0:34:6e:49:ae:2e:a6:a7:30:57:fd:b7:e5:0a:a2:93:0e:91:
09:22:87:8b:79:8f:6c:75:c6:d3:8e:84:2a:60:65:3c:a4:92:
0f:34:cb:d4:89:44:6e:21:b0:0e:72:21:ae:04:a8:2f:e5:5f:
18:55:36:16:84:a9:01:6c:8d:f1:d7:1d:c3:1d:47:fe:f3:c8:
fe:61:b7:6f:4a:29:b8:dc:53:0c:58:5e:16:83:73:06:1f:18:
be:9e:17:8b:2e:0e:aa:ab:3a:df:34:5a:ca:53:68:6a:17:83:
7f:1f:b7:83:21:f8:2b:b1:69:8c:fd:bc:ae:d1:ff:f7:54:fe:
ef:cf:34:64
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MTdDRjExMC8GA1UEBRMoRUMzRDgwN0Y3OTNDOUNGNUZDRTMzNUVFMTVFMDk4NDQ0
OUI0MzA5NjAeFw0yNDEyMDUwNTE2MzRaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NTEzNzMyLTg1ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiw7+zzjBR1RzMeUEHI5K+X0aEtp0MHEciBhPty0K5q1vhG7HPMu/QnS4fzHvi
UaPzPYr8goKU97ox5EAlmQq3SsnsvARqcF6eDCMV0rwsnCsWytftzuoqqyYHp8Hg
n5xAyTXl3b+IPJBeVa+drYYkzEaZBx/K/jybqMkkB+ZsDElPYyBDSopckG9mwF67
LEgUmqylRwsuMG2DhUWxiw8jZ3dS6xMAyBR+J9PiNB0NkuMKnisD4HBaDFhsl/Sm
zxfTBgRnWgFysih3+n2SfVTTPWgZAImVSxQJPerIaRP6tB2hglJwCvcEHjRV25o3
qkNR+8xvUOInxnVeVo6Hgmw7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZYL4xUeZ
V5Sgi4pqndytGHCI3IswHwYDVR0jBBgwFoAU7D2Af3k8nPX84zXuFeCYREm0MJYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0NGL0I0MTU1NDU4QjJD
NzExRUY5MTZCQjY3RkM0RjlBRTAyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1K
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN0QyQWYzazhuUFg4NHpYdUZlQ1lSRW0wTUpZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTdDRi9CNDE1NTQ1OEIyQzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi8xODE2NEI2QUIy
QzgxMUVGQTcwMkRGODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMsi7TANBgkqhkiG9w0BAQsFAAOCAQEAnNo5X0gkcG1NUB2o
vMz6jlkoeHA775M13MfhPngpVds7hPsF/wE9pwUt9WgIjkfRcV/WuDlc6H/PGnZy
hJKcqrD8QnyqV2Vl7PS7106dvlNSGUpGaPZoBI7PSLl2gKuIFA5arH/iIPiZGmzU
feP3ma0PwutLoJlU4ioQselj0DRuSa4upqcwV/235Qqikw6RCSKHi3mPbHXG046E
KmBlPKSSDzTL1IlEbiGwDnIhrgSoL+VfGFU2FoSpAWyN8dcdwx1H/vPI/mG3b0op
uNxTDFheFoNzBh8Yvp4Xiy4Oqqs63zRaylNoaheDfx+3gyH4K7FpjP28rtH/91T+
7880ZA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:09:30 2025 by rpki-client