Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/FA0FC12E869E11EE9FAC6784C4F9AE02.roa
File: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (raw, json)
Hash identifier: V4QPgu3zjTh1ZjDu4R2dcCzkveFmbrdSQ5O0sl9cGCQ=
Subject key identifier: 78:C4:84:09:F3:5A:F3:03:F2:69:43:22:A0:E4:CF:26:FE:50:4E:7B
Certificate issuer: /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial: D7
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/FA0FC12E869E11EE9FAC6784C4F9AE02.roa
Signing time: Tue 31 Dec 2024 04:17:55 +0000
ROA not before: Tue 31 Dec 2024 04:17:55 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 132275
IP address blocks: 203.175.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Validity
Not Before: Dec 31 04:17:55 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67737072-d4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:4a:e0:53:bc:40:10:a4:bf:2a:49:5a:41:
35:e0:84:da:39:eb:63:57:1e:18:7d:df:06:58:71:
a7:f4:4c:42:2d:ae:b3:38:47:a8:63:6e:72:c5:0f:
26:88:50:7d:3f:a2:2d:81:38:67:5f:38:b2:65:5d:
16:86:3b:24:0b:2b:82:a8:4b:f6:77:6e:c8:a0:df:
19:cb:70:90:ac:e2:c1:ee:5d:74:46:5b:8a:38:bd:
1b:b3:a5:9d:e6:cd:7c:ff:78:fa:8d:30:2e:ea:0d:
fb:93:65:89:79:4b:b9:b3:80:c9:7b:93:bf:d9:23:
19:2c:01:f0:50:a0:fa:23:8b:21:34:11:8d:e1:7c:
91:c7:1c:8c:57:8a:08:9e:3f:24:bf:90:c7:58:2d:
7c:92:eb:8d:7f:b0:de:aa:42:2f:cc:46:e0:d2:5c:
b7:1b:60:76:00:ce:d2:7b:42:21:c4:9e:e2:87:e8:
21:83:31:b2:ae:3d:16:63:cb:ee:2d:f1:11:a0:8d:
0a:92:50:92:3a:67:f0:b2:13:23:36:9d:8d:05:92:
e0:b5:a6:d3:de:45:ed:6a:20:21:cc:ff:5f:5a:57:
b6:e8:41:7f:05:89:74:a8:98:af:6e:44:36:cc:bd:
db:d5:22:27:e0:2c:6f:7b:9c:76:cf:67:f6:6c:6f:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:84:09:F3:5A:F3:03:F2:69:43:22:A0:E4:CF:26:FE:50:4E:7B
X509v3 Authority Key Identifier:
keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/FA0FC12E869E11EE9FAC6784C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.108.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ee:a3:30:4d:27:85:9d:33:7d:4d:24:3d:7c:72:e7:fa:f5:
af:f0:2c:d8:6a:87:a4:f4:fa:e9:6b:78:f0:b6:38:0d:34:d3:
21:7a:b0:6b:56:65:45:38:ad:90:96:bc:36:c0:49:5d:75:7c:
ae:cd:6d:08:be:28:a0:41:ee:1b:8d:8e:93:41:0f:a2:16:8a:
74:85:ac:b8:aa:18:af:5f:46:eb:d0:f5:13:da:c1:1e:aa:c7:
88:38:ec:54:ea:da:7f:75:6b:1d:6a:84:9a:5b:1b:d4:b7:07:
dc:83:70:db:4d:58:0e:ce:37:eb:9c:93:11:a5:a6:a2:25:89:
f2:9d:f9:ae:7b:d8:96:6e:45:ef:42:cb:2f:b9:f3:3c:f1:12:
b0:49:77:45:8b:13:02:0f:ca:41:14:90:03:46:25:d6:70:31:
a6:d4:8b:ef:f7:76:72:8e:3a:50:14:3a:95:4f:4f:cc:46:6d:
9f:e6:28:64:c2:4f:46:47:d5:a2:1d:0d:c2:40:9b:83:44:92:
47:d3:09:74:77:fa:64:fc:a6:d9:35:c9:bd:6d:e4:28:3d:32:
f0:d2:e1:64:f3:5c:c3:28:ab:dd:67:22:9b:19:4b:1c:fb:85:
f7:7e:92:65:f5:88:36:e3:c8:21:47:93:7c:40:f7:78:b8:b1:
68:fc:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:56:55 2025 by rpki-client