Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/748FABB4849011EEB85F7368C4F9AE02.roa
File: 748FABB4849011EEB85F7368C4F9AE02.roa (raw, json)
Hash identifier: kcSFIm+j37epu7yAKtzNGX1uejJ3Ld05AF64c0nkpm8=
Subject key identifier: 42:44:E1:71:55:10:92:E5:F3:1A:94:AF:BC:E5:CB:6D:E6:CD:7D:A3
Certificate issuer: /CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Certificate serial: F0
Authority key identifier: AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/748FABB4849011EEB85F7368C4F9AE02.roa
Signing time: Fri 31 Jan 2025 04:49:23 +0000
ROA not before: Fri 31 Jan 2025 04:49:23 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 4820
IP address blocks: 203.3.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Validity
Not Before: Jan 31 04:49:23 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c5653-4e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:97:5a:d6:89:d7:74:9c:2b:ab:22:cb:cd:7d:
c2:7b:af:07:d9:6d:63:11:6f:c0:f1:e1:a9:85:89:
83:3a:fb:5f:ea:bd:12:07:f7:69:f3:03:42:ef:29:
29:44:22:0d:dd:6f:bb:5d:74:dd:37:f1:99:bf:87:
97:6e:87:66:36:57:d9:f2:3e:a7:56:bb:65:d5:0e:
55:1f:15:40:14:3a:cb:fa:47:af:8d:e3:1c:3d:a5:
0a:4f:fa:d8:07:36:fb:50:4e:c4:1b:74:70:e4:42:
86:3e:3d:cd:20:ce:c5:d4:e3:ce:9f:67:de:eb:6d:
d4:7b:5c:99:a4:96:3d:76:b7:16:6a:c8:90:6c:be:
7f:10:03:b6:21:2e:83:6b:68:13:b1:05:2b:61:6b:
7c:0b:8a:95:c6:87:9c:f3:9c:f3:54:fb:e9:1d:5c:
6b:79:db:87:96:ae:3b:41:2f:30:ad:32:34:b3:a2:
83:2d:22:3b:ff:cd:07:9e:76:48:21:53:d1:ea:3c:
df:0d:c5:14:74:ea:5c:19:e6:be:57:24:6b:d3:32:
af:c6:15:9b:8c:c2:7f:f8:10:a2:6c:70:c5:ad:de:
4b:0f:50:09:e4:c5:c5:00:fa:c3:93:cf:15:55:29:
0f:aa:b7:e6:d6:90:6d:33:17:0a:9a:6b:e2:96:c6:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:44:E1:71:55:10:92:E5:F3:1A:94:AF:BC:E5:CB:6D:E6:CD:7D:A3
X509v3 Authority Key Identifier:
keyid:AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/748FABB4849011EEB85F7368C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.176.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e1:8e:71:88:68:ce:67:27:22:8b:60:52:67:c2:ba:f2:96:
8d:1f:5f:fa:0d:d5:97:d1:41:d0:00:7f:5a:85:21:96:d9:56:
ce:c3:82:14:ce:ab:ee:6e:84:db:35:fe:2f:86:7a:67:1a:7b:
62:22:a1:92:43:28:67:68:6a:82:77:dc:9b:7a:e9:76:ef:aa:
cb:97:d9:a0:c1:aa:24:f6:4d:2a:20:71:9e:e4:22:60:93:ec:
51:7b:8d:3e:14:3a:0b:bf:c7:8c:2d:03:71:a2:8d:ec:f0:20:
e7:a8:bf:41:92:48:16:4d:84:30:e4:96:2d:e6:f2:ad:ec:d4:
84:95:13:57:6e:3c:86:35:3e:1f:72:d6:18:fa:d0:39:02:83:
fd:3e:e6:60:92:d3:98:6b:de:b6:c8:2c:b7:95:5f:be:f6:8c:
0d:b9:76:12:91:25:7a:52:13:50:91:ff:36:2f:47:61:3d:c1:
80:ec:b4:a7:2f:6f:70:12:1e:23:0f:62:cc:c5:cd:97:1f:79:
98:11:f4:4a:47:be:43:d9:5d:27:5d:97:a6:64:72:4f:dd:33:
72:ac:fd:1c:7c:c8:62:27:20:71:3c:13:8b:22:69:67:c8:30:
d2:b0:7e:d7:6e:72:86:f2:7c:93:22:5c:7c:28:4e:bf:28:85:
e4:7c:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:24:56 2025 by rpki-client