Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/4156CE4E8B8811EF99CAC23CC4F9AE02.roa
File: 4156CE4E8B8811EF99CAC23CC4F9AE02.roa (raw, json)
Hash identifier: aC5CXVsf3TUJUqObfYO8YqGBcyfi/oOuuM/n6aK5tiE=
Subject key identifier: 52:9C:89:13:54:04:03:6E:9F:0F:37:80:B2:BC:15:96:98:26:84:03
Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial: 0131
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/4156CE4E8B8811EF99CAC23CC4F9AE02.roa
Signing time: Wed 16 Oct 2024 06:31:20 +0000
ROA not before: Wed 16 Oct 2024 06:31:20 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 7483
IP address blocks: 203.57.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Validity
Not Before: Oct 16 06:31:20 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=670f5db8-8e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:34:12:0d:8f:1d:67:8c:73:ea:1b:d6:9a:
12:cc:57:ee:eb:d9:07:1a:6b:90:7a:d3:4e:c8:37:
6f:98:15:f3:a5:44:99:34:0e:f5:1a:70:49:5d:1b:
50:45:55:db:19:0a:39:02:d1:db:77:8b:f2:fa:65:
bc:8a:01:f7:7e:08:e7:3e:5d:c0:94:68:b5:e1:55:
bf:ce:0b:79:0b:88:55:53:db:45:dc:13:89:c5:4e:
39:ca:a4:ac:a8:7b:e3:06:40:9f:02:eb:b5:2f:99:
e1:0e:0b:d1:05:73:c1:bd:bc:08:50:30:84:80:7d:
05:0c:0b:fc:67:5f:b7:aa:62:43:f2:68:bf:28:ea:
01:bf:55:36:0a:f1:dc:3e:14:62:ca:03:9f:64:56:
da:19:cb:0a:d9:fe:9b:14:a9:dd:62:0c:80:24:1e:
db:6b:10:af:a2:46:ea:39:74:74:c1:b9:34:da:4f:
47:d4:68:b3:e6:53:f2:97:e3:dd:df:4e:0f:8c:01:
5d:37:13:73:2a:26:a3:16:8c:7c:d3:53:56:78:28:
23:d7:bd:74:6d:17:56:2c:be:b9:6a:83:d0:f0:15:
ed:7a:72:d5:39:0b:7b:f5:88:50:dc:3f:3f:7a:e3:
4a:3f:4e:d3:c0:a1:c0:f8:a9:a2:ce:b6:aa:fd:3b:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:89:13:54:04:03:6E:9F:0F:37:80:B2:BC:15:96:98:26:84:03
X509v3 Authority Key Identifier:
keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/4156CE4E8B8811EF99CAC23CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.57.34.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8e:d6:6d:32:43:7e:1e:c6:13:98:f0:d5:d3:d6:f0:21:ad:
1a:67:1d:55:3e:35:a3:91:e1:95:1f:17:0b:91:a0:6e:78:e8:
47:e5:32:4c:82:b3:e2:13:5c:96:33:b4:9d:67:58:3e:e3:29:
a8:7e:a7:1b:c9:40:6b:f5:97:94:1a:ce:a1:e7:e1:9a:02:6c:
78:92:16:9e:98:90:49:06:24:88:1d:a4:bf:bd:a5:a2:fc:0c:
cf:76:99:1c:a1:42:d5:1e:2d:80:c8:d0:1f:a6:66:c1:84:e1:
a9:4f:f9:2e:64:7a:14:a2:df:37:d4:3f:f6:f3:12:44:2d:92:
f4:7a:7f:f9:9c:1f:9e:22:d4:4d:22:75:70:72:ff:85:64:7e:
df:dd:28:cb:f5:70:2e:44:0d:56:b2:36:88:db:47:68:aa:39:
d7:11:4d:50:b9:73:a6:23:fb:e6:9f:59:5b:11:12:9c:92:e2:
c3:ef:4e:84:78:c1:68:c5:2e:ca:2d:03:aa:75:7a:8a:63:17:
c8:02:67:3a:70:3d:7a:cc:54:5c:a4:4f:8d:9b:d1:f8:2c:7b:
b1:e9:dc:cc:f5:32:0c:f9:e6:94:53:0a:f6:8d:81:46:94:7c:
5c:16:db:01:cf:e6:57:66:09:67:77:d1:9e:5e:dd:52:66:b3:
7b:35:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:22:42 2025 by rpki-client