Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
File: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (raw, json)
Hash identifier: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw=
Subject key identifier: 69:6E:6C:8C:88:22:DD:2A:D1:63:83:09:34:B6:4F:77:68:23:40:E3
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 0740
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
Signing time: Tue 12 Nov 2024 21:19:52 +0000
ROA not before: Tue 12 Nov 2024 21:19:52 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 7545
IP address blocks: 203.4.197.0/24 maxlen: 24
203.4.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Validity
Not Before: Nov 12 21:19:52 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6733c678-a481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:27:97:4b:f5:28:92:03:67:81:04:81:e2:
6b:6c:cd:d0:11:a2:2e:54:d9:83:4c:be:66:4a:a1:
19:75:12:b5:cd:ba:ca:06:36:7c:3a:c7:75:61:17:
d4:29:0e:26:46:a6:bb:13:24:d4:b0:f3:77:6a:12:
2c:da:32:53:25:98:09:9e:34:27:56:74:f5:9e:4e:
52:38:22:28:1b:3c:79:ae:8a:c0:e9:a1:ba:53:d4:
a7:9a:0c:47:d0:bc:6a:53:42:71:05:a2:fd:6d:78:
8e:2b:86:25:af:c7:ea:56:d3:65:4e:8e:42:7b:13:
c3:d8:9a:c0:9f:07:03:08:c4:d2:77:1f:c2:69:4e:
5f:91:e2:bf:3b:a6:1a:b3:99:df:87:71:b0:bc:f0:
f7:bd:8a:f5:76:bf:41:88:da:e2:51:99:59:2b:23:
da:dd:65:f5:88:7d:3e:5a:c0:12:9d:89:ff:ff:48:
fb:0f:49:d5:72:2c:8d:ad:17:e1:16:12:51:fd:9f:
31:b8:2e:a9:ac:15:cb:1a:e8:ad:df:9b:ba:47:e7:
53:8f:fb:60:08:2d:05:9b:7c:b3:ab:d2:34:b2:12:
a5:1d:8c:fd:66:cf:f6:8e:75:38:e9:c8:ae:a7:5e:
f4:96:59:31:7c:33:ae:d2:44:89:98:be:27:de:b7:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:6C:8C:88:22:DD:2A:D1:63:83:09:34:B6:4F:77:68:23:40:E3
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.4.197.0-203.4.198.255
Signature Algorithm: sha256WithRSAEncryption
a1:96:76:81:06:07:ad:66:04:c0:08:83:c0:46:33:47:90:16:
14:56:e8:d9:46:77:40:58:f3:68:00:af:81:a9:b1:bf:8c:9d:
f3:52:93:fd:8e:2e:df:44:70:fc:18:54:b5:de:93:a7:3c:de:
3d:2e:5b:d7:0c:ca:3d:8d:64:87:26:fa:25:dc:6c:ea:eb:be:
a6:08:86:c8:cd:4f:14:36:42:e9:b2:c2:cd:3d:92:8c:e7:0a:
09:31:85:c9:83:b6:19:89:5b:59:14:1a:85:ad:bb:41:7c:8d:
61:92:e4:05:0b:49:0f:24:71:0e:c2:5b:db:a2:29:7f:6f:97:
15:d2:d3:a0:50:4e:11:5b:a8:98:49:56:3d:e1:c0:59:5d:02:
fc:5f:a3:f6:81:67:09:b9:05:04:e1:eb:fd:0b:06:ef:23:0d:
b7:93:ec:97:41:9d:ad:21:fc:31:40:51:27:db:71:58:ce:3d:
0b:a1:80:42:f1:d3:bc:c3:f9:d5:d7:06:22:c9:d6:c9:f1:9f:
4c:a2:7c:93:cf:eb:97:97:3c:84:48:eb:a7:df:db:c0:eb:e3:
f3:4e:e4:0c:c5:3f:14:7e:3f:6f:ca:67:c9:8c:c2:fd:29:a5:
8b:4c:e0:f8:e3:4d:a0:95:51:51:49:85:b2:32:7d:d0:46:7d:
20:20:4d:ea
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF
RkFCMzExODYwHhcNMjQxMTEyMjExOTUyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzMzYzY3OC1hNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAomEnl0v1KJIDZ4EEgeJrbM3QEaIuVNmDTL5mSqEZdRK1zbrKBjZ8Osd1YRfU
KQ4mRqa7EyTUsPN3ahIs2jJTJZgJnjQnVnT1nk5SOCIoGzx5rorA6aG6U9SnmgxH
0LxqU0JxBaL9bXiOK4Ylr8fqVtNlTo5CexPD2JrAnwcDCMTSdx/CaU5fkeK/O6Ya
s5nfh3GwvPD3vYr1dr9BiNriUZlZKyPa3WX1iH0+WsASnYn//0j7D0nVciyNrRfh
FhJR/Z8xuC6prBXLGuit35u6R+dTj/tgCC0Fm3yzq9I0shKlHYz9Zs/2jnU46ciu
p170llkxfDOu0kSJmL4n3rc9uwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFGlubIyI
It0q0WODCTS2T3doI0DjMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4
MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODE0RTkvRkU1N0MyQkMwODMwMTFFQkJGRTRDNzMyQzRGOUFFMDIvMjRENEY5RjBF
NjFCMTFFQkJBRTM1NzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAMsExQMEAMsExjANBgkqhkiG9w0BAQsFAAOCAQEAoZZ2
gQYHrWYEwAiDwEYzR5AWFFbo2UZ3QFjzaACvgamxv4yd81KT/Y4u30Rw/BhUtd6T
pzzePS5b1wzKPY1khyb6Jdxs6uu+pgiGyM1PFDZC6bLCzT2SjOcKCTGFyYO2GYlb
WRQaha27QXyNYZLkBQtJDyRxDsJb26Ipf2+XFdLToFBOEVuomElWPeHAWV0C/F+j
9oFnCbkFBOHr/QsG7yMNt5Psl0GdrSH8MUBRJ9txWM49C6GAQvHTvMP51dcGIsnW
yfGfTKJ8k8/rl5c8hEjrp9/bwOvj807kDMU/FH4/b8pnyYzC/Smli0zg+ONNoJVR
UUmFsjJ90EZ9ICBN6g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:13 2025 by rpki-client