Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa
File: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (raw, json)
Hash identifier: CYb1AUfDdwBmZIiw43Uzz4pNurCcroPrczZ8tZZSS/s=
Subject key identifier: 63:73:3B:18:0B:73:DF:0E:4A:1E:6C:AE:55:D7:16:72:BA:22:DB:02
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0408
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa
Signing time: Wed 18 Dec 2024 11:07:24 +0000
ROA not before: Wed 18 Dec 2024 11:07:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 202656
IP address blocks: 203.32.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032 (0x408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Dec 18 11:07:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6762acec-8d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:ba:05:33:d2:d3:f4:d9:05:b4:4b:d3:d8:
ea:a4:35:b7:ed:6a:10:3a:92:9a:1a:a0:8d:07:36:
f2:95:5e:c5:2f:7c:32:b1:ff:34:d3:05:57:0e:60:
25:f0:6e:40:55:0c:83:89:7d:e6:5a:a9:64:84:5e:
1b:99:9e:87:b9:c2:44:0d:47:e3:d9:9d:17:20:98:
d3:31:f2:1d:ee:2b:e8:25:4c:83:97:39:73:a0:35:
94:08:66:6b:14:6f:05:08:54:51:8e:25:cf:ac:0f:
87:a2:7c:76:24:d4:bb:44:d2:41:96:2b:a8:58:24:
38:18:60:7b:63:d2:14:3b:fa:db:eb:fe:b7:a2:ba:
f6:53:7a:4e:20:c4:0f:57:23:f6:c2:f7:b8:00:a8:
d1:48:3a:4a:73:f7:e3:7b:7d:38:da:34:8d:b2:b3:
bb:38:23:39:82:74:44:bd:e0:86:5d:58:cd:5e:3d:
a1:bf:9f:5c:d1:ea:48:b9:7b:82:24:4f:da:81:61:
ed:d0:0e:f6:e6:c8:50:06:94:24:c5:59:57:39:d9:
9a:34:b7:07:86:af:57:89:b0:39:83:5b:de:0b:58:
7f:9a:a4:bf:52:e3:49:10:72:72:cc:42:58:03:e8:
f0:57:86:28:b2:b3:9a:0e:88:7d:09:22:ba:2d:f3:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:3B:18:0B:73:DF:0E:4A:1E:6C:AE:55:D7:16:72:BA:22:DB:02
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.23.0/24
Signature Algorithm: sha256WithRSAEncryption
84:29:1e:f6:5d:67:71:89:27:d4:34:d0:f7:ac:12:a8:ab:7b:
17:c0:ed:e6:4b:ec:65:0c:3f:ce:d4:88:39:d1:92:72:23:31:
da:26:cd:5e:d2:76:37:ee:31:be:37:fa:fa:3f:e2:1a:a8:98:
3f:db:d6:62:7b:f0:7a:ba:b4:f3:56:8b:8b:03:a2:94:1a:75:
b3:4a:13:47:bb:6b:4e:1d:7f:6d:ea:73:74:15:4d:b5:87:e0:
a5:f7:a8:12:fa:ce:c6:04:eb:32:de:e9:7e:b3:3a:bc:8f:b7:
ac:a3:68:06:d8:2e:29:c9:b3:a1:cb:9e:a0:6e:fb:78:70:10:
4e:0a:3a:e2:49:4a:98:63:2b:31:5a:4f:5b:8f:69:23:39:94:
70:76:40:2f:2f:85:bd:f4:03:83:25:59:dc:b3:f7:5c:f1:5a:
37:3c:95:a0:13:14:cb:45:6b:a6:50:0b:57:a9:cf:d5:eb:ab:
3d:17:a0:ea:11:67:9f:c5:f3:1a:e4:51:e0:a8:ff:78:8b:41:
40:7e:ca:99:05:12:ca:12:bc:23:40:24:f6:ee:f6:32:3b:9d:
39:5b:8a:a6:61:75:3f:47:95:9d:9f:06:e6:b1:f0:27:65:e0:
78:ac:35:58:ba:e8:3c:2e:e9:d0:d6:e7:11:f7:d2:c2:3a:cd:
fd:b7:66:27
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjQxMjE4MTEwNzI0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzYyYWNlYy04ZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx526BTPS0/TZBbRL09jqpDW37WoQOpKaGqCNBzbylV7FL3wysf800wVXDmAl
8G5AVQyDiX3mWqlkhF4bmZ6HucJEDUfj2Z0XIJjTMfId7ivoJUyDlzlzoDWUCGZr
FG8FCFRRjiXPrA+Honx2JNS7RNJBliuoWCQ4GGB7Y9IUO/rb6/63orr2U3pOIMQP
VyP2wve4AKjRSDpKc/fje3042jSNsrO7OCM5gnREveCGXVjNXj2hv59c0epIuXuC
JE/agWHt0A725shQBpQkxVlXOdmaNLcHhq9XibA5g1veC1h/mqS/UuNJEHJyzEJY
A+jwV4YosrOaDoh9CSK6LfPeoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGNzOxgL
c98OSh5srlXXFnK6ItsCMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvNDIzREJEQTJC
RDMwMTFFRkJFRkI1RjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLIBcwDQYJKoZIhvcNAQELBQADggEBAIQpHvZdZ3GJJ9Q0
0PesEqirexfA7eZL7GUMP87UiDnRknIjMdomzV7SdjfuMb43+vo/4hqomD/b1mJ7
8Hq6tPNWi4sDopQadbNKE0e7a04df23qc3QVTbWH4KX3qBL6zsYE6zLe6X6zOryP
t6yjaAbYLinJs6HLnqBu+3hwEE4KOuJJSphjKzFaT1uPaSM5lHB2QC8vhb30A4Ml
Wdyz91zxWjc8laATFMtFa6ZQC1epz9Xrqz0XoOoRZ5/F8xrkUeCo/3iLQUB+ypkF
EsoSvCNAJPbu9jI7nTlbiqZhdT9HlZ2fBuax8Cdl4HisNVi66Dwu6dDW5xH30sI6
zf23Zic=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:39:11 2025 by rpki-client