Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/01804686B48E11EF81F55F3CC4F9AE02.roa
File: 01804686B48E11EF81F55F3CC4F9AE02.roa (raw, json)
Hash identifier: DZexhviKSVjUz0wtVaAtdHsphj1mTjOP+0tLYZS1w4g=
Subject key identifier: C7:B0:F7:34:0F:38:9F:24:47:92:7E:2D:A9:D7:BC:17:90:DE:19:89
Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Certificate serial: 2077
Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/01804686B48E11EF81F55F3CC4F9AE02.roa
Signing time: Fri 31 Jan 2025 15:20:50 +0000
ROA not before: Fri 31 Jan 2025 15:20:50 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 14618
IP address blocks: 203.34.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8311 (0x2077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Validity
Not Before: Jan 31 15:20:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679cea51-796d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:11:0c:c4:ce:dc:52:42:34:b6:39:6d:9a:
c3:f5:95:df:4c:80:44:2c:2b:20:e3:7a:7c:a6:04:
58:61:c2:fe:a7:39:6c:e2:29:79:0b:74:64:e2:74:
22:aa:aa:d4:20:62:31:d1:25:82:e1:73:01:e8:fc:
d8:3c:02:f7:18:a0:01:6a:25:ab:46:2f:a9:2f:89:
29:a3:1d:ef:8d:cc:2b:06:b4:d0:08:ed:8e:e1:b9:
e0:31:7d:6e:37:5e:85:bd:7b:02:f8:3c:ef:c1:e9:
6d:cd:46:f8:cc:0a:f7:38:fc:84:5f:7b:c7:e3:c3:
69:9c:31:b0:1f:f7:33:14:9b:9c:06:7c:8e:46:6e:
89:f6:9b:28:47:ab:30:19:25:24:a2:dc:65:67:7b:
ed:41:3c:03:6d:20:92:c4:2c:cb:a2:ba:e1:2c:37:
79:99:96:13:b3:a1:98:eb:d2:71:4a:56:3b:49:91:
cd:5e:56:2b:9b:15:a2:e1:fd:7c:70:51:c4:99:cf:
49:5e:5e:9d:5a:89:99:e5:99:52:4f:06:5b:64:31:
d2:24:36:e4:df:6b:97:c6:e7:c5:4c:d0:0e:92:55:
ac:68:d4:ed:51:11:1e:6a:08:af:52:cf:84:e5:3d:
17:eb:7c:bf:37:52:a1:66:43:5d:86:aa:e9:e4:92:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B0:F7:34:0F:38:9F:24:47:92:7E:2D:A9:D7:BC:17:90:DE:19:89
X509v3 Authority Key Identifier:
keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/01804686B48E11EF81F55F3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.100.0/24
Signature Algorithm: sha256WithRSAEncryption
65:64:f7:41:34:ed:25:2a:6c:85:f2:4f:15:d8:39:8f:94:2d:
97:9d:37:7f:ba:bd:cb:5c:c1:9d:01:43:8e:32:26:9a:39:70:
f4:18:ce:ad:1c:cd:62:6e:a3:f9:48:d3:f4:66:f6:81:8d:0d:
04:a7:9f:3f:6a:7c:fa:ee:8e:c1:60:62:c5:d3:f7:fd:a1:80:
41:5a:b7:f4:8e:d4:c6:50:4c:b8:a4:50:36:d1:a9:0b:ba:41:
38:cd:31:6d:6c:99:6c:00:73:c7:e6:4c:95:96:c5:59:19:d1:
3e:8e:36:f9:fb:14:10:eb:79:0d:3f:35:0a:ff:d6:1a:39:04:
a4:c2:6e:73:eb:11:92:5d:03:06:ce:9d:c6:02:8a:69:0d:22:
88:9a:49:3f:f3:e3:5f:6f:a2:21:fe:d1:15:b6:22:7c:33:0f:
54:54:c7:1e:50:58:cc:31:59:8d:bd:86:90:8d:81:ce:54:3b:
8c:ce:bc:38:0f:af:c5:00:d5:e0:73:00:72:0d:81:9c:f6:56:
f2:97:75:70:71:09:fd:ca:b1:fe:1d:28:f7:14:f3:76:95:bc:
b2:52:b4:1e:d4:e0:e1:fd:90:f7:fb:cb:80:f8:38:59:12:a5:
c1:ac:74:5e:79:77:de:9a:36:87:b6:04:86:60:b7:b4:08:5d:
57:04:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:22:39 2025 by rpki-client