Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa
File: F0D7EB5097FA11EE90066875C4F9AE02.roa (raw, json)
Hash identifier: vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=
Subject key identifier: D6:68:7B:28:6A:CF:81:7B:76:34:15:73:71:48:3B:2C:4F:D3:C9:7D
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: BA
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa
Signing time: Thu 05 Dec 2024 04:19:51 +0000
ROA not before: Thu 05 Dec 2024 04:19:51 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 4764
IP address blocks: 203.22.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: Dec 5 04:19:51 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675129e7-4079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:4e:6b:73:4b:c4:0a:19:4e:05:76:52:3d:
12:eb:32:11:62:ff:19:61:d9:90:cd:c6:d5:89:3f:
5a:6d:8c:0f:a7:4d:98:27:b0:7b:14:93:ac:1c:a3:
34:85:92:f4:4c:5b:a8:dc:44:4a:5e:14:7e:c0:57:
0f:b8:a1:7b:cd:1f:4a:4f:ad:f2:91:71:77:92:4e:
d6:36:1f:7d:94:f7:62:32:7e:f6:f6:52:12:5f:1d:
c5:05:4f:4a:69:c2:dc:f1:96:9f:ef:ae:f7:4f:c4:
67:77:92:8f:5c:2e:ee:08:d6:78:b8:7f:57:fc:7c:
8b:67:9c:db:d1:a2:82:9c:41:56:f8:b6:a1:f1:1d:
4b:57:4d:e4:23:12:70:9b:f1:59:98:9a:ca:03:27:
1a:e3:06:88:c0:1f:68:27:f0:d5:a7:ad:6c:04:84:
23:77:40:52:db:fd:7c:b1:fe:57:c4:3b:a9:d2:ed:
37:98:d1:e1:67:d2:95:ac:91:7b:b4:5e:3c:54:11:
7a:8d:55:ab:21:17:5d:19:b8:39:10:a2:d3:66:5d:
24:b0:da:79:b6:97:79:0d:af:68:f2:f5:45:75:c2:
88:f7:c1:e4:5c:b6:c5:02:31:db:29:94:f4:1a:3f:
4c:8c:b1:15:be:6d:46:9e:d3:4c:d2:dc:79:d4:04:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:68:7B:28:6A:CF:81:7B:76:34:15:73:71:48:3B:2C:4F:D3:C9:7D
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.22.74.0/24
Signature Algorithm: sha256WithRSAEncryption
94:10:4a:ea:f2:9f:ac:9f:11:5d:85:20:56:a1:18:64:0e:d3:
dc:07:57:e5:bf:28:39:32:b4:21:65:39:63:bc:e4:5b:e0:ee:
98:9a:95:f8:0d:80:b1:07:c3:24:18:52:86:77:ba:70:2a:c9:
9c:14:a3:dd:ac:7c:70:fb:fd:da:73:69:a2:51:7a:23:9f:ec:
9f:e4:64:26:87:f8:38:51:3a:50:67:19:1b:4d:72:f0:f8:52:
c2:51:1c:5c:c4:26:cc:54:67:95:71:c4:44:a1:53:78:38:bb:
2e:be:7e:c5:41:49:bb:ad:89:a7:1c:62:06:1c:b4:0e:70:b6:
4a:e1:b0:c6:54:2c:ac:32:da:1c:dd:f0:f7:97:14:85:9d:6b:
ee:27:dd:dd:d2:f5:93:58:1a:2c:a2:a1:6d:73:48:93:42:21:
13:52:be:10:28:be:a6:f4:4d:e0:28:ad:f0:90:fe:b4:36:e1:
ea:3b:ae:b9:85:e1:73:d4:4b:a7:e3:9a:5a:be:f8:7f:ed:3b:
1a:71:fb:99:c4:25:53:6f:4e:10:f0:54:41:20:55:c9:e3:22:
4e:3a:6d:bb:b0:aa:8d:dd:6f:38:99:29:d8:51:ee:dc:33:55:
f0:35:cc:9b:96:21:29:ea:8a:7c:b7:77:d3:5a:ce:7f:2c:4a:
be:62:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:44:08 2025 by rpki-client