Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa
File: DC4A492A4E6311EEBED9743CC4F9AE02.roa (raw, json)
Hash identifier: VPX0H6cdFOsD+zG6jkUQSU97ro/+zyFklQ+WnPjh1dQ=
Subject key identifier: 3D:B2:14:DD:AC:A4:9A:FB:56:DA:0F:80:F8:92:82:12:47:5A:20:61
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0992
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa
Signing time: Tue 26 Mar 2024 21:10:21 +0000
ROA not before: Tue 26 Mar 2024 21:10:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 38566
IP address blocks: 203.78.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 26 21:10:21 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660339bc-2044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:d3:1c:a7:a2:c5:9e:47:60:a8:f9:a9:1d:
d3:6a:00:f5:3a:86:2f:c4:29:09:ba:8d:15:5d:7c:
f2:a3:10:6f:4d:e7:64:c8:23:a1:44:91:8d:2a:8f:
eb:6e:5e:3c:72:2b:d1:eb:d5:2b:14:ac:b1:08:bb:
b4:eb:af:99:3e:42:37:e1:6e:c6:ce:a2:4c:d7:38:
d3:b2:cc:5b:9a:91:61:5b:99:1b:3b:48:8e:c4:68:
20:b5:8a:39:e1:9a:1f:58:60:f6:af:9e:71:7c:6b:
1a:51:a1:6b:84:16:07:5e:0a:3f:b4:06:df:a2:64:
4f:37:cc:4f:2d:65:3f:7e:31:3f:6d:ca:37:53:32:
6e:6d:0d:4d:ba:74:5c:c2:e7:be:ed:21:fe:d3:c2:
b2:93:db:89:cf:61:9e:83:03:ed:d2:ee:0c:da:16:
38:fb:d6:ee:42:05:0a:e2:77:d4:db:07:11:0f:b6:
7e:c9:be:29:7f:20:1d:db:01:3a:e8:ff:59:5d:35:
8c:43:3f:c0:fe:ff:7b:63:16:96:27:3a:28:98:11:
0d:56:2f:36:2b:82:bc:4d:1a:73:46:54:9a:1d:fd:
b0:90:1e:5f:02:e9:57:99:cc:ca:d6:38:52:b3:a5:
a2:74:86:8d:36:7d:14:dd:e0:60:0c:6d:f5:81:93:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:14:DD:AC:A4:9A:FB:56:DA:0F:80:F8:92:82:12:47:5A:20:61
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:5b:5c:ca:51:f6:1d:96:bd:b0:1a:39:1f:20:ff:13:12:9a:
7c:31:5a:c3:b8:07:26:01:a3:c1:7c:5b:7d:93:b7:a5:2e:cc:
76:30:a3:b5:eb:cd:90:4d:4d:4b:b3:dd:f1:65:c6:19:bc:39:
dc:ba:a4:df:7f:b8:4c:bc:a1:4c:52:6b:9e:1d:81:18:eb:3a:
2a:31:0f:00:cf:95:af:fd:b3:f8:f0:d4:57:6f:23:68:ec:73:
b0:36:bc:34:c7:3d:b3:05:50:ea:f0:fd:ce:6f:97:e6:bf:d4:
0f:e4:d6:55:74:1b:9b:9d:75:37:12:c7:e5:24:3f:2c:79:48:
94:ea:d4:9a:86:2f:b4:78:cd:99:56:99:a8:ed:59:c8:63:cf:
4e:17:cf:ad:c7:b0:18:36:ab:3d:58:27:ce:35:93:62:0f:05:
d2:86:8a:4e:dd:24:4c:d7:d5:4b:e7:83:b0:ee:d9:ba:14:60:
ed:88:9b:0c:e2:6b:46:39:88:e2:29:c5:e9:6d:a8:59:96:4b:
9d:86:de:d6:dd:05:e9:20:67:1a:a8:b6:88:1c:15:05:2b:fe:
d9:df:30:a4:2d:6c:a5:1e:0c:b0:4c:3f:11:85:3c:1c:46:c8:
43:80:38:9d:07:d0:57:a7:fb:a0:80:19:d6:61:1c:b9:e0:ef:
7f:9d:ed:2e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4
M0NCRTE4NjcwHhcNMjQwMzI2MjExMDIxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjAzMzliYy0yMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwx/THKeixZ5HYKj5qR3TagD1OoYvxCkJuo0VXXzyoxBvTedkyCOhRJGNKo/r
bl48civR69UrFKyxCLu066+ZPkI34W7GzqJM1zjTssxbmpFhW5kbO0iOxGggtYo5
4ZofWGD2r55xfGsaUaFrhBYHXgo/tAbfomRPN8xPLWU/fjE/bco3UzJubQ1NunRc
wue+7SH+08Kyk9uJz2GegwPt0u4M2hY4+9buQgUK4nfU2wcRD7Z+yb4pfyAd2wE6
6P9ZXTWMQz/A/v97YxaWJzoomBENVi82K4K8TRpzRlSaHf2wkB5fAulXmczK1jhS
s6WidIaNNn0U3eBgDG31gZPmnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD2yFN2s
pJr7VtoPgPiSghJHWiBhMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4
RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvREM0QTQ5MkE0
RTYzMTFFRUJFRDk3NDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALLTswwDQYJKoZIhvcNAQELBQADggEBAJtbXMpR9h2WvbAa
OR8g/xMSmnwxWsO4ByYBo8F8W32Tt6UuzHYwo7XrzZBNTUuz3fFlxhm8Ody6pN9/
uEy8oUxSa54dgRjrOioxDwDPla/9s/jw1FdvI2jsc7A2vDTHPbMFUOrw/c5vl+a/
1A/k1lV0G5uddTcSx+UkPyx5SJTq1JqGL7R4zZlWmajtWchjz04Xz63HsBg2qz1Y
J841k2IPBdKGik7dJEzX1Uvng7Du2boUYO2Imwzia0Y5iOIpxeltqFmWS52G3tbd
BekgZxqotogcFQUr/tnfMKQtbKUeDLBMPxGFPBxGyEOAOJ0H0Fen+6CAGdZhHLng
73+d7S4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:38 2025 by rpki-client