Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa
File: 07D85DDEA7C811EF92C28379C4F9AE02.roa (raw, json)
Hash identifier: 9mVkmZtrTEdtUbw4LlN+DxJy0nOhfAMrpxdSeh7xUKY=
Subject key identifier: 34:21:53:28:C9:20:E1:CD:23:31:8E:DD:FC:EF:2F:63:69:6A:6D:F2
Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial: 03
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa
Signing time: Thu 21 Nov 2024 05:18:24 +0000
ROA not before: Thu 21 Nov 2024 05:18:24 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 7545
IP address blocks: 203.22.108.0/23 maxlen: 23
203.22.108.0/24 maxlen: 24
203.22.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Validity
Not Before: Nov 21 05:18:24 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=673ec2a0-86f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:fd:8f:56:f7:84:49:4d:ec:8b:97:0a:69:
ae:09:e8:99:92:2b:42:d7:eb:76:5b:a9:02:e7:f8:
39:94:7a:fe:ad:5e:43:b8:d4:c5:91:17:25:c1:bd:
cd:e5:5d:64:04:1f:8a:ad:1e:8f:a9:8e:fe:02:95:
6d:69:34:e0:b0:73:b8:64:e4:50:4d:53:dd:bd:26:
2d:84:1c:f5:37:23:7f:37:f7:54:a7:e1:b1:2d:e0:
dd:b4:f1:da:cb:b8:45:5d:56:87:d3:6a:38:07:75:
99:b0:26:c0:3d:f2:3f:0e:10:80:dc:0f:14:30:42:
7a:e7:d9:7c:6b:61:ae:36:de:39:c4:c7:40:7c:86:
3a:74:0d:3f:0a:ba:b3:67:c7:d2:8b:35:cb:e0:53:
70:9b:24:f8:ef:88:da:0d:a4:43:43:d5:3c:e4:18:
bb:d9:ba:c3:82:0d:35:a1:56:b0:8e:d8:e5:c3:e2:
97:6f:c7:05:8e:12:57:d5:1e:b3:4a:12:9f:b7:88:
ff:c2:1d:68:c2:fd:6f:46:b8:78:38:2c:06:a6:da:
33:34:bf:de:89:1a:d4:8f:86:51:36:9c:c1:c5:f6:
ae:73:14:dc:92:8e:c9:3d:b7:b1:9f:2c:8e:69:9d:
d2:61:3e:cf:9a:d8:46:2e:36:07:1a:0c:42:03:da:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:21:53:28:C9:20:E1:CD:23:31:8E:DD:FC:EF:2F:63:69:6A:6D:F2
X509v3 Authority Key Identifier:
keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.22.108.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:94:8d:cf:7d:57:17:04:d7:59:f0:38:ec:60:f2:d5:f6:6d:
fd:3e:67:16:6a:80:ec:2e:59:ef:42:8d:62:60:25:78:6b:9f:
c4:b0:13:ed:9e:2e:8b:aa:3f:63:05:5e:a1:4e:b1:12:1f:e3:
47:be:01:e2:e6:2c:04:75:bb:e3:8c:f1:c7:98:70:47:46:0c:
e8:59:d4:a4:10:2e:98:d0:80:3b:86:59:32:ab:3e:4d:40:e8:
5a:1d:d2:ca:b6:9b:f6:76:0d:36:6f:b1:b8:43:a0:f2:c2:76:
23:e0:86:58:fe:eb:fc:3f:a7:02:b5:cc:ce:c1:f0:1d:8c:46:
70:3e:9c:38:87:74:c2:ad:21:cc:66:71:26:6d:99:5f:d4:0e:
c8:9f:1e:99:7e:92:4e:5f:b8:5e:6e:59:d1:ac:85:46:9b:8b:
a7:06:22:9a:42:ca:b7:0b:46:7d:7f:5c:75:44:75:33:1a:7a:
27:c7:86:4f:7f:20:3b:11:98:bd:c8:a3:2c:e8:30:f9:ce:cc:
a9:67:32:53:4c:75:3a:2a:14:4e:c7:c9:74:eb:02:1a:f6:35:
7c:5a:eb:47:49:bd:97:3c:ac:cf:4f:ae:00:31:99:fb:d7:90:
4c:38:46:1e:d1:de:88:2a:45:99:30:81:aa:ff:8d:77:8f:21:
7a:cd:ee:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:15 2025 by rpki-client