Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
File: F6935C8EB35911EF96C43242C4F9AE02.roa (raw, json)
Hash identifier: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=
Subject key identifier: BF:21:22:E5:95:64:6A:AD:5E:D1:4D:8E:E6:32:94:4F:56:28:32:12
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: 02
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
Signing time: Thu 05 Dec 2024 22:40:44 +0000
ROA not before: Thu 05 Dec 2024 22:40:44 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 153472
IP address blocks: 203.33.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Dec 5 22:40:44 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67522bec-a1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:bb:c6:61:f9:62:66:99:7b:6c:92:48:e2:
62:dd:f9:2c:8d:7a:9e:84:e8:b5:f0:a0:8a:48:ed:
07:2b:be:a8:48:d6:30:4c:f1:04:df:b2:5b:b1:6c:
26:b5:05:cd:1d:6f:1a:d1:4e:1c:be:aa:95:83:b3:
74:27:5b:fd:69:71:df:48:f4:86:28:2d:0d:c0:1e:
a2:f9:85:5d:8e:a2:ae:dc:fd:37:f4:03:07:a6:95:
87:ca:f4:07:21:10:41:50:ba:3d:06:83:bb:60:46:
71:0e:41:d3:51:b6:20:91:5e:6a:13:de:3c:90:3b:
ea:7d:bc:47:c6:a1:13:bc:35:bd:7b:ee:14:e5:f7:
63:d8:27:08:be:ea:8e:a2:a2:2a:f5:d3:da:38:46:
c8:eb:30:e4:18:cb:13:2d:00:f6:59:e3:ab:78:5b:
9e:b9:b6:66:9e:65:47:8b:32:7e:b0:5e:06:c7:90:
c4:0d:08:b3:20:83:93:d6:9a:6d:b3:81:5a:5c:93:
c4:b5:ef:d7:6e:5b:57:86:a2:75:fe:08:3f:77:8c:
9f:b2:75:30:b9:06:5a:7e:c8:c1:06:f0:e2:93:06:
48:8f:71:29:ad:d2:5e:67:77:11:2a:57:8d:22:56:
51:63:23:d9:d3:9f:c6:13:17:f6:72:24:67:54:75:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:22:E5:95:64:6A:AD:5E:D1:4D:8E:E6:32:94:4F:56:28:32:12
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.33.72.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d7:67:08:eb:e0:67:69:78:0f:ef:72:84:be:ca:09:ba:e4:
f8:6b:70:04:f8:86:53:ba:d3:76:d9:cb:4d:49:33:fd:ef:a7:
0a:78:1a:22:96:39:fe:40:27:d2:83:4d:ff:c6:6f:01:f0:99:
27:96:09:53:a4:13:74:8d:51:4c:77:ce:24:00:11:e1:c7:88:
52:99:35:83:75:fc:af:43:dd:87:b9:99:c9:01:54:fe:17:b6:
dc:3b:5a:3a:99:99:a4:ff:a9:b8:21:c4:16:4f:7e:a0:4d:3f:
02:d7:07:05:85:bb:d7:47:35:5b:a2:3b:2e:ca:94:b1:38:b1:
ec:c5:a5:9b:88:cb:91:f6:f7:6b:8a:9a:b7:50:df:bc:98:07:
8d:85:97:ac:2e:ae:6e:59:9c:54:68:8e:3a:a5:b2:16:2f:a9:
0d:84:38:7a:9a:f6:3a:b2:02:41:ba:cb:ce:12:c5:be:e5:c2:
92:1b:c4:f0:ed:d3:a8:8e:4c:87:64:2d:ad:50:5f:34:ee:ee:
0b:ff:74:77:b8:e0:a3:90:2f:28:1e:00:7a:32:33:7d:b1:59:
02:7d:1a:61:6c:fd:eb:91:13:e2:05:4e:f4:12:94:5e:34:8d:
6b:e0:eb:2c:56:15:21:17:27:29:86:bc:57:51:ff:f7:eb:4e:
d6:fb:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:37 2025 by rpki-client