Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/1F63746CE05211EFBD383A20C4F9AE02.roa
File: 1F63746CE05211EFBD383A20C4F9AE02.roa (raw, json)
Hash identifier: OmdkiziML6J0Ag7UMAJTQgxAL5QS5duM0hZAbFDdg+A=
Subject key identifier: 52:87:39:D3:E3:16:23:4B:BA:93:E9:7E:8E:5A:48:79:48:F5:55:E4
Certificate issuer: /CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Certificate serial: 0111
Authority key identifier: AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/1F63746CE05211EFBD383A20C4F9AE02.roa
Signing time: Thu 27 Feb 2025 06:29:31 +0000
ROA not before: Thu 27 Feb 2025 06:29:31 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38438
IP address blocks: 203.3.184.0/24 maxlen: 24
203.3.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B2CD, serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Validity
Not Before: Feb 27 06:29:31 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67c0064b-a5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:b8:63:a9:d7:0b:e7:f9:75:3e:5f:dd:49:
ed:ce:d6:5e:1c:a7:a7:48:5c:a0:38:82:f7:1b:ea:
04:74:fd:25:7e:e7:45:23:d4:ee:12:b8:af:b0:10:
84:5a:44:79:34:18:57:db:c3:ce:07:98:88:4e:1a:
21:38:2f:bf:ae:d7:70:c8:cc:71:bd:82:ad:5c:ed:
8f:39:f4:06:49:fb:d1:d4:c1:ea:be:03:d7:b1:9d:
49:be:07:84:f8:04:b2:52:e2:bf:2f:5e:bf:88:c9:
9c:ca:ab:59:3a:d0:ba:57:e6:1e:63:0c:38:14:b1:
2c:69:b8:5d:3c:f5:ce:b5:da:96:ac:a4:d7:4f:46:
c6:19:fb:87:d7:92:e9:33:d6:22:45:da:a3:54:a0:
4d:62:0c:da:70:82:1f:8c:17:79:24:6b:7b:4f:99:
2a:66:53:1c:ac:a9:32:f8:25:54:ec:c6:d1:52:07:
95:1a:a9:ea:87:69:b4:87:3c:30:76:80:3e:84:b9:
0a:b3:84:c1:b6:bb:5d:f5:af:74:aa:29:5e:1f:d3:
81:0a:91:ab:7b:67:bd:5e:6e:23:50:3e:37:37:8b:
46:94:ff:1f:c1:c8:cf:e8:73:ec:c5:fb:25:33:23:
26:25:13:fb:8f:52:9f:2b:1d:7d:28:52:23:2b:96:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:39:D3:E3:16:23:4B:BA:93:E9:7E:8E:5A:48:79:48:F5:55:E4
X509v3 Authority Key Identifier:
keyid:AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/1F63746CE05211EFBD383A20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.184.0/23
Signature Algorithm: sha256WithRSAEncryption
91:b5:12:e4:ac:e3:69:3d:02:23:90:de:ae:d6:98:55:4a:be:
80:f8:98:d9:89:79:ed:22:ab:ab:00:ab:12:5b:45:ff:12:1f:
f0:b1:8c:07:29:93:66:e0:cd:e6:8d:51:b7:21:f8:7a:93:79:
fb:77:e2:84:db:9d:75:98:ea:54:b1:98:fa:f1:ba:43:d3:b9:
a2:0b:4b:83:f4:63:92:ba:ce:8e:f4:24:c5:95:64:eb:38:a4:
fb:86:5e:a9:3c:b2:a1:df:ad:30:b3:dc:81:5e:21:8f:23:39:
0c:d9:19:fb:83:e3:c4:e9:80:8f:d9:cf:4b:42:1e:6c:8a:0e:
6b:45:79:27:1e:c4:54:83:99:c4:d7:2c:be:83:ac:1c:13:7a:
ca:5a:e3:19:fb:bf:e1:a5:6f:f5:59:b6:aa:6e:7a:bd:f0:87:
b8:d8:19:ec:32:8d:57:16:41:5f:21:c5:4f:b6:25:fb:61:df:
f7:98:45:24:49:20:ce:7c:7a:db:1f:42:37:33:d9:d6:7e:59:
aa:66:79:3c:10:d1:09:66:0b:27:30:64:f3:87:34:ac:0a:60:
6a:57:49:1c:e5:c8:10:16:8f:17:63:c0:71:77:5a:2f:ae:72:
67:86:71:31:b2:9d:3e:80:aa:33:13:41:1c:70:af:fe:14:83:
1b:99:37:a3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIyQ0QxMTAvBgNVBAUTKEFDMzMyMTMwQjFDMDlGRDRBQjIzNzQ5NUE0RUE5NjM0
Qjc0QzEyQkEwHhcNMjUwMjI3MDYyOTMxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MwMDY0Yi1hNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApH+4Y6nXC+f5dT5f3UntztZeHKenSFygOIL3G+oEdP0lfudFI9TuErivsBCE
WkR5NBhX28POB5iIThohOC+/rtdwyMxxvYKtXO2POfQGSfvR1MHqvgPXsZ1JvgeE
+ASyUuK/L16/iMmcyqtZOtC6V+YeYww4FLEsabhdPPXOtdqWrKTXT0bGGfuH15Lp
M9YiRdqjVKBNYgzacIIfjBd5JGt7T5kqZlMcrKky+CVU7MbRUgeVGqnqh2m0hzww
doA+hLkKs4TBtrtd9a90qileH9OBCpGre2e9Xm4jUD43N4tGlP8fwcjP6HPsxfsl
MyMmJRP7j1KfKx19KFIjK5ZuywIDAQABo4IClTCCApEwHQYDVR0OBBYEFFKHOdPj
FiNLupPpfo5aSHlI9VXkMB8GA1UdIwQYMBaAFKwzITCxwJ/UqyN0laTqljS3TBK6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjJDRC9ERTk3MkZFRTg0
NjUxMUVFQkRDQzJENjVDNEY5QUUwMi9yRE1oTUxIQW45U3JJM1NWcE9xV05MZE1F
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JETWhNTEhBbjlTckkzU1ZwT3FXTkxkTUVyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIyQ0QvREU5NzJGRUU4NDY1MTFFRUJEQ0MyRDY1QzRGOUFFMDIvMUY2Mzc0NkNF
MDUyMTFFRkJEMzgzQTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHLA7gwDQYJKoZIhvcNAQELBQADggEBAJG1EuSs42k9AiOQ
3q7WmFVKvoD4mNmJee0iq6sAqxJbRf8SH/CxjAcpk2bgzeaNUbch+HqTeft34oTb
nXWY6lSxmPrxukPTuaILS4P0Y5K6zo70JMWVZOs4pPuGXqk8sqHfrTCz3IFeIY8j
OQzZGfuD48TpgI/Zz0tCHmyKDmtFeScexFSDmcTXLL6DrBwTespa4xn7v+Glb/VZ
tqpuer3wh7jYGewyjVcWQV8hxU+2Jfth3/eYRSRJIM58etsfQjcz2dZ+WapmeTwQ
0QlmCycwZPOHNKwKYGpXSRzlyBAWjxdjwHF3Wi+ucmeGcTGynT6AqjMTQRxwr/4U
gxuZN6M=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:43:47 2025 by rpki-client