Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa
File: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier: Wbhsx55tM4N17rZNB2kDgdGFenO9kZRJ8EDE85u0cgM=
Subject key identifier: F1:10:8C:FC:94:EE:B4:3E:29:9B:74:50:75:C1:4C:02:50:DC:FB:B3
Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial: 0712
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa
Signing time: Sat 15 Jun 2024 00:02:24 +0000
ROA not before: Sat 15 Jun 2024 00:02:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45600
IP address blocks: 202.92.148.0/22 maxlen: 22
2400:b000:300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810 (0x712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Validity
Not Before: Jun 15 00:02:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=666cda10-fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:f2:25:12:73:78:9f:47:1e:c1:0b:ab:68:
42:60:af:d3:81:ee:1b:d4:86:66:64:e5:46:69:0b:
59:47:5c:d7:92:11:9f:04:f9:77:93:cd:fa:00:ac:
b1:c2:a0:1e:28:b1:e7:fb:e9:1c:4d:7f:40:37:9b:
8c:a6:98:f5:71:b7:ca:fd:31:e7:e0:76:a1:a3:4d:
01:d2:ef:43:79:63:b5:88:ee:f4:b8:fc:a5:97:9e:
50:4b:fc:65:3b:ab:5c:9f:01:d9:fa:de:56:b0:96:
6c:52:24:8c:90:41:a9:cd:10:46:d1:81:b5:b3:5a:
70:82:c1:85:fb:e5:0a:70:ef:2b:c4:5e:c4:e0:81:
71:43:86:b3:e3:ee:13:b1:f9:47:1f:d1:a6:d1:df:
f6:c7:27:d3:71:40:e8:17:9b:22:a5:30:86:07:4c:
11:c9:a0:c3:c0:e2:77:2d:b3:ac:55:9b:57:d5:45:
15:e8:12:d8:59:c9:55:fd:ae:c8:d3:5f:fa:39:b2:
6b:a7:26:a2:14:77:f9:06:e5:ce:54:1c:34:dd:94:
21:81:39:a7:23:e0:3d:a7:65:b9:6e:b2:dc:1e:e5:
21:53:31:64:b5:d3:d0:76:ed:93:96:06:88:57:64:
40:d3:6d:25:3a:00:55:40:5b:9d:bd:f5:c0:1e:1a:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:10:8C:FC:94:EE:B4:3E:29:9B:74:50:75:C1:4C:02:50:DC:FB:B3
X509v3 Authority Key Identifier:
keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.92.148.0/22
IPv6:
2400:b000:300::/48
Signature Algorithm: sha256WithRSAEncryption
1f:50:3f:8e:ae:c5:2d:23:91:1c:d9:0a:f1:f6:76:9e:85:b6:
c3:76:58:78:2b:e9:60:e0:ca:68:55:42:cf:9c:11:37:cd:8c:
c7:cb:c5:88:db:13:ea:73:dc:85:5e:d5:8e:3b:24:9b:2c:ee:
91:1e:b8:25:82:1c:ba:2e:9a:75:1d:cc:7d:59:5d:ae:97:08:
fe:8c:f2:8d:ce:e3:dc:33:34:1a:06:d7:1a:a5:a4:76:48:d4:
f6:5f:b7:e9:8c:ca:f9:6e:f2:f1:ab:86:72:e3:ae:21:a0:09:
fa:5d:63:0b:8d:53:6c:ee:b1:ef:b6:da:67:c9:cd:1c:ad:e9:
1a:19:93:3b:6f:14:d1:cb:53:88:c0:a0:b1:8e:d7:ea:ab:8f:
f2:cf:1b:fe:98:42:14:2c:59:32:0e:60:a7:dc:3d:21:8c:df:
f0:d5:62:e6:b3:97:20:e1:b7:0b:fe:fb:c5:70:d7:b6:de:ef:
59:01:db:3f:aa:3e:9b:80:cd:20:2d:49:fa:03:0f:01:43:3b:
a5:de:a0:50:d3:4a:01:e1:e3:c3:04:bf:8c:20:b3:36:fe:15:
81:86:e1:95:fb:d5:e1:56:91:b3:97:9d:b7:73:15:eb:3f:83:
86:be:6c:aa:dc:81:88:a3:a5:f2:16:f4:98:b9:86:f1:c0:f2:
7b:86:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:37 2025 by rpki-client