Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa
File: 2DDD8D12E0D111ECAF88A30DC4F9AE02.roa (raw, json)
Hash identifier: 2dQQsgieu7RDqRTlJvV/Oc93cQSMrc+xmgOsw6bn1iE=
Subject key identifier: F2:BA:05:58:BC:ED:EB:21:A5:73:51:6B:9D:61:3D:17:0C:D3:62:A0
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0515
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:45 +0000
ROA not before: Wed 31 Jul 2024 02:33:45 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 38815
IP address blocks: 202.183.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Jul 31 02:33:45 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a289-8a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:9e:47:cd:39:13:14:a3:f1:92:74:a2:08:
68:08:3c:9e:d3:8a:8b:67:6d:7e:d0:73:61:af:97:
2e:19:a1:8b:f2:63:7f:53:f9:6e:9f:71:d5:a6:e3:
96:82:ff:33:02:6b:1e:5d:a5:db:0d:09:12:98:a3:
14:22:e4:5a:aa:c4:78:86:1c:5d:56:7a:0f:c1:1f:
30:f2:f1:f5:85:c0:bf:03:d0:b5:3f:55:c4:b1:6d:
62:64:be:53:e6:a8:99:53:2f:fc:e4:8e:88:75:aa:
be:01:2a:2e:97:3d:12:8f:f0:5b:d6:fd:d1:5f:a4:
85:ad:40:7e:66:c8:35:d0:5b:5a:f7:58:a9:30:df:
fd:7a:c8:54:c6:83:50:16:69:59:21:7a:89:2f:61:
77:f6:b0:37:77:24:d5:48:f5:7c:72:6b:9d:d7:04:
5e:2b:b8:8c:e1:f5:f3:16:b1:d7:01:6a:a5:c0:6e:
54:5c:8b:71:51:74:3b:d2:c9:e7:2c:f2:8b:35:9c:
67:9d:9f:35:b4:85:c1:75:f4:28:60:f2:c0:b0:9e:
d3:40:3b:1e:ca:9c:03:ee:3b:98:28:76:da:72:d3:
37:2d:2d:73:74:99:0a:82:73:55:13:82:7e:02:33:
68:2a:e8:62:bb:de:81:85:66:5a:fa:69:99:2c:43:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:05:58:BC:ED:EB:21:A5:73:51:6B:9D:61:3D:17:0C:D3:62:A0
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.183.202.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2e:04:a6:1f:fc:45:f2:bf:80:df:52:61:10:45:57:7b:6b:
1d:cb:1b:a1:cc:ae:6b:1e:c4:f4:22:b2:7a:71:de:f6:53:99:
f9:08:3b:50:50:0d:d4:a6:c7:c8:97:83:87:b0:7c:50:54:28:
ee:89:a9:03:eb:08:d2:66:64:44:db:8b:19:8d:9a:96:e5:0d:
f6:6f:3b:eb:51:ba:1a:fe:3d:c4:0e:f5:51:b6:0f:e8:07:90:
6b:e0:6b:8d:c2:28:5f:5e:db:b6:82:cd:d2:9e:fa:67:5a:7e:
9b:ab:ed:ae:a0:3e:6f:ea:ac:b2:9e:fa:3d:e0:4b:ca:f1:e2:
83:c2:1f:83:9f:2a:43:8a:77:2a:89:ea:54:f2:89:85:ac:96:
11:f3:95:3c:ec:04:d0:0c:b8:79:8a:7e:d0:93:f3:ab:af:c5:
b9:51:1e:6b:3f:d0:1d:db:88:6b:1b:66:b8:11:31:64:fc:bf:
2a:77:5d:cb:b2:d5:42:b7:89:30:db:83:44:35:9b:d6:b9:e5:
0c:25:12:6f:b9:73:1d:79:e5:56:2f:e0:61:80:91:43:1a:d3:
6b:08:67:68:61:fd:ac:42:0c:a0:dd:aa:28:6f:ad:8e:1d:0a:
e4:1d:7a:35:42:9d:80:c2:0f:e7:e6:ca:ac:51:cc:0f:3e:4d:
92:c2:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:07 2025 by rpki-client