Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa
File: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (raw, json)
Hash identifier: 24YebT/eCpzy2OYMv6Aeg+ODlII/BFqv/zb/WSfHSZQ=
Subject key identifier: 96:C2:2A:F3:DC:04:01:F2:C7:FC:F6:DF:7E:C0:86:63:D8:63:CC:06
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0919
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa
Signing time: Thu 04 Apr 2024 22:00:34 +0000
ROA not before: Thu 04 Apr 2024 22:00:34 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 17540
IP address blocks: 203.83.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Apr 4 22:00:34 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660f2301-e82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e3:28:48:be:9d:80:37:c2:74:65:58:28:ba:
b8:d6:2c:dd:50:bf:96:4a:11:22:d2:77:ac:de:a2:
b9:82:a4:30:e9:66:b0:08:a6:05:82:46:f3:89:0b:
47:c3:18:74:c7:31:9a:9d:04:0b:82:37:11:27:e2:
96:32:d7:31:ef:1e:a6:84:7d:b8:e2:6d:65:9c:33:
7b:6c:34:1c:da:eb:a7:9b:8d:02:ec:2a:88:15:15:
72:b8:d2:26:73:09:14:67:df:d2:b6:20:53:e8:d9:
1c:ed:ec:9f:a9:47:86:a7:c3:9c:28:a9:86:a4:0c:
f2:ad:b9:72:38:54:64:6b:1c:e5:a8:33:bd:27:22:
11:a1:8e:9f:41:1c:c9:d7:2f:dd:31:5e:e4:70:a9:
7c:b7:fa:e2:50:ee:2b:4b:1b:35:25:c7:e2:8e:18:
32:cf:ae:25:3b:53:d8:87:f6:c7:d2:c0:93:3e:19:
48:ae:d3:7f:61:ae:ac:89:97:df:5d:07:a7:a3:90:
42:8e:c7:8a:99:b8:89:b5:3c:94:07:15:d8:ff:cf:
e7:ae:6f:b5:57:e7:2e:95:16:b1:f4:60:6d:9e:fc:
9a:df:cc:b5:21:03:22:04:8d:6a:e1:52:29:be:27:
9a:17:c1:55:6f:7d:02:56:28:1f:d1:40:d1:9b:e5:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:2A:F3:DC:04:01:F2:C7:FC:F6:DF:7E:C0:86:63:D8:63:CC:06
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.83.127.0/24
Signature Algorithm: sha256WithRSAEncryption
32:04:1e:0a:c5:ec:b2:ce:36:25:18:e8:69:18:5d:95:10:cd:
d2:a1:06:17:d8:e3:a4:7a:5a:6e:96:55:d4:13:d3:e3:28:a3:
90:65:23:47:03:ab:00:0a:9b:f1:af:71:fc:9d:3f:e6:bb:79:
d1:32:b6:86:b9:a6:ee:90:51:e1:db:36:2e:ae:4a:37:8f:21:
1e:f8:f2:89:2e:83:7d:c6:37:76:5c:2d:73:36:d8:3d:72:cc:
58:46:7e:4e:66:2a:31:ea:24:8a:ca:51:66:91:37:f5:b2:47:
81:34:2d:98:41:37:62:68:e4:30:6c:43:8d:76:d2:db:ab:21:
24:12:27:8d:e0:bb:50:ca:a9:b6:d6:79:3c:bd:5c:0f:2e:f2:
21:22:6e:49:be:4c:a7:f5:5f:8e:23:b1:29:fc:25:79:16:e0:
f7:92:fb:9d:ed:85:f8:5e:5b:7f:08:0b:d4:16:56:a1:5c:1e:
3e:cd:26:45:38:ec:0b:53:18:de:64:a8:ff:62:1b:82:af:23:
71:00:68:2f:99:08:33:60:9d:fe:36:0a:e0:ce:a4:c9:d3:0e:
65:83:67:6d:a8:80:1e:83:43:a0:4a:a6:eb:cf:3d:fe:d4:6d:
69:bc:1a:95:90:6e:84:b5:3c:08:a7:f2:c8:58:b9:e8:40:6f:
98:e0:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:52 2025 by rpki-client