Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
File: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (raw, json)
Hash identifier: HpSulYTKjWi9yozCtLRgfGwwq/HpvwINJQ7fctCpbuc=
Subject key identifier: 87:F5:F8:C5:F5:32:12:41:DA:3C:53:4A:89:31:2D:D7:E4:5F:5A:43
Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Certificate serial: DC
Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
Signing time: Tue 23 Apr 2024 06:08:58 +0000
ROA not before: Tue 23 Apr 2024 06:08:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 203.13.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Validity
Not Before: Apr 23 06:08:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6627507a-50d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:b4:f8:35:89:6f:8b:33:82:6b:68:a9:d6:
59:d8:4d:56:b5:05:f0:99:73:d6:9d:46:ff:31:40:
95:86:52:8f:35:c3:13:5e:d1:fd:d0:9d:9b:92:d2:
93:f3:66:b0:0b:19:ed:52:ad:a2:96:f2:62:b6:db:
87:da:4d:7e:01:74:3c:3b:d5:5d:80:3f:87:c8:91:
4d:1e:81:09:2d:f0:7e:95:51:c4:cc:c6:d3:64:4c:
08:c8:ef:f2:5c:e9:69:3d:83:a6:3c:99:46:87:18:
d2:e5:44:b1:af:d6:9f:59:f9:40:55:84:06:10:76:
21:59:78:08:6e:15:90:53:db:35:92:f2:9a:87:7d:
2e:b8:35:c6:f8:53:b0:45:f1:3c:42:1d:2b:dc:89:
9c:a6:bd:84:47:3a:77:a0:8f:d7:39:3e:55:e4:69:
76:19:4d:b1:e5:18:5b:26:11:2a:58:30:f7:3b:cb:
ae:2c:ee:b9:4a:78:1a:c7:40:a6:b7:76:88:84:c2:
72:a2:96:aa:e0:be:3e:fe:c6:a8:de:23:71:74:e6:
63:4b:18:82:59:82:3e:14:9f:49:aa:db:1b:4b:e0:
67:a6:b9:ba:cd:92:3a:67:61:9c:3d:88:54:b1:40:
b7:7e:8d:84:ca:1d:86:09:80:a8:fe:2e:c4:4a:02:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:F8:C5:F5:32:12:41:DA:3C:53:4A:89:31:2D:D7:E4:5F:5A:43
X509v3 Authority Key Identifier:
keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.13.75.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:90:19:ff:68:69:81:2f:bb:a4:54:d8:5b:f3:2c:3c:63:5f:
f4:12:38:e9:a9:97:da:24:17:bc:c0:63:1a:29:ab:2e:86:d6:
ad:52:0f:a8:6a:17:43:c1:85:ed:0a:0f:6d:3e:67:ae:d6:32:
a8:40:10:0f:b3:a7:c9:8f:1e:80:31:30:a5:55:cd:28:b8:60:
30:34:91:eb:1c:bf:cd:89:db:58:7f:3e:ae:a0:ef:b5:27:32:
bd:25:47:2f:6e:93:c6:53:7f:d6:fb:96:04:21:1f:f6:5a:36:
8d:c7:8a:db:f9:47:ea:89:f5:17:af:3d:e2:a5:96:19:ab:f5:
8f:f1:e0:98:cd:e9:7a:ab:3a:f8:06:aa:f7:26:e7:f1:a0:a6:
d5:ea:b3:b8:6d:96:6b:4f:60:a5:aa:f1:85:f3:51:dd:de:2a:
89:80:70:13:ab:cf:e9:2c:7b:0b:20:0f:a5:5c:5c:c7:bf:79:
0d:44:89:4c:f1:82:df:33:d0:e9:dd:b3:78:4f:57:7f:9e:e7:
c2:94:c4:ad:28:38:1d:4e:20:68:84:21:1c:05:4a:39:f6:4e:
ec:07:32:08:36:d4:58:46:58:5b:e9:bb:9f:67:ca:de:94:0e:
9d:2e:65:a9:a7:44:4d:89:f1:53:8e:62:0a:b6:1a:49:7b:01:
bb:5d:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:12 2025 by rpki-client