Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/446A425EA6BB11ED9D458785C4F9AE02.roa
File: 446A425EA6BB11ED9D458785C4F9AE02.roa (raw, json)
Hash identifier: WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=
Subject key identifier: 01:B5:53:BD:79:08:25:71:C5:38:7D:E4:DA:BE:AA:7A:36:08:22:DB
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 2FE2
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/446A425EA6BB11ED9D458785C4F9AE02.roa
Signing time: Thu 08 Aug 2024 15:41:52 +0000
ROA not before: Thu 08 Aug 2024 15:41:52 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 16509
IP address blocks: 202.6.115.0/24 maxlen: 24
203.56.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12258 (0x2fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: Aug 8 15:41:52 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b4e740-cdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:c0:85:17:39:0b:4b:42:21:7f:18:ac:72:
c0:b3:78:3f:2a:95:80:29:61:76:39:53:58:91:45:
13:5a:19:11:49:d4:f1:83:e2:3a:d5:d9:54:aa:54:
1f:fe:87:fe:40:d8:19:6e:54:dd:ea:c8:08:b0:ef:
27:cc:d3:d2:6d:c7:78:b3:22:95:0b:66:92:fb:da:
65:7a:c8:da:66:c7:7b:24:18:39:ec:e0:ae:f3:e5:
73:65:bf:70:51:1f:1a:7e:82:0a:38:6e:65:c9:66:
1a:8d:1b:cb:24:b3:bd:16:bd:3f:b8:69:5d:8e:b4:
66:df:a9:c6:99:9d:76:82:67:6b:3f:86:bd:bc:9a:
05:c6:15:48:47:dc:cd:d7:27:0d:ae:cb:56:de:37:
56:8d:8f:37:07:4d:07:75:06:19:83:9c:90:36:20:
1d:33:0b:df:39:50:82:37:b4:37:0d:a2:42:75:e4:
bd:35:2e:6d:ce:92:5f:32:ce:95:c7:d7:1b:1e:68:
36:76:47:c2:85:98:d7:c5:6a:b1:0b:9f:b4:3b:17:
25:d8:54:2b:4c:86:05:87:bf:83:dd:c3:85:87:9f:
fc:07:70:7d:88:89:2e:52:a6:b6:8a:4e:30:74:25:
15:1d:f9:9a:73:c4:c8:8c:1c:38:e6:13:65:38:6d:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B5:53:BD:79:08:25:71:C5:38:7D:E4:DA:BE:AA:7A:36:08:22:DB
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/446A425EA6BB11ED9D458785C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.115.0/24
203.56.176.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ac:ce:10:2a:76:25:f4:7d:23:a5:ea:ce:bc:7d:0f:c6:69:
06:27:09:e6:4f:d4:2d:04:ba:76:bc:15:cb:c0:5d:5e:51:81:
16:5e:4b:41:e7:1f:8c:11:e0:4c:6e:d7:10:22:75:63:a4:4c:
b5:ec:70:37:d1:e5:68:7c:3f:51:24:6f:67:07:04:7f:3e:3d:
68:85:63:9c:d9:2f:73:32:11:b9:0c:b0:50:96:de:5a:e9:4f:
e8:d2:3a:dc:c1:98:a1:24:4f:96:93:4f:3f:76:6a:e9:fe:4d:
78:2a:5f:6e:ce:0d:44:19:a4:b9:04:81:06:09:a1:60:d0:08:
74:5c:a9:d4:af:ed:59:ff:b3:de:9e:31:74:bc:61:9a:ec:b9:
32:49:40:a0:ea:35:7e:3b:55:07:28:7e:df:a2:52:33:cd:ce:
d8:e1:0c:07:88:47:04:f5:d8:92:91:fd:9a:a6:03:c4:e8:b5:
f4:c9:34:0b:17:a8:76:a1:ca:a7:55:5b:b2:77:86:11:55:5e:
f5:b3:0e:16:4b:08:da:98:78:b1:80:63:1c:b1:e5:b5:b6:31:
99:bf:df:b2:26:e5:dd:20:35:75:8a:0a:09:57:31:87:6a:bf:
41:7e:8a:7c:de:f1:c0:ca:4b:51:60:6b:47:23:44:37:5a:e7:
c2:43:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:10:15 2025 by rpki-client