Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa
File: 1321A11C9DF311E99A8DE961C4F9AE02.roa (raw, json)
Hash identifier: cQiqhuQgXXNHTU/ffynuc1SAf/nm6jGnBhRn8EgH/qQ=
Subject key identifier: 4C:48:49:FB:0E:D4:8E:76:CA:9C:97:16:E8:31:80:AE:6B:52:D2:64
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 1905
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa
Signing time: Sat 18 May 2024 17:25:13 +0000
ROA not before: Sat 18 May 2024 17:25:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9896
IP address blocks: 202.37.60.0/22 maxlen: 24
2001:4403:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6405 (0x1905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: May 18 17:25:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6648e479-d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:36:ce:02:20:28:d8:98:57:f8:f9:23:da:
bc:76:a6:44:6b:00:ed:b6:72:0f:e6:54:45:0a:9d:
88:1d:04:17:b1:ce:48:22:65:9b:0d:56:1c:4c:eb:
d6:64:86:dc:9f:a6:eb:41:f6:5a:9f:f9:00:db:43:
ad:29:99:e4:f4:35:68:41:bd:15:18:74:66:4f:7e:
8a:41:be:08:1b:88:94:56:14:43:6f:7e:8e:6b:f7:
ed:d4:ae:1d:fd:00:37:33:81:80:28:79:7f:53:1c:
76:45:6f:e4:a6:1b:fb:b1:57:9f:a5:bb:3f:10:05:
c3:8e:66:f5:6c:c6:b9:03:34:2d:65:73:9d:53:97:
7c:5d:cf:3e:fe:2c:2f:22:da:f0:db:d6:62:d7:2e:
7f:9f:3a:9c:3c:31:4a:6c:c1:88:a5:02:59:b0:95:
4f:8d:03:fe:c4:8b:fa:ae:c5:90:29:fd:d4:03:65:
60:2e:7c:66:81:f6:99:5a:ad:94:b9:64:a4:42:c8:
63:64:05:ce:82:ec:5b:16:06:bb:72:e6:2f:42:1e:
e3:86:83:e6:23:7d:10:f2:c6:fd:20:23:a1:d5:0b:
ae:30:e9:3d:26:c6:12:b1:29:da:a9:18:f3:c5:7e:
79:01:25:00:3d:d3:57:0d:33:c5:fb:6d:2f:08:a9:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:49:FB:0E:D4:8E:76:CA:9C:97:16:E8:31:80:AE:6B:52:D2:64
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.37.60.0/22
IPv6:
2001:4403:dead::/48
Signature Algorithm: sha256WithRSAEncryption
90:c5:68:75:9d:8d:80:c7:ce:2f:68:33:87:51:a9:ea:b3:e9:
9f:b0:7a:64:9d:84:e8:d1:a5:14:8e:7c:9e:d8:9e:cd:cc:f0:
db:96:c4:d3:e7:08:15:2d:96:f0:14:73:2a:6d:76:c5:37:38:
17:03:d2:22:b7:89:d3:70:47:f8:99:94:05:5f:01:7f:5f:d8:
26:d0:e3:a6:a2:38:c1:e2:fa:92:b4:11:64:4d:62:f3:ab:6e:
65:35:c0:9a:c5:02:f9:f6:75:63:96:20:d0:3b:3c:42:76:21:
23:ce:af:1f:d5:25:d1:ce:6c:ea:8f:9b:07:22:3f:ef:3a:4a:
70:b2:2c:f0:e0:d6:d0:43:98:95:dd:b2:5a:3f:7e:ed:b9:45:
b6:9e:14:5b:ec:26:59:2a:28:d2:13:7c:97:46:1e:4b:4b:79:
8c:f9:61:df:b5:a1:b4:4e:b5:02:63:c2:d0:3f:22:bf:39:83:
a1:82:2a:8f:f6:17:a2:02:c9:95:3d:c1:f6:ef:0e:35:02:e5:
a9:a2:f4:72:8c:36:4f:95:66:e5:97:1b:2b:3e:ed:7c:17:6e:
89:e6:c8:45:8b:9f:5f:a2:b9:ca:78:09:ca:43:05:12:16:d6:
be:eb:4c:4b:48:b0:de:82:2d:50:63:a6:08:64:2f:de:74:2a:
9d:4e:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:01:42 2025 by rpki-client