Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/088C9298981611EFBE510B59C4F9AE02.roa
File: 088C9298981611EFBE510B59C4F9AE02.roa (raw, json)
Hash identifier: qXlLmIEo6DdPF2wbC+hI8xTl9OfbwJAdMpbZ+ukL71g=
Subject key identifier: BE:F5:3A:D8:11:66:94:BB:D6:FC:46:17:B6:FC:79:42:65:9D:40:EF
Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Certificate serial: 02
Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/088C9298981611EFBE510B59C4F9AE02.roa
Signing time: Fri 01 Nov 2024 05:56:27 +0000
ROA not before: Fri 01 Nov 2024 05:56:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152690
IP address blocks: 202.37.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Validity
Not Before: Nov 1 05:56:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67246d8b-c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:ee:ab:cc:b3:00:fb:56:d6:30:15:06:1f:
63:c8:bd:85:b7:b6:d0:2d:7e:9d:6d:fe:d5:e9:ce:
aa:4f:c5:9b:c1:34:ea:cf:e6:f9:cf:f6:80:10:dc:
e0:02:2f:13:31:56:c0:ea:89:55:dc:42:6f:eb:0f:
dd:ab:9d:57:82:06:1a:26:19:a0:e1:0b:b4:3c:7f:
5f:f1:11:89:85:46:7e:3b:24:26:d9:35:28:5b:0a:
5e:b2:24:d2:9a:59:dd:7d:1d:59:4f:0e:2d:45:ec:
b5:a6:4d:02:0a:7d:77:2c:bf:29:da:22:18:dc:fa:
77:51:27:4d:b0:76:79:0d:59:80:a3:2c:72:ed:2d:
d7:96:dc:04:28:3a:06:fa:0d:06:dc:15:7f:f1:b3:
9b:fa:aa:fa:87:c3:fa:8c:38:db:08:28:32:e4:d9:
70:1e:a4:84:db:39:cb:55:dd:59:b6:bc:88:81:d1:
1b:31:3f:e8:5b:16:20:b1:a2:1c:eb:78:38:a1:63:
c2:c7:4e:cc:0d:0b:0b:9e:26:8b:30:33:d2:47:f6:
98:07:7c:b1:a1:b4:1a:22:fc:22:28:9d:f5:98:6c:
e3:6f:05:55:69:f5:cc:d5:1e:12:6f:dc:b2:ef:a3:
5f:ca:0e:1e:d5:38:3b:0b:9e:ed:3a:19:44:58:0e:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:3A:D8:11:66:94:BB:D6:FC:46:17:B6:FC:79:42:65:9D:40:EF
X509v3 Authority Key Identifier:
keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/088C9298981611EFBE510B59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.37.166.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2c:98:d0:d7:75:e1:55:a7:78:9f:e5:65:a4:80:28:ac:84:
2d:6f:c4:38:8c:c4:8a:72:06:f9:5d:f3:39:72:e8:a5:ec:ec:
ce:8c:2b:5c:61:1b:f6:9c:c9:da:71:58:74:ef:a2:9b:3e:7c:
19:3f:47:94:0c:f1:2f:4c:f8:1a:58:de:f7:65:56:f4:2d:5c:
54:15:fe:a8:13:91:c0:57:14:d1:65:26:15:f7:c9:25:f6:b5:
32:29:ae:17:7b:21:1c:e1:28:e4:58:4c:c7:b5:5d:97:7c:b6:
f2:df:41:ed:d4:54:99:3d:91:12:99:a9:f5:62:60:9e:a3:bf:
39:07:37:a5:99:f8:92:e5:9f:a8:77:c3:b0:67:98:a3:b7:68:
04:3d:21:ce:56:6c:0b:db:12:cd:0f:89:5f:db:82:b6:4f:7d:
56:46:c6:24:e4:cf:50:9b:24:4b:ff:58:5a:2d:51:4e:96:1c:
55:6e:67:53:65:ca:fd:19:c2:bc:b0:82:8f:4c:61:fb:61:c7:
36:b1:bc:fe:fa:16:08:2b:58:24:5e:25:54:1b:aa:7b:05:87:
78:9c:45:7d:77:64:9f:83:22:33:a1:25:95:6b:74:93:b2:43:
e4:b4:bd:2c:eb:b0:e0:40:fb:a3:0b:72:0e:a0:c6:16:c0:91:
54:25:e7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:41 2025 by rpki-client