Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/5F0436A08AAF11EE93D5E566C4F9AE02.roa
File: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (raw, json)
Hash identifier: 7EvN151Z0cCWehOeO5V1tb71Wpww4FkgmZYoCsNNWOI=
Subject key identifier: 39:BB:F3:AE:75:08:BF:02:53:CA:9A:72:21:FA:29:C1:A1:D3:70:8D
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 0757
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/5F0436A08AAF11EE93D5E566C4F9AE02.roa
Signing time: Tue 02 Jul 2024 23:11:16 +0000
ROA not before: Tue 02 Jul 2024 23:11:16 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151959
IP address blocks: 203.151.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879 (0x757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: Jul 2 23:11:16 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66848914-ad6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:a3:61:aa:94:55:29:4c:20:d9:31:58:31:
1e:13:20:e7:85:f1:fb:99:47:02:f3:22:07:73:b9:
d5:45:a7:75:b5:80:bd:63:0a:a9:74:56:e4:3d:ec:
8d:a8:b3:00:68:0c:f9:20:d6:1e:7b:3e:d1:db:61:
81:59:63:da:8a:5e:2f:ca:ed:dd:14:5d:49:2a:56:
c6:bd:4a:f5:29:45:aa:7c:f5:97:59:17:7e:6e:94:
f7:86:a5:9c:be:8c:d1:18:36:5e:44:84:05:41:26:
31:97:bb:2c:38:93:4c:97:8c:cc:18:e2:99:1b:b4:
95:7a:b3:5d:17:44:2b:31:0d:f6:12:06:93:20:47:
7b:a4:bd:d3:f9:39:08:9d:a7:13:25:71:4c:2d:5f:
cc:1b:d0:a2:ba:b7:c2:c9:11:7f:f7:3a:ea:18:50:
b4:95:7d:b9:81:10:2a:2c:d5:ee:a0:d6:23:21:1a:
04:db:f5:b1:16:45:c1:32:1c:71:bf:cd:42:b1:0a:
3f:f6:84:ea:77:3d:48:b6:4e:35:ed:7d:dd:03:e4:
12:cf:3f:7e:c1:fb:f3:c9:df:fb:77:b8:a0:9f:92:
6e:24:c7:ca:28:d5:6d:11:da:88:ae:b9:4c:36:1f:
ca:77:e5:d5:32:40:f0:8d:9c:5d:11:18:80:e9:fe:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:F3:AE:75:08:BF:02:53:CA:9A:72:21:FA:29:C1:A1:D3:70:8D
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/5F0436A08AAF11EE93D5E566C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.151.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:af:a4:43:f6:72:87:71:82:e7:a4:f5:eb:9c:c8:c4:6b:30:
f6:a7:8a:bd:d9:87:d7:8f:c1:34:74:94:22:df:fa:80:36:8f:
3b:f9:0c:a7:1f:c0:5c:77:64:f0:39:eb:00:da:c2:8a:69:7f:
d2:06:33:c5:cc:f3:fd:ec:0e:64:19:46:48:c0:12:ac:9f:e9:
3d:a3:d7:8f:12:e2:af:87:7f:9f:d7:c3:a0:87:a1:ba:a7:82:
fa:92:96:ad:ee:2e:6b:96:3b:f4:56:01:1b:f4:b4:43:64:37:
08:1c:8d:7b:56:e0:62:09:02:17:cc:1c:36:3c:07:8b:e8:61:
1c:58:e1:a8:45:5f:76:cb:b0:62:83:76:ca:92:ad:aa:48:a5:
36:2c:7e:03:65:76:01:ed:22:92:a7:a6:68:79:59:13:cf:16:
9a:6e:79:26:49:fc:97:6d:fe:98:49:78:f9:75:a1:12:5e:11:
5d:fc:93:80:a1:f9:f0:c1:1d:1c:d2:f6:08:65:15:31:56:1a:
34:cc:ad:31:8d:2a:8c:46:b4:0e:73:8f:92:b6:ba:fd:76:87:
1a:dd:b0:29:63:44:f7:fb:87:2d:fb:38:ad:30:11:eb:e5:c3:
f5:6f:90:09:c4:46:42:82:b0:0b:2c:c8:1c:80:da:eb:de:58:
13:0b:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:17 2025 by rpki-client