Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa
File: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (raw, json)
Hash identifier: BTLl2ZQykfG+tipQAUgtzvqp3DpDHeGIHhFJsSIVOWM=
Subject key identifier: 4B:83:7C:39:D6:DE:67:4D:D4:98:1A:FF:74:03:45:6E:2D:5A:D6:E0
Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Certificate serial: 02A9
Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa
Signing time: Sat 13 Jul 2024 03:24:13 +0000
ROA not before: Sat 13 Jul 2024 03:24:13 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 56286
IP address blocks: 203.222.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Validity
Not Before: Jul 13 03:24:13 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6691f35d-d42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:1c:29:6d:8a:ec:b9:fc:f1:ee:a6:d8:d5:
db:ca:fb:8a:86:0a:9d:62:f6:04:0c:7d:19:11:3e:
d9:21:a0:85:c9:df:b2:c3:78:34:1f:13:a3:15:97:
01:07:25:c5:fb:4d:35:c4:44:13:a6:9a:67:3a:b7:
87:89:3e:b1:3f:68:76:5b:e2:5c:5e:f2:ac:f5:1c:
86:87:78:af:69:ed:03:e0:e0:af:4f:6d:c1:be:c9:
98:95:d3:21:b1:da:c9:32:2f:cf:16:e8:88:d7:64:
cb:05:1b:bd:03:72:13:cb:cb:66:21:6f:4f:5c:78:
78:87:5d:aa:1b:ca:29:13:6b:cc:91:88:96:6b:2f:
6e:a7:f8:6e:14:b3:81:9a:cb:c7:ad:bd:dd:e5:c0:
f2:f3:11:98:08:c7:9b:d6:c0:31:61:97:f7:53:b4:
56:4c:07:83:e9:0d:4c:e8:44:c0:82:8e:36:a6:20:
02:28:1c:b9:97:e2:50:d6:93:f2:1f:fc:19:7d:92:
23:3d:28:17:b9:b0:3a:85:a9:ed:ed:74:0b:c2:70:
45:a6:33:b1:df:71:62:36:68:35:4f:3b:21:f6:f7:
0b:48:09:a9:71:0e:a8:b3:12:55:5d:4a:75:26:35:
74:1b:36:f6:cb:6f:b8:d8:f0:fc:26:74:71:9c:40:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:83:7C:39:D6:DE:67:4D:D4:98:1A:FF:74:03:45:6E:2D:5A:D6:E0
X509v3 Authority Key Identifier:
keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:97:8f:8c:69:b8:9d:ba:ad:2c:21:7e:1f:a9:6e:10:74:58:
57:eb:90:64:76:af:fe:e5:da:e2:58:af:82:f1:09:c0:6b:34:
6f:a9:6f:82:da:14:75:3f:66:69:95:0d:62:20:26:b7:52:ec:
fd:46:8c:77:47:53:15:d3:19:64:85:ee:b9:5d:f3:3e:36:f0:
b7:15:98:50:dd:2b:7c:13:64:a3:a5:fa:6d:87:0f:86:99:78:
db:cc:38:1d:6b:68:c5:9d:ba:be:e7:70:72:e5:55:66:bd:67:
b3:b9:b8:43:53:a4:bd:11:8a:8b:91:78:ca:cd:82:30:b0:d1:
31:ae:6a:19:28:1a:2c:5a:e6:b9:b6:b1:4c:ec:b4:72:9a:53:
4e:03:d1:c9:65:ce:65:ea:c5:d1:9c:46:ae:a0:de:aa:09:d0:
38:4d:85:2c:c4:0e:b4:40:a3:b3:da:58:2e:f9:40:f2:2b:6c:
32:1b:35:50:13:12:d8:c2:5c:c6:96:f3:d6:f7:3a:12:50:92:
aa:54:cf:82:41:d8:c2:68:ac:a8:0d:02:1b:fa:58:5f:16:50:
5b:ba:ea:e2:8d:7c:e7:8f:b0:28:9c:f9:08:b6:c7:ce:4d:b6:
d5:a5:8b:c9:1f:6e:49:0a:e5:38:31:a1:68:ec:44:e7:99:c4:
1a:8a:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:53 2025 by rpki-client