Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/310E8C36A30A11EFB999C96CC4F9AE02.roa
File: 310E8C36A30A11EFB999C96CC4F9AE02.roa (raw, json)
Hash identifier: FU5mvxZceIbuuDUak3lQhNYET6+mipMS+ZwuFdmTgz4=
Subject key identifier: 44:14:83:0F:5D:59:AD:00:28:ED:67:7B:09:D3:B0:27:93:E4:30:C2
Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Certificate serial: 06
Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/310E8C36A30A11EFB999C96CC4F9AE02.roa
Signing time: Fri 15 Nov 2024 04:29:24 +0000
ROA not before: Fri 15 Nov 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38058
IP address blocks: 202.91.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Validity
Not Before: Nov 15 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6736ce24-9e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:c4:ac:9e:5d:93:65:e4:0c:d7:f8:15:05:
4b:16:59:32:e5:1b:0c:84:84:ce:85:1d:ed:5d:87:
b4:94:b6:8c:59:5a:df:77:95:3e:a5:a7:57:b0:43:
0e:93:3d:bb:ff:e2:79:fb:14:90:93:f0:4f:0e:eb:
91:f1:d1:eb:94:1a:39:5b:cb:de:eb:37:33:84:06:
d7:30:2f:d0:4b:c3:09:71:07:7b:2e:1e:02:4e:a3:
6a:71:99:20:55:b3:62:79:aa:58:c5:4c:c5:77:95:
3d:a8:c9:11:41:76:dc:d4:7d:5b:03:86:de:1f:af:
0e:52:91:e4:43:ce:2c:aa:fb:1e:59:4c:df:74:0d:
05:64:7e:77:a0:1c:45:c7:ec:09:65:0b:f9:eb:34:
e7:62:f4:e7:1f:01:09:e8:48:c3:70:a7:65:7a:63:
8a:7f:f6:7d:17:94:f9:57:03:29:65:87:fa:f4:75:
5a:a9:b4:45:e4:46:3d:36:e5:21:bd:cc:a4:67:3d:
59:3d:70:70:a1:35:63:c8:f4:3e:5e:57:77:11:2b:
f3:77:3d:d2:fb:e3:03:23:77:34:ef:52:70:5c:05:
6d:5a:96:0c:bc:bb:05:30:2d:b1:dc:36:15:b5:83:
ab:65:41:fe:b3:51:52:6d:a7:a9:90:fb:cb:97:5e:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:14:83:0F:5D:59:AD:00:28:ED:67:7B:09:D3:B0:27:93:E4:30:C2
X509v3 Authority Key Identifier:
keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/310E8C36A30A11EFB999C96CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.91.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:35:02:d9:fc:df:81:0c:49:6c:70:49:6f:83:86:85:94:44:
e9:2e:78:10:ef:b4:d5:61:dd:c8:00:e5:e2:33:3d:8d:31:40:
7c:e9:e2:f5:14:18:6b:d1:54:6d:a5:d9:32:2d:8f:28:5f:df:
45:78:89:d7:87:be:a7:2f:ea:a4:52:fe:83:c1:ad:00:aa:aa:
c3:06:c1:6a:92:b0:8d:14:ac:9c:07:2f:7e:3d:54:ac:bb:68:
95:68:ec:15:25:f9:63:25:9c:89:20:ce:a2:b3:95:bf:34:9b:
a1:86:c2:ae:a3:93:19:ad:1e:ef:eb:8c:d3:2e:e0:1e:0a:f0:
e7:95:06:d7:28:32:d4:d3:69:b1:bf:34:2e:0c:39:91:ce:b4:
f2:60:da:0f:26:e9:5f:d4:37:3a:c1:79:c6:aa:1a:d4:a3:a3:
bb:4c:72:69:01:f3:6b:37:5f:fb:ba:ef:6e:46:7e:bb:f0:80:
20:ca:4c:d1:7e:97:11:6f:cc:42:fd:4c:78:40:d8:1d:c5:75:
7f:b7:c4:e2:a2:b4:ad:04:91:16:9e:ba:6d:95:85:16:a4:0f:
40:6b:81:18:a3:13:7b:5f:73:8e:d6:91:52:2c:69:4e:61:a1:
25:2d:fe:4f:98:d8:ef:eb:af:17:88:13:56:ba:60:d6:e5:35:
69:4b:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:01:43 2025 by rpki-client