Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa
File: 8F5856362E9511E9896EFA1DC4F9AE02.roa (raw, json)
Hash identifier: pa1Fyj4rJ9wsQhHKUYwleZnXaMszFSBEcPoalFBKpsk=
Subject key identifier: 02:79:CE:4E:80:9D:B5:06:64:09:E6:85:8D:27:A2:3D:E0:C6:67:CC
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 1032
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa
Signing time: Tue 30 Apr 2024 18:26:34 +0000
ROA not before: Tue 30 Apr 2024 18:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59348
IP address blocks: 202.78.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4146 (0x1032)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: Apr 30 18:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663137da-ca86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:48:b7:0d:b1:7c:d3:6f:6b:78:f6:bf:44:
b0:52:18:dc:bf:f7:82:eb:97:36:6e:72:35:5b:3f:
9a:7f:c1:4b:13:15:5e:b5:15:e6:0a:37:6b:cf:88:
57:a7:a1:fc:69:66:ea:05:26:00:7e:c4:95:98:00:
da:8e:dc:59:b8:07:36:4f:b0:61:6a:45:5b:7c:7e:
56:90:35:6f:8d:f7:a9:89:90:40:e1:77:0b:24:52:
d0:9f:bb:1f:ea:1a:60:06:d8:e4:bb:d8:53:39:c6:
e3:3f:f3:4f:4a:2f:de:62:ac:63:60:a8:a3:32:5d:
d6:b8:d6:df:40:0a:50:2a:c5:8d:76:c9:35:c7:4c:
6b:fc:4d:dd:e9:78:63:68:ac:79:60:09:34:b3:3c:
74:86:eb:81:fe:6d:59:ed:29:71:25:cd:c8:e3:81:
4d:cc:75:ad:8c:57:c2:c2:8a:5a:92:8f:60:5d:f6:
2f:0a:c2:95:eb:41:c7:f1:91:14:2c:06:20:bf:ad:
b6:83:ff:e5:7c:a7:f7:9d:77:64:63:86:47:26:bc:
6e:a2:dd:16:2e:23:82:30:bb:0c:85:bc:1a:1f:ad:
cf:30:d2:58:5f:88:a8:2d:bc:04:6c:bb:31:60:60:
04:f0:0e:3b:f9:26:c6:7d:f1:89:1b:40:9e:4d:49:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:79:CE:4E:80:9D:B5:06:64:09:E6:85:8D:27:A2:3D:E0:C6:67:CC
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.78.64.0/23
Signature Algorithm: sha256WithRSAEncryption
91:09:b4:8f:d4:d0:a3:40:59:5b:0b:24:a6:c0:dd:09:ad:dc:
82:1a:d3:24:bd:a5:4a:c9:ce:05:da:77:16:13:b2:71:2a:ac:
9a:6c:79:f2:cb:44:ea:45:f0:09:ef:3b:0d:8c:d3:18:2c:d8:
9d:8c:71:f8:14:45:60:3f:77:c5:88:7d:9e:2d:6d:8c:4a:3c:
eb:6b:87:cf:6d:4e:f3:2a:37:a5:b4:4f:ec:c4:72:37:7f:e6:
6f:a6:eb:72:f1:28:ff:e4:43:99:13:f8:f6:f9:28:9b:0e:f8:
d3:62:e9:33:d1:d0:a3:33:2e:39:78:0d:f1:7c:27:d2:4e:a7:
b5:41:c3:9e:d6:7b:2f:35:ff:b0:5d:da:8f:10:c2:4b:81:5e:
6a:d2:4e:e2:b6:9d:cf:df:3f:40:45:58:43:41:71:4f:22:8f:
a8:e2:cb:88:d2:d8:7d:9c:c2:68:ae:11:c2:04:8e:60:be:3c:
c5:f1:90:dc:28:f1:58:e7:87:03:50:b3:96:2f:88:98:18:3e:
9c:cd:b7:0d:46:8f:0c:22:36:07:7f:e5:90:ba:60:b3:50:c5:
84:c9:05:81:a9:15:cd:b2:eb:3f:ce:aa:07:6d:9f:4a:6f:aa:
e6:32:39:c9:f8:98:bd:bd:fc:31:a0:25:d4:1e:fa:de:22:3d:
7f:8a:78:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:24:30 2025 by rpki-client