Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/10854F3E516B11EC86C3243EC4F9AE02.roa
File: 10854F3E516B11EC86C3243EC4F9AE02.roa (raw, json)
Hash identifier: Wy6Q8riSJ2ZA9beGIPBq+oF4HNk5aw3NBdp9GfPj95A=
Subject key identifier: C9:F3:11:CF:DF:1C:50:5D:63:B7:23:38:6D:F8:3E:B0:BF:34:F9:05
Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial: 0424
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/10854F3E516B11EC86C3243EC4F9AE02.roa
Signing time: Wed 01 Jan 2025 00:03:54 +0000
ROA not before: Wed 01 Jan 2025 00:03:54 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 58434
IP address blocks: 203.96.252.0/22 maxlen: 22
203.147.92.0/22 maxlen: 22
2402:2f00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Validity
Not Before: Jan 1 00:03:54 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6774866a-eeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:a9:4f:fd:13:94:a4:0a:f5:de:68:0a:43:
89:8c:0c:69:19:e7:55:82:6b:10:0a:41:17:47:d7:
7b:3b:73:0c:11:5c:4c:a4:45:b5:6d:e8:b0:dc:ae:
a7:12:7c:ae:11:a0:5f:fa:a9:28:0e:e2:58:dd:a8:
27:9e:67:9e:ad:d7:7a:84:3d:f1:cc:1d:da:c9:2c:
d9:85:80:7b:43:dd:fd:0d:6e:62:84:06:04:47:c9:
44:e8:44:0c:01:4f:5a:89:f9:94:7f:e9:da:ea:96:
1d:1b:a2:d0:d4:17:53:e3:f1:49:2f:72:20:50:22:
cf:17:fa:21:f6:4d:f9:78:1d:f4:14:6c:81:6c:f0:
14:ef:cf:3c:1f:8a:2b:70:85:b5:ba:fb:8c:6b:17:
8b:df:7c:0e:bc:38:71:86:72:80:96:4b:e1:5d:a0:
a3:cb:33:e8:43:73:5d:94:e4:f3:2d:62:65:2f:1d:
f6:5d:e3:70:d1:14:85:78:93:8f:5b:83:5e:24:27:
8d:31:2f:57:d4:fb:5e:5a:d3:3f:ff:ff:de:0a:a6:
41:7f:94:a5:09:5a:a8:8e:23:cf:d1:ab:b7:14:72:
f2:3e:c3:d7:36:2c:ca:f5:c1:5e:43:a9:68:b5:88:
7f:0e:a3:8d:d6:45:6d:19:ff:be:cb:1d:15:9f:c2:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:11:CF:DF:1C:50:5D:63:B7:23:38:6D:F8:3E:B0:BF:34:F9:05
X509v3 Authority Key Identifier:
keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/10854F3E516B11EC86C3243EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.96.252.0/22
203.147.92.0/22
IPv6:
2402:2f00::/32
Signature Algorithm: sha256WithRSAEncryption
80:d3:15:8d:24:42:61:94:96:45:ca:d7:50:46:18:b6:4d:1c:
17:01:0d:ac:02:af:86:21:79:fb:c8:54:9c:3f:da:cc:57:19:
54:fa:e4:2e:56:31:8f:0c:79:a5:b6:ff:76:34:7b:4d:9d:07:
8e:a4:d3:2c:56:06:32:d1:c1:e8:58:80:b9:64:2b:2a:c1:41:
b9:8b:9e:b4:e0:e4:c1:2e:0b:34:36:15:7c:79:ea:19:bb:39:
00:98:aa:f3:f4:ba:16:0e:3b:1e:08:1e:c7:54:9e:de:5a:62:
ec:63:37:a0:45:08:d3:57:01:ef:cb:ff:3e:94:07:8e:38:83:
88:8d:51:3a:9e:c7:78:f9:52:5f:ab:20:f6:ae:82:b9:64:5b:
43:8f:01:39:93:32:15:bd:4c:9e:0d:66:26:ec:f2:5c:7c:b7:
97:30:55:fb:ff:f6:88:49:5c:a2:ea:2a:76:2b:95:1f:bd:d5:
ac:be:31:2c:0e:ef:bf:13:71:92:a2:02:60:be:80:0a:e2:61:
67:26:47:d7:55:69:a3:6e:cc:77:51:f8:dd:2c:b5:06:98:f3:
9a:e4:53:49:84:5c:43:d5:fd:e5:2d:0a:ba:62:ac:56:87:7d:
76:90:64:a3:dd:23:ef:72:69:92:66:13:f1:a0:21:6f:a6:39:
3e:96:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:06:22 2025 by rpki-client