Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa
File: 41D286CA51CE11EC83E7510AC4F9AE02.roa (raw, json)
Hash identifier: BA4nOEjUScZuz347W4aTK/dm7/qWZUHBYbzZ8WEfOUk=
Subject key identifier: FB:AA:11:07:38:92:25:29:BC:E2:C3:40:C4:CE:86:10:64:6B:F0:F4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90CD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:29 +0000
ROA not before: Thu 30 May 2024 16:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38021
IP address blocks: 203.190.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37069 (0x90cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a969-6917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:4f:34:4a:a7:73:62:54:7c:aa:75:57:8c:
c0:9c:1c:ce:3e:79:a4:1d:ef:44:f3:91:30:97:53:
4c:6e:01:98:24:9a:25:56:fc:d0:a5:e5:00:27:da:
d9:7f:92:2d:d1:5b:93:da:d6:f1:57:e8:2c:8b:9c:
68:ac:a0:e5:eb:c0:48:a9:f5:85:df:d6:f6:2c:78:
66:b4:2f:19:4c:73:b5:66:c0:34:a2:83:1a:40:c8:
09:55:da:a6:7c:93:0b:73:6e:ae:a1:81:6d:05:e9:
ed:18:9e:a4:75:de:b4:9d:7e:96:6b:e0:43:a9:4f:
8b:9c:f6:d9:99:25:3b:ae:02:62:d9:ca:4f:ec:e5:
51:ef:74:c5:ca:65:27:4f:84:4a:33:96:13:52:df:
01:a9:5b:7d:1e:06:3a:9c:15:50:17:ca:70:2a:10:
da:fd:d7:3a:6f:4f:17:d0:1f:42:83:d2:42:f5:d8:
c5:b8:f0:ed:06:19:20:b6:a4:08:d4:da:77:ac:78:
ff:00:2b:2f:c4:10:2b:01:93:99:f4:ff:ee:6c:b7:
24:18:39:9d:d5:cf:29:d4:25:bf:61:3c:27:86:70:
f2:fc:4b:14:fc:b7:49:66:38:20:4f:76:59:eb:c8:
a1:b5:cb:13:34:9d:0a:6b:27:07:fd:79:b2:01:d8:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AA:11:07:38:92:25:29:BC:E2:C3:40:C4:CE:86:10:64:6B:F0:F4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.190.248.0/24
Signature Algorithm: sha256WithRSAEncryption
05:17:21:cf:fb:91:3b:f0:8b:5f:d5:66:af:da:02:86:c3:cc:
9d:17:d3:33:7a:81:d5:43:42:e9:a3:fd:7b:d5:c1:35:d9:38:
60:62:b7:b4:33:54:7b:e0:25:c6:6d:63:f2:24:fe:33:59:df:
16:6d:20:3c:d8:4a:4e:64:0a:b0:32:85:45:30:87:a1:a0:78:
f5:fe:d1:b0:f1:a7:b8:b6:b9:1b:20:c0:f3:ec:0c:e5:d0:e4:
f3:32:57:b1:77:67:35:fd:57:08:a7:65:fd:9d:30:b6:72:f3:
10:a0:88:36:30:0c:2e:be:6d:36:f8:c5:db:d7:35:cb:ac:c4:
aa:03:58:97:03:e0:d6:5d:e6:4a:cc:f4:80:8b:03:67:ab:c8:
cf:eb:4f:22:e3:b0:bc:db:ff:79:d6:87:ed:4c:ce:d2:51:52:
91:87:e7:bd:da:92:ec:74:45:15:8b:f2:d4:5f:4f:ca:ca:27:
c6:2f:36:14:73:5a:d2:43:6d:4c:de:62:b6:dc:34:31:cb:67:
0d:f2:25:da:f9:e8:ae:89:68:01:8a:44:12:e5:66:33:0e:48:
0a:22:68:6d:ad:7d:81:51:43:48:cf:13:6e:23:78:35:b3:a3:
2e:6d:ca:ce:9c:56:5b:ed:cb:41:3c:6f:8e:9f:62:76:db:18:
c1:e4:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:59 2025 by rpki-client