Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/91F6CB78CC8411EFB64BE274C4F9AE02.roa
File: 91F6CB78CC8411EFB64BE274C4F9AE02.roa (raw, json)
Hash identifier: Lyqkbw8kpDEXFRP3wM9V8TcwvtVc37CFnp2p01EAY4g=
Subject key identifier: E5:86:C2:81:4D:A3:8A:42:E6:27:63:05:D1:1D:CF:D5:40:77:84:49
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 041A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/91F6CB78CC8411EFB64BE274C4F9AE02.roa
Signing time: Mon 06 Jan 2025 23:18:43 +0000
ROA not before: Mon 06 Jan 2025 23:18:43 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 149977
IP address blocks: 203.32.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jan 6 23:18:43 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=677c64d3-2fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:57:0c:7e:a8:19:65:d5:89:2b:76:cb:cb:
bc:55:85:d6:7a:10:a3:66:57:bf:62:a3:3a:a6:15:
71:00:42:39:22:89:a2:7b:5a:7f:27:65:be:c8:9b:
3d:a0:31:32:ec:42:88:2c:42:9d:f1:0b:db:23:a5:
6f:6a:8a:67:b5:f3:c9:80:0c:54:ca:4a:3a:fa:64:
e9:96:70:27:a8:cb:f1:e3:3f:ba:c3:61:53:a7:a9:
af:5c:86:c1:7c:3e:0e:b2:91:a7:c2:7b:55:79:d0:
e6:ea:88:c8:4d:a4:ca:6c:2c:13:bd:38:a9:2b:1c:
d0:df:d3:20:c2:c9:32:2a:ac:7b:65:0a:2c:8a:43:
1d:28:15:2c:47:a9:89:ee:33:3c:f9:fa:e2:40:7f:
23:56:77:d5:ad:25:4b:27:2a:6d:7a:6e:ce:42:80:
c9:c2:8c:e7:69:73:78:a2:af:ff:e2:50:56:a6:e6:
f0:a3:94:53:c2:7a:2b:a5:ad:7d:0b:91:d8:c9:52:
4a:ac:95:17:5c:df:fc:0e:e0:80:c6:53:b5:09:5a:
da:f2:88:70:8c:b4:eb:a2:99:5c:85:61:2a:10:18:
d1:2d:51:d2:0e:4a:0b:84:c6:f6:68:d8:3a:0d:04:
15:82:cf:42:c0:ce:6a:48:16:29:c3:e7:9b:b0:66:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:86:C2:81:4D:A3:8A:42:E6:27:63:05:D1:1D:CF:D5:40:77:84:49
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/91F6CB78CC8411EFB64BE274C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.28.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d9:7a:e6:5f:09:0e:9d:0c:1c:35:aa:96:00:c9:e0:63:35:
b7:b9:78:4b:02:90:90:0e:65:6e:42:8a:21:f0:33:2e:78:f2:
05:9f:ca:25:e9:fa:67:d9:d5:42:18:dc:9b:bf:08:78:11:cc:
79:5c:92:07:21:af:57:5b:c0:2b:27:de:22:d8:e6:3b:ed:b6:
ff:c8:10:99:a5:52:ee:19:ae:94:cc:99:34:fd:12:82:64:ad:
60:9e:7e:02:b0:3c:f6:81:20:cf:bd:8d:1b:27:f2:ee:0d:e2:
db:2d:f9:51:40:ea:d9:7d:03:0e:50:dd:8b:61:83:4d:55:51:
07:ca:b0:45:99:34:2e:26:c4:61:d5:21:6c:50:63:9e:b6:46:
01:5c:ca:62:a6:fe:3e:67:3f:89:e2:65:fe:d8:c8:9e:51:00:
b8:53:d7:60:ba:10:ea:07:fb:23:a8:63:68:6f:0f:fb:e0:e0:
50:ef:e3:f6:a6:ee:75:e1:af:db:ee:d9:9d:f3:cf:a9:a6:85:
ba:1d:0b:f4:f0:ad:1c:ad:f6:49:63:2a:d2:b2:ae:87:81:41:
02:70:cc:85:5b:38:00:d3:e2:76:d7:13:7e:a4:60:0e:44:33:
ce:4c:0c:72:0c:cf:69:6c:66:e3:d4:12:67:65:d5:33:49:c4:
42:b7:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:29:36 2025 by rpki-client