Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3D7D4F3CDB2411EF96E1E921C4F9AE02.roa
File: 3D7D4F3CDB2411EF96E1E921C4F9AE02.roa (raw, json)
Hash identifier: c0nzS24wGSQXKuiHiTJPiwdpLwxjSOPG+dt8KXjc8+Q=
Subject key identifier: F9:B3:53:34:AE:46:E1:A6:6E:61:27:00:C9:7E:22:FA:D4:CB:50:5B
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 026A
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3D7D4F3CDB2411EF96E1E921C4F9AE02.roa
Signing time: Sat 25 Jan 2025 13:56:57 +0000
ROA not before: Sat 25 Jan 2025 13:56:57 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 150519
IP address blocks: 202.155.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Jan 25 13:56:57 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6794eda9-80ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:b1:80:3e:ef:1a:9b:f3:57:87:39:fa:2f:
26:29:aa:7b:dd:4a:b2:0f:30:3d:b3:50:89:b9:51:
da:83:67:af:fd:fc:67:a5:95:39:46:bb:17:c8:db:
45:7b:bc:ee:10:dd:0c:e5:ab:6b:53:91:a1:71:a5:
90:0e:95:1f:cd:af:8b:ec:7e:36:c6:4e:d9:7b:15:
96:6d:bb:4b:03:9b:d8:eb:87:f6:24:c5:2c:75:6d:
9d:8d:38:3e:8b:20:7e:ee:69:e5:25:9b:e3:32:cc:
b7:c6:f7:c9:d4:66:ee:c4:4e:26:66:6b:79:2c:f8:
d0:f8:2a:7f:95:eb:c3:0f:f0:12:ed:43:11:71:b9:
96:ed:d9:1a:f2:65:ae:6b:12:71:3f:66:8e:a4:66:
a1:c8:ff:81:3f:7e:0f:4a:45:a8:f4:52:11:d2:f7:
28:4a:53:d5:ad:ce:af:29:35:c8:51:59:2a:fb:2f:
98:12:30:49:c0:1f:02:86:9c:5a:97:ca:74:1f:49:
e7:66:68:4d:1b:e5:9a:87:68:b7:9f:c4:d1:47:e6:
1f:40:93:7e:a9:ae:68:72:70:78:f0:d2:be:55:f8:
be:b8:04:c1:ce:df:b4:2b:31:16:99:bf:bd:e2:03:
a4:55:cd:a3:92:d0:b3:ce:33:30:49:ae:14:1a:bc:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B3:53:34:AE:46:E1:A6:6E:61:27:00:C9:7E:22:FA:D4:CB:50:5B
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3D7D4F3CDB2411EF96E1E921C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:9b:3f:e9:ae:2d:6b:5e:36:7d:58:ea:20:b3:67:dd:c4:cf:
c1:2d:43:a8:29:cd:0d:61:c7:fa:b5:d0:ea:81:9b:64:2a:61:
99:b6:1c:f4:d0:d7:7f:8c:53:63:66:ea:fe:c2:f1:de:0f:3b:
68:16:e6:39:b5:36:15:ac:1d:b9:34:fe:e3:4b:43:93:78:0a:
dd:31:4f:74:9b:ca:af:94:41:8d:5c:87:d9:65:eb:b5:17:bb:
52:29:85:bf:1c:e4:1b:ae:f3:3a:24:ff:ab:81:37:3a:59:9d:
c5:3a:4f:9a:32:30:4f:70:41:b9:88:6e:2a:5d:dc:60:f4:ef:
20:12:03:ef:56:21:35:b4:cd:f2:6d:7c:21:41:fc:30:50:e2:
aa:fe:5d:63:94:c2:f2:ce:2f:b9:24:d6:94:b9:d6:e2:dd:be:
8b:23:58:ce:24:38:9e:68:9c:7a:d9:a6:0c:f6:01:20:0a:8b:
69:6e:50:ad:a5:42:b4:5f:32:ce:b3:47:c9:74:1f:19:17:35:
b2:18:94:cf:c6:b2:c2:0e:6a:8a:1a:b8:6b:34:9b:81:dc:8a:
ea:31:1e:43:fe:f4:92:45:2f:5f:b7:42:24:24:09:74:d4:a2:
22:fc:54:1b:f9:56:d4:ee:22:3e:86:1f:13:cc:33:61:0f:fe:
3a:51:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:33 2025 by rpki-client