Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4C9A45D8D6BF11EFA0D42513C4F9AE02.roa
File: 4C9A45D8D6BF11EFA0D42513C4F9AE02.roa (raw, json)
Hash identifier: lbN2F8NJnS5ArZFCVAg/BkXi0rEcbPE/4a1mSohL/O8=
Subject key identifier: 89:6C:28:BD:71:0E:33:39:C1:DE:8F:F8:42:94:EF:71:17:EA:4C:84
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 025E
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4C9A45D8D6BF11EFA0D42513C4F9AE02.roa
Signing time: Sun 19 Jan 2025 23:44:18 +0000
ROA not before: Sun 19 Jan 2025 23:44:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 9304
IP address blocks: 202.155.140.0/24 maxlen: 24
202.155.141.0/24 maxlen: 24
202.155.142.0/24 maxlen: 24
202.155.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Jan 19 23:44:18 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=678d8e52-3567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:64:d4:07:09:67:8c:e8:a9:68:60:c0:01:
0f:7f:3b:a6:61:bb:68:53:69:4e:c0:66:09:dc:d1:
79:47:67:18:c9:bf:e3:f3:1e:31:68:04:f9:0e:e9:
55:31:c8:f1:4b:16:88:59:36:c2:0b:e2:19:6d:ec:
30:cc:77:f3:3c:9e:37:fa:fe:fb:0b:b1:37:9b:74:
2d:10:da:4d:9c:90:3d:57:e0:36:39:46:20:6c:bd:
60:b5:b5:07:73:de:a7:2c:8c:26:d4:46:15:f2:82:
05:f1:ed:3e:cd:9a:08:f8:4d:e9:bd:4a:72:dc:b0:
ac:3f:d2:44:88:b9:cf:b3:5b:54:47:98:b5:0a:c8:
b7:b3:3f:bc:4d:f7:d5:fb:51:3a:de:74:89:6f:84:
fb:26:90:15:08:c9:9e:23:82:ed:a6:cc:a2:77:3b:
30:77:15:a1:65:f2:73:05:3c:82:2f:67:83:d4:ed:
df:76:d7:ab:40:a2:3d:a0:5d:fd:f4:11:d7:dc:cf:
9b:42:25:a1:49:66:69:2d:5e:78:cb:05:41:0d:99:
b2:c8:59:78:71:a5:5e:15:c0:e9:73:80:66:96:38:
08:b0:ce:5a:b4:c4:ce:f2:e3:61:36:10:9c:be:3e:
54:65:1b:03:19:d0:f9:f2:79:43:f9:db:95:7f:53:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:28:BD:71:0E:33:39:C1:DE:8F:F8:42:94:EF:71:17:EA:4C:84
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4C9A45D8D6BF11EFA0D42513C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.140.0/22
Signature Algorithm: sha256WithRSAEncryption
36:54:d1:11:16:43:d7:6b:8b:c4:d4:f4:4c:f1:53:70:0d:6f:
86:1f:12:62:a3:26:11:e2:24:85:36:48:3c:71:a2:13:fd:a8:
72:3d:8d:e2:94:e6:31:f9:49:28:10:a1:1c:0c:05:b2:65:e2:
66:b5:16:64:5b:89:3d:f9:d8:c8:fa:f0:11:e7:b8:65:7f:2b:
1e:69:2f:5b:c3:25:33:a0:96:40:8d:7e:04:07:ea:1b:90:d0:
5d:f8:e2:4a:a9:a5:9d:9d:d8:1f:69:03:8d:a0:91:ea:2d:81:
8b:a1:36:2e:c6:60:36:d3:27:0f:5b:0a:b5:35:7e:e1:8d:f0:
46:ae:24:3e:45:4d:66:ef:ee:b2:9f:6b:f2:c1:e7:ef:25:aa:
87:fd:81:44:b8:19:51:83:36:d8:72:78:52:6e:52:14:7e:85:
02:4a:94:f7:c9:b2:d8:c9:d4:cc:5d:61:b3:9f:16:46:0d:4c:
55:75:d7:29:ec:f3:4b:9b:51:3d:7a:9e:f0:8b:d9:53:d3:1f:
c1:d3:70:83:95:60:d7:8a:79:b5:91:ed:7a:9e:42:a4:19:1d:
0b:a3:7f:a9:d7:ca:1e:28:c7:85:ce:23:09:3e:f9:4d:ab:67:
e7:59:5e:9b:3e:10:52:a5:85:f3:88:9a:ab:9c:62:36:23:6a:
f9:94:06:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:05 2025 by rpki-client