Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6520648CCC3A11EF97B13E83C4F9AE02.roa
File: 6520648CCC3A11EF97B13E83C4F9AE02.roa (raw, json)
Hash identifier: cioPSnvxCV9MlKk+N+OKdKIZIjZxwbeh0ez1/CK80l4=
Subject key identifier: 4F:36:05:5F:A7:F0:E8:10:EA:D7:09:92:6D:69:8E:21:75:7E:C1:F0
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 025B
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6520648CCC3A11EF97B13E83C4F9AE02.roa
Signing time: Sun 19 Jan 2025 04:33:37 +0000
ROA not before: Sun 19 Jan 2025 04:33:37 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 47741
IP address blocks: 202.155.144.0/21 maxlen: 24
202.155.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Jan 19 04:33:37 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=678c80a0-77ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:60:d9:ad:de:d3:31:e1:49:ba:a7:15:f5:
ed:d6:b3:1e:b3:57:09:39:08:1b:9e:2e:5f:4f:9e:
d3:2c:08:4a:84:de:ce:cd:50:e7:ba:86:0b:ab:f4:
c1:6f:57:eb:33:21:5c:6f:36:14:a4:f6:b9:3f:ab:
06:c0:38:fb:fc:08:1e:59:57:6e:68:a8:03:6b:b4:
d7:84:b8:d5:bf:b6:45:85:d1:b2:a6:de:35:ec:a3:
00:90:c9:34:03:11:31:9f:3e:46:f4:48:a9:9b:f5:
a7:78:91:03:d8:f3:43:6a:5d:26:80:89:ba:89:cd:
bf:d3:bf:e1:76:a9:1f:4f:d7:19:35:b5:49:c7:ac:
44:f5:f1:78:d7:d6:1c:43:f8:a9:4c:ef:bd:19:16:
81:0b:77:d1:98:cc:3a:a2:17:50:94:82:6e:64:5e:
25:f0:b9:c9:f1:c2:e6:b3:7b:ff:d7:b4:27:38:38:
31:59:10:5c:28:6f:0d:1b:0c:4a:55:eb:cc:2a:86:
94:0c:4c:bf:7b:9a:e2:ac:b3:fd:d1:d8:1f:28:3a:
b8:39:e6:ac:06:47:4e:ad:0b:51:5c:25:60:89:43:
78:70:0f:62:a0:66:59:f4:fe:35:e1:08:38:9b:3d:
c5:c7:91:d4:c0:39:2f:45:14:18:20:35:76:f2:1b:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:36:05:5F:A7:F0:E8:10:EA:D7:09:92:6D:69:8E:21:75:7E:C1:F0
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6520648CCC3A11EF97B13E83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.144.0-202.155.155.255
Signature Algorithm: sha256WithRSAEncryption
00:91:ec:a4:fd:69:3d:17:9c:a6:0e:da:be:22:8c:a5:e6:fc:
cc:7d:6a:b1:e1:03:48:44:66:43:b7:8b:af:c8:f0:94:ef:f2:
e0:ae:40:36:95:94:01:2a:24:e7:38:24:e7:80:94:03:ef:9e:
42:3f:23:c6:50:41:3c:b2:3e:32:a8:f4:02:4b:3f:81:6e:ce:
95:36:db:46:a1:b7:a6:e2:25:4f:5c:56:b2:e5:b7:e1:43:f5:
09:ee:73:a1:00:77:fe:ae:7f:18:e8:c6:5b:1c:2d:5e:fb:88:
77:9b:13:0e:51:ed:68:cd:7f:5e:dd:15:d8:81:ad:15:2e:96:
27:a1:9a:87:05:f5:08:13:a9:1c:6a:af:54:86:9e:eb:b7:c9:
3a:9a:36:99:1e:69:f7:26:da:1d:70:5f:c6:d3:ed:b4:73:e0:
32:93:9f:c2:b7:21:83:4e:93:9e:54:ae:43:8b:98:13:90:51:
3b:2f:5c:26:69:b0:ba:8d:62:39:ec:d4:1b:f6:c8:c4:14:a4:
37:4a:74:44:95:d5:64:a0:61:21:84:a4:2c:dc:6c:f5:ff:c9:
e5:a6:b2:3e:12:bb:9b:5f:7e:5e:8d:6a:ba:d5:b8:b0:a1:ae:
a4:ea:61:56:60:22:dd:e2:03:b2:31:b3:e0:79:10:02:07:0a:
8a:9c:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:38 2025 by rpki-client