Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/F406C3F26AE311EF82D7860FC4F9AE02.roa
File: F406C3F26AE311EF82D7860FC4F9AE02.roa (raw, json)
Hash identifier: u+nDAmTsN9U/qRK2Mim5xbq4P4OFqXQ2M9J0CfEiZDU=
Subject key identifier: 34:0A:9B:86:51:C3:E0:EE:CB:15:D1:7D:1D:67:15:40:DD:53:2D:92
Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Certificate serial: 8C
Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/F406C3F26AE311EF82D7860FC4F9AE02.roa
Signing time: Wed 04 Sep 2024 17:34:36 +0000
ROA not before: Wed 04 Sep 2024 17:34:36 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 4760
IP address blocks: 202.4.202.0/23 maxlen: 23
202.4.204.0/23 maxlen: 23
202.4.215.0/24 maxlen: 24
202.4.216.0/23 maxlen: 23
202.4.218.0/23 maxlen: 23
202.4.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Validity
Not Before: Sep 4 17:34:36 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66d89a2b-2d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:6a:2c:65:fc:7b:fa:e7:85:6f:d0:75:eb:
63:c1:6a:f6:95:90:ad:e8:89:f9:20:b8:71:89:dc:
c1:28:a3:db:ec:b6:0b:19:19:8e:4e:1d:3b:87:41:
c9:18:c4:47:51:49:f8:ba:fa:ef:7e:65:9e:25:dc:
a5:e9:82:35:1e:8b:a2:49:1b:5f:cf:b8:25:b3:14:
f3:77:ed:4d:43:4d:4f:65:35:03:ef:46:91:fe:4e:
03:51:a8:ab:98:32:af:ce:42:79:68:35:8c:20:be:
e7:10:20:2c:3e:71:58:20:07:84:1a:df:df:c4:7e:
0d:4d:78:23:ba:8d:29:03:cd:e1:b5:ab:8d:78:bc:
ea:c0:46:50:1c:51:a8:09:51:26:97:fe:1a:ae:a3:
a8:2d:a8:7b:58:e1:76:fa:88:2f:ed:95:60:ab:64:
cf:f2:d0:0e:e7:84:8a:01:bd:60:fe:34:88:f2:21:
1b:24:77:e4:8d:7a:d6:74:6f:26:7b:b1:86:8e:10:
8e:b0:aa:c5:4d:92:7c:1d:71:da:08:a6:31:4d:1f:
34:12:11:39:42:1f:e8:60:3c:eb:b7:90:da:6d:c9:
8c:49:f8:31:b9:9a:e9:64:cb:fa:91:1f:5f:08:6c:
a6:95:eb:37:ec:40:ce:81:51:ec:48:c0:9c:12:df:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0A:9B:86:51:C3:E0:EE:CB:15:D1:7D:1D:67:15:40:DD:53:2D:92
X509v3 Authority Key Identifier:
keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/F406C3F26AE311EF82D7860FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.4.202.0-202.4.205.255
202.4.215.0-202.4.220.255
Signature Algorithm: sha256WithRSAEncryption
22:fe:ad:cd:f1:7d:23:38:db:2a:68:d3:2c:bd:ba:71:d8:1b:
8d:10:dd:44:35:0d:c4:d6:1f:99:cc:c2:fd:60:bd:68:f7:74:
79:ad:7f:6d:b2:61:0d:54:99:c0:12:8b:f7:43:42:8e:fa:29:
bd:4d:c9:6a:13:3d:8c:26:c9:e7:9a:69:b0:17:91:32:d1:4b:
b6:ce:36:32:14:bc:8d:b2:16:87:ca:03:5f:e0:e4:03:49:0e:
57:e9:b5:2e:6c:75:6c:90:5e:01:de:92:54:2b:8d:03:55:26:
c3:29:3a:59:71:07:e2:2d:ce:a4:1f:7f:c5:29:f9:14:f7:0a:
52:70:bc:21:d3:4c:b8:70:3a:a4:b8:ad:fc:bf:21:63:29:ab:
b7:a9:4b:3b:50:88:8d:6d:7c:20:cd:73:41:dd:6e:16:b6:26:
95:a4:8c:b4:09:3d:30:81:90:7c:d6:81:63:4d:f2:3a:d4:4b:
fc:b4:65:40:55:28:1f:e9:5c:dd:e2:71:77:1c:cf:01:25:ee:
f1:76:d0:6f:df:2e:75:a9:1f:d9:25:f1:bf:75:9c:93:17:25:
fb:af:c5:c2:b7:01:1e:39:f9:92:b8:fa:1b:ff:04:a3:ad:8e:
c2:97:2c:ff:4a:a1:14:f8:75:92:48:13:67:f9:48:27:ad:25:
b5:45:25:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:53:57 2025 by rpki-client