Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa
File: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (raw, json)
Hash identifier: aCNtxlW0MshwMMlV+N563xkNmlCQdXbxR/lNk+drIlA=
Subject key identifier: D1:1D:09:03:33:21:57:50:E9:63:D9:F5:F0:67:65:A7:1C:6F:22:B2
Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial: A9
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa
Signing time: Wed 31 Jul 2024 06:17:15 +0000
ROA not before: Wed 31 Jul 2024 06:17:15 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 32613
IP address blocks: 203.167.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Validity
Not Before: Jul 31 06:17:15 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9d6eb-c7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:92:d6:c5:68:35:b9:20:2c:e2:94:64:cd:
31:fb:2b:c6:25:87:06:db:98:40:a0:a0:89:90:ee:
4a:99:b3:91:6d:55:7c:e4:fe:45:97:cf:96:04:e7:
45:54:9f:a0:08:43:62:8e:d3:b4:79:77:e8:96:4a:
19:b4:6e:c8:f0:a7:2a:31:c4:2a:00:a3:11:e3:ab:
9b:11:d2:60:4d:6a:59:68:96:86:ba:5e:82:a7:d9:
d4:35:c4:69:97:6c:4f:b9:05:cb:5d:57:67:41:c8:
2a:58:eb:b6:04:8a:bd:bf:7a:12:b7:47:80:97:b5:
03:e9:aa:1e:57:20:f7:8a:dd:4b:1d:ad:cc:e5:ba:
7e:63:a3:ab:06:6c:be:10:eb:a2:0a:ac:34:a2:7f:
2d:38:56:70:78:e9:42:3f:75:5d:cd:af:50:57:3c:
7e:93:92:de:c9:10:76:81:03:9a:58:78:10:a8:96:
e2:99:b0:ed:86:e7:e7:73:08:1a:12:aa:5f:6f:55:
82:be:35:14:c2:af:fb:11:21:e4:11:f0:21:0e:c4:
0f:1e:7f:3e:07:09:b0:0e:d7:b9:98:79:da:87:7e:
6a:f5:a1:bf:92:79:da:73:55:90:18:1b:41:e0:19:
31:bc:dc:19:52:ad:3b:bf:36:0e:aa:83:a7:49:00:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:09:03:33:21:57:50:E9:63:D9:F5:F0:67:65:A7:1C:6F:22:B2
X509v3 Authority Key Identifier:
keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.167.7.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:45:b8:0c:4d:42:49:ec:96:87:b8:09:03:c1:1e:5a:07:53:
2e:bf:f9:7d:9f:c7:42:21:4d:95:81:bf:6a:30:03:e8:52:04:
a5:67:c4:21:74:99:dc:54:a0:40:de:6d:d1:70:f8:b8:f3:04:
db:76:6e:ce:b8:94:78:82:79:be:34:cf:67:10:7b:8f:59:d0:
b9:df:20:9d:6a:5c:e1:f5:cc:b0:ac:35:6b:81:b3:f5:7b:84:
5d:d2:3a:21:dd:8d:a8:18:65:17:d4:a2:9b:a9:a0:c1:cf:05:
09:41:82:e7:c7:d8:27:3f:68:0a:cd:04:65:de:29:d6:97:61:
3a:19:33:4f:7b:f6:fb:57:b2:2c:2b:ea:7c:64:11:f7:3f:22:
fb:3c:da:76:c4:08:14:e5:a6:75:79:38:95:49:c7:2c:1f:c8:
65:b4:bf:9f:e9:95:be:10:a2:fc:53:38:60:c9:d8:e7:0f:e0:
03:d0:88:96:b7:9e:5e:f1:7d:c4:b3:ea:ca:7c:52:13:02:2d:
39:0f:49:65:ec:91:42:e5:64:c8:b8:4e:4c:6a:4c:40:23:a9:
94:ea:5f:dc:0e:a8:25:a8:2f:9e:67:53:d9:eb:59:04:5e:70:
5d:88:90:db:af:71:78:3a:d7:83:d6:60:e2:39:05:04:6e:ae:
e6:28:52:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:58 2025 by rpki-client