Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa
File: 6553D6106C2B11EA87ED1160C4F9AE02.roa (raw, json)
Hash identifier: BZiEWDD0IL9/iTmQj4cpibFzXusaM/aZuvYBDfGJDK8=
Subject key identifier: 3B:E1:DD:FC:0B:33:2E:10:A7:79:61:80:C7:25:B5:6E:63:88:7E:2C
Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579
Certificate serial: 0A90
Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa
Signing time: Mon 28 Oct 2024 19:50:03 +0000
ROA not before: Mon 28 Oct 2024 19:50:03 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38256
IP address blocks: 124.6.224.0/20 maxlen: 21
124.6.224.0/24 maxlen: 24
124.6.225.0/24 maxlen: 24
124.6.226.0/24 maxlen: 24
124.6.227.0/24 maxlen: 24
124.6.228.0/24 maxlen: 24
124.6.229.0/24 maxlen: 24
124.6.230.0/24 maxlen: 24
124.6.231.0/24 maxlen: 24
124.6.232.0/24 maxlen: 24
124.6.233.0/24 maxlen: 24
124.6.234.0/24 maxlen: 24
124.6.235.0/24 maxlen: 24
124.6.236.0/24 maxlen: 24
124.6.237.0/24 maxlen: 24
124.6.238.0/24 maxlen: 24
124.6.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579
Validity
Not Before: Oct 28 19:50:03 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671feaea-00c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:3f:1e:6d:6b:cc:3d:6e:22:68:1e:62:5b:
dc:73:bf:b0:bc:96:42:04:bb:d5:80:f7:48:00:51:
47:23:03:e5:f8:b3:59:19:98:bb:15:95:08:33:9c:
88:9d:66:c1:87:f6:a3:07:23:cd:4e:20:a4:f8:0f:
0c:a1:3e:3d:bf:e1:6b:6c:01:b4:bd:8b:af:df:0b:
7c:50:07:6d:86:30:1f:0f:b1:1b:53:8b:d4:5a:65:
4b:9a:72:aa:52:7a:79:c0:a7:f6:36:3a:2c:ed:d9:
b9:c9:2d:83:e2:a9:2c:f7:92:7f:d8:12:1d:25:62:
f9:2b:6a:c8:a4:f0:ef:62:0f:51:11:3c:57:2a:51:
f4:79:dd:f9:2f:d0:7e:68:ed:c5:11:dd:e9:21:bb:
8e:57:4a:a6:55:35:54:9a:ed:7e:9d:4e:c3:be:03:
1b:a4:eb:3b:9f:85:62:a5:45:99:79:4f:0c:73:41:
4b:cb:3f:06:49:91:85:76:d1:9e:54:c3:cc:04:9e:
71:66:dc:43:f1:6e:7b:72:ce:4e:dc:09:d8:58:56:
26:09:42:33:1a:e3:e8:07:37:8e:36:d8:3a:b6:c9:
e8:b6:91:10:96:7c:8f:37:e6:ff:3b:63:8f:d9:90:
e6:45:96:65:da:7a:cb:02:6d:15:b3:28:7b:2d:11:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E1:DD:FC:0B:33:2E:10:A7:79:61:80:C7:25:B5:6E:63:88:7E:2C
X509v3 Authority Key Identifier:
keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.224.0/20
Signature Algorithm: sha256WithRSAEncryption
54:8f:22:34:20:83:00:6c:d3:f4:ad:ba:a3:d4:11:4f:4c:e9:
94:bd:61:bb:6b:56:f2:3e:8b:c9:77:82:02:f7:10:cb:74:94:
98:ae:03:ef:39:d3:52:7e:1a:c3:2c:90:d0:ec:c3:d8:1a:1e:
4d:92:a2:1d:d1:19:3d:23:a1:02:bf:94:b9:22:a2:ed:2c:22:
38:2e:a0:8d:9b:ce:9e:0b:4e:37:2d:c4:2d:39:de:7b:01:85:
2b:5c:41:e9:37:c8:fb:e5:48:26:11:3d:aa:77:93:30:15:d2:
a5:2d:11:8b:74:7a:8e:36:53:7d:0b:49:2a:69:db:ca:78:18:
24:89:2d:34:79:2e:2a:cb:10:ec:9a:7f:1c:16:cb:42:8f:ef:
01:01:b9:9e:bb:1b:56:0e:85:f7:62:0d:6c:d6:76:37:fe:61:
d7:cf:cd:4b:5c:84:36:1e:6d:ad:81:f2:2d:57:aa:a1:b6:6a:
50:bd:6e:d3:a5:bb:80:2c:1c:ee:53:77:f4:f7:55:75:64:ff:
b9:91:8f:7b:6b:b4:d4:4e:33:ac:ec:36:02:80:19:28:5c:25:
32:08:ad:6c:42:c9:6d:ad:56:0b:85:ac:f4:b3:19:a0:e1:eb:
a8:10:9a:9a:53:0a:91:ec:aa:59:44:d2:89:52:df:de:1c:c5:
0b:8b:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:17 2025 by rpki-client