Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa
File: CC9ED4E2015411EF83144341C4F9AE02.roa (raw, json)
Hash identifier: J2KwLe8SPWIWD1mMVkmMfy+3ZRxSXbUQ7iUXVfTcvng=
Subject key identifier: 1E:B5:D3:9E:21:35:DA:5B:B4:32:F4:B2:07:BB:CB:B6:BB:BC:00:AF
Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial: 0D
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa
Signing time: Tue 23 Apr 2024 09:35:19 +0000
ROA not before: Tue 23 Apr 2024 09:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2764
IP address blocks: 203.20.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Validity
Not Before: Apr 23 09:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662780d7-f7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:24:ba:8e:9d:19:2a:9f:3d:2f:92:45:2f:
4d:34:eb:cf:74:03:89:4f:e6:06:fc:da:cc:72:59:
f3:a6:91:f3:fc:3b:37:e7:e3:5f:74:bb:e7:9f:92:
9a:00:53:e5:5f:43:8f:d6:31:52:1b:2c:e7:b4:21:
36:2d:85:20:55:a6:71:8f:83:e7:27:b4:d2:4d:3c:
7d:d7:15:f6:12:c4:8f:ee:d6:83:cc:56:d5:57:93:
7e:93:42:a1:99:d0:12:17:de:ba:b3:8e:f1:b8:64:
c2:c3:2d:ab:72:b8:15:d5:40:e0:4b:fd:b0:56:90:
76:74:c4:75:a7:bf:9a:3d:d6:20:51:85:76:c1:23:
d4:43:32:f6:68:f2:43:69:83:23:8b:ee:09:76:e5:
74:44:41:c3:ce:e6:ff:78:5e:14:b2:cc:c2:bd:68:
f7:68:ab:3b:17:a7:f7:4a:9b:e6:5e:4f:65:4a:9a:
21:8e:e9:bd:82:bc:33:34:05:c7:8c:5e:d3:27:26:
c1:f1:f4:82:3e:a3:42:c9:30:9c:fd:82:1f:52:71:
f3:c9:08:ab:b7:12:86:4c:5d:80:95:b9:72:e1:27:
77:fa:cf:f2:d9:e8:25:5d:69:a8:11:38:08:d5:d6:
c9:e1:b2:15:a0:f8:28:f1:53:be:22:07:18:db:4c:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B5:D3:9E:21:35:DA:5B:B4:32:F4:B2:07:BB:CB:B6:BB:BC:00:AF
X509v3 Authority Key Identifier:
keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.20.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9e:77:b5:89:da:cc:37:03:15:67:f7:dc:a3:63:8b:25:7b:
35:a7:41:c9:87:af:a0:26:ff:6e:50:dd:cc:91:a6:dd:fd:77:
ac:e7:ae:6f:ce:24:92:a3:aa:8e:ea:42:1a:d7:fd:a6:da:1e:
d0:d2:69:4e:4b:f1:db:a7:54:fc:f0:81:fc:52:17:85:50:92:
94:7d:d7:e4:03:72:24:fa:cf:0f:a0:ba:0d:8e:d8:6e:b9:d3:
e0:3b:58:20:f9:8f:99:87:ed:72:c6:d7:7e:df:09:78:39:72:
ca:81:0a:99:55:21:1b:f4:a7:8a:9c:ed:2b:28:88:77:7d:e8:
a8:9a:17:58:b7:0e:30:7a:7f:49:c6:46:b9:47:9f:ac:2d:e5:
61:93:1a:f6:59:27:ec:6e:d3:0e:cb:2e:4c:ea:92:23:ec:fe:
12:25:4c:8e:b8:52:67:56:c2:75:f7:5e:7a:08:31:a9:6b:c3:
3f:95:8a:15:5c:ef:ab:0a:f3:a1:21:db:ee:70:c5:da:8a:dd:
c9:58:7e:0a:1b:4f:ce:f5:ca:1a:ce:31:61:a9:b9:d2:b5:f9:
95:7d:24:d0:c4:b8:6b:d5:57:b1:be:82:8e:ca:49:6f:85:98:
48:7b:9f:71:63:e1:fa:cf:a4:57:eb:51:cd:39:e1:74:d3:52:
da:df:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:18 2025 by rpki-client