Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa
File: BA8A5FBEA61911EFAD319873C4F9AE02.roa (raw, json)
Hash identifier: Pu/II2vmsMHnGt86Bz07kblV70UDlQ3qizc1ThMazys=
Subject key identifier: F6:2B:30:23:22:EA:6B:6C:63:AD:44:F5:6B:AF:C9:62:B6:DA:34:2A
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 90
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa
Signing time: Tue 19 Nov 2024 01:58:11 +0000
ROA not before: Tue 19 Nov 2024 01:58:11 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 16509
IP address blocks: 203.3.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Nov 19 01:58:11 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=673bf0b2-1e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:0a:31:68:af:a4:7f:ba:d2:11:c4:8e:02:
9b:ec:6c:9a:24:51:9e:67:d8:2b:5f:13:e5:b7:7f:
9e:50:76:3c:98:ce:25:7b:28:47:b2:39:21:73:13:
b0:16:ef:c2:2d:a1:f3:27:36:7a:57:c6:43:3f:fc:
5a:95:1d:58:d8:c5:4c:c6:cf:44:83:87:a8:fd:2b:
dd:af:c4:86:ce:16:a2:c2:1e:c5:de:8c:e6:e3:0d:
cb:25:78:1f:8d:c8:53:cc:64:0b:9a:1e:ad:ce:3c:
2e:82:c6:98:79:d1:fa:73:b2:e0:88:dc:8e:2c:f5:
a3:38:33:5a:32:57:4b:0d:de:df:90:a7:1c:88:f7:
a4:2d:84:ac:12:a3:bb:09:07:5e:c4:a5:3b:5e:9e:
df:b5:4c:8e:8f:1c:ca:82:a1:4e:e7:3e:5b:7a:35:
78:22:2f:a2:03:61:7d:92:a6:94:66:80:a5:9b:c6:
08:f8:93:4f:4d:bd:98:e6:fa:9b:34:23:07:72:05:
cf:ca:d2:11:a3:a0:f5:0b:3d:d2:98:29:21:95:e5:
cd:b8:45:a3:1a:1b:0f:80:b4:98:ae:aa:7b:79:80:
68:d5:04:88:17:51:79:70:d5:2d:af:23:01:66:35:
22:58:72:e2:be:3a:d3:67:85:34:5e:bc:24:1a:1d:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2B:30:23:22:EA:6B:6C:63:AD:44:F5:6B:AF:C9:62:B6:DA:34:2A
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.236.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3a:9a:c4:2d:35:b3:79:ef:22:04:85:69:e6:ea:66:a9:17:
24:ec:bc:ad:67:e0:cd:a3:29:0c:e6:f4:e1:ca:d7:66:11:2c:
88:59:0a:6f:43:ca:9d:c6:dd:35:5b:cf:83:b4:05:46:27:3e:
04:a7:a2:3e:e6:26:e1:4b:c5:82:05:ce:26:d5:12:68:c0:bd:
70:ac:78:1f:9a:00:d4:69:0e:11:0c:6e:5c:6b:c4:88:40:71:
c5:15:22:ed:fa:0c:41:2c:d5:8a:8e:8c:24:5b:7f:93:bd:f8:
29:8e:a1:ac:ca:15:6f:6e:5d:05:0c:c5:02:44:64:0c:fa:4f:
c2:9d:a6:89:cb:08:e7:67:63:4b:6e:54:4f:ef:bb:28:50:9d:
99:18:05:18:44:94:b5:f2:2e:be:f5:5a:11:2a:08:0e:26:55:
af:67:a7:ff:73:34:77:d3:da:2d:f9:a7:d1:23:63:3a:5a:52:
3f:73:a3:3d:68:28:60:e8:99:18:50:0e:71:61:a7:23:9c:d9:
b3:31:a6:11:0d:69:b0:b9:77:9e:b3:27:08:17:b3:a1:8e:99:
d1:df:ff:0d:3f:41:f4:23:fd:7e:59:94:ec:7e:18:eb:02:fe:
1e:3e:89:6b:54:58:53:24:f6:f7:55:ae:e3:ec:92:7c:94:b9:
c0:f3:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:57 2025 by rpki-client