Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa
File: C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa (raw, json)
Hash identifier: y3aNVQlDQDP+RgTzSqQocLji50FI6RLxIfx8py2PzJQ=
Subject key identifier: E1:FD:6E:94:AD:C4:4A:53:EA:06:F5:78:D8:1E:7E:73:70:87:4B:FF
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 466D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:36:20 +0000
ROA not before: Thu 05 Sep 2024 03:36:20 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 55318
IP address blocks: 202.59.252.0/23 maxlen: 24
2001:df2:4080::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18029 (0x466d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:36:20 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92734-d404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:f1:3f:19:24:70:16:af:ab:df:f7:bd:8d:
b6:ea:db:48:e2:25:3e:0c:eb:96:a5:9b:33:15:c9:
ee:54:88:4f:a2:bd:bc:78:b8:a4:fb:6f:e6:0e:e0:
8c:86:1f:46:a5:bc:65:15:c8:a7:27:86:41:19:50:
50:4b:2e:69:a3:02:13:11:39:9a:f2:16:a5:36:36:
3e:fa:3f:06:41:a1:7d:fe:79:0a:b6:72:07:6c:eb:
80:b9:49:1e:5d:e9:c4:27:41:dc:b8:6a:4c:bb:62:
31:57:a6:78:f0:e7:c6:f4:ae:4f:83:99:93:ab:07:
0f:5d:f9:15:d1:71:74:3e:18:f4:c1:b1:02:f0:a6:
38:08:5c:ca:c5:72:bd:a1:6f:b3:39:9a:a0:76:57:
a1:e7:ee:a1:23:5a:2a:63:a9:06:a4:d7:b1:13:a2:
3b:79:bf:98:33:31:1f:54:9d:72:22:5c:ca:31:77:
d4:63:05:86:02:0e:44:73:7a:9b:a9:48:7c:5d:e2:
2c:d3:ad:8f:b4:95:d5:70:53:a5:78:6a:d2:ec:ad:
78:f2:6b:12:c8:d1:77:a4:21:6c:12:79:b4:db:d2:
0a:34:fa:ca:b0:34:f3:59:39:14:a3:e8:6c:25:d8:
71:cd:cf:44:f5:83:a0:94:77:91:d7:b5:f2:69:45:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:6E:94:AD:C4:4A:53:EA:06:F5:78:D8:1E:7E:73:70:87:4B:FF
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.59.252.0/23
IPv6:
2001:df2:4080::/47
Signature Algorithm: sha256WithRSAEncryption
88:f1:b5:cd:f0:5e:0b:60:e6:fd:fd:40:f3:b0:7b:37:14:70:
11:f3:26:5a:60:03:ae:53:30:fd:bb:b7:cb:2b:67:85:47:25:
56:9e:8f:ab:cb:76:b2:50:0c:4b:ed:cb:7e:ed:01:76:c2:c7:
c1:a4:58:11:65:1f:8f:41:1a:86:17:79:79:e7:8b:5f:46:9b:
8d:cc:a5:ee:b2:8e:a4:49:c7:14:a0:08:f1:db:7c:a7:3d:af:
cf:df:21:88:0d:95:b3:e5:e1:81:5e:71:0e:74:38:23:07:f0:
ce:f0:48:62:66:7c:82:cd:11:d5:3a:ca:8c:a9:d0:83:20:d5:
28:83:b3:87:19:43:7c:58:c5:94:27:18:c8:66:1f:01:4f:64:
d2:6b:53:cf:dc:72:32:c3:0f:79:6f:f1:ec:96:ab:2f:2e:d7:
c7:17:56:4a:42:8a:f4:87:ac:f2:40:06:0b:34:d5:82:55:0b:
d0:a3:0b:4e:25:c6:a4:45:0b:b4:d6:68:97:21:18:3a:c4:04:
77:6d:a7:93:49:cf:d4:80:80:f4:a4:8f:65:b6:74:e1:9e:4d:
a9:ca:e6:ef:38:7f:3d:bd:71:a1:f2:3b:8b:f1:e6:51:dd:5a:
fe:6f:18:e6:7f:5d:e1:bc:a9:c5:c9:9c:38:3c:38:39:3a:fa:
2c:d7:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:28 2025 by rpki-client