Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa
File: F4BF2B68721311EFA9D7CA3AC4F9AE02.roa (raw, json)
Hash identifier: IcyAmss/143UHKbZ0Dn9Y6khit0Sn0NFoa8rTRv9Ah0=
Subject key identifier: 00:FA:60:4E:88:35:59:4E:AA:5B:DC:AF:C2:8E:C8:18:C2:86:0C:40
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: C6
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa
Signing time: Sat 21 Dec 2024 05:50:15 +0000
ROA not before: Sat 21 Dec 2024 05:50:15 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38589
IP address blocks: 202.28.16.0/24 maxlen: 24
202.29.108.0/24 maxlen: 24
202.29.109.0/24 maxlen: 24
2001:3c8:1601::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 21 05:50:15 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67665717-6f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:cb:9c:60:f3:b4:0c:b4:b4:39:06:9f:9e:
3c:c2:34:35:f7:1e:8e:d2:16:9c:54:cb:31:5a:e9:
b6:5c:34:e7:cd:a8:37:d2:67:aa:c7:8e:ed:ae:7f:
9c:1e:72:2a:9c:79:e3:0b:fb:2b:98:af:46:b0:86:
75:0f:ab:39:a8:00:a1:b4:9c:19:a8:e1:2e:af:d2:
11:76:a0:7b:32:8f:9d:ed:93:81:9c:5c:27:24:6f:
a6:a4:57:be:88:1a:0b:ac:11:29:84:dc:8d:28:e7:
79:7b:c2:44:1c:ad:29:37:36:30:08:27:81:fb:19:
31:6f:a0:a6:af:84:05:ad:ed:38:51:08:6d:d6:48:
35:5e:c2:25:59:e6:f3:5a:8b:1d:a6:0f:80:26:35:
cb:6f:cd:94:5d:40:9d:4f:a6:88:fa:04:79:f1:24:
f9:fd:e5:68:19:20:44:6b:57:3a:5e:39:ae:bd:d1:
f6:c2:28:97:71:01:e0:81:cb:01:c0:65:8c:04:b8:
30:a7:a1:3b:61:1c:ff:42:9a:e5:66:c5:9f:dd:ac:
99:49:52:fa:a2:02:6d:2f:14:63:fe:5e:90:9e:24:
94:42:e4:be:1c:d5:28:53:c8:0f:aa:8f:da:e5:6c:
c9:99:9f:35:a8:6d:3c:a8:40:53:5a:f4:1d:eb:e8:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FA:60:4E:88:35:59:4E:AA:5B:DC:AF:C2:8E:C8:18:C2:86:0C:40
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.28.16.0/24
202.29.108.0/23
IPv6:
2001:3c8:1601::/48
Signature Algorithm: sha256WithRSAEncryption
1f:94:ef:6f:65:ee:e2:84:ed:8e:2a:0e:c1:7b:dc:d4:31:96:
3e:97:49:19:f6:39:d8:44:97:43:66:c3:bb:c3:c9:0a:9f:c6:
50:02:f8:c4:3e:24:c9:2d:73:80:d0:d1:80:99:a1:5c:ca:d3:
84:79:43:b0:35:cc:f7:4a:ae:a3:d0:11:e5:e9:59:e7:7b:fa:
f7:5d:70:61:36:f6:24:e3:67:54:a3:89:01:ea:49:21:70:1f:
61:8f:f0:ab:51:f0:66:97:0e:4d:01:3a:06:9b:a8:01:00:01:
ca:60:50:2d:a2:f2:c4:4d:9f:46:13:55:4b:0a:d6:c7:1e:b7:
e0:61:6b:92:06:a1:5f:d7:58:13:3f:04:85:e0:f7:be:f1:2b:
0b:62:98:46:80:4f:19:3c:c8:71:2a:b7:4c:e7:e4:3d:5e:ce:
8c:4a:02:9d:b9:fb:cf:cd:e0:bc:29:49:ce:0f:4a:be:2d:d5:
c0:03:a4:2a:9c:7f:59:65:e3:68:9f:70:e6:d2:5e:9d:8d:c2:
5e:f7:d2:08:6b:d5:f1:80:8d:d0:cc:be:ab:ce:6c:6d:d2:20:
08:2a:fb:c8:6c:50:bc:bf:01:8b:ec:34:9d:fa:49:ea:9d:5f:
3b:ba:0e:ab:5c:27:0c:6d:85:b0:24:3d:df:16:3c:dd:58:8a:
bc:78:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:18:14 2025 by rpki-client