Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa
File: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (raw, json)
Hash identifier: t7ps6xdVU6vrTG1nK/9OWIMcQSh+OrN9GXfbAq8uPbA=
Subject key identifier: B8:2B:CD:74:67:E2:22:CC:D0:8F:E1:B2:8F:BD:F3:D0:99:BE:C4:D9
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 34BA
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa
Signing time: Sun 22 Dec 2024 03:55:06 +0000
ROA not before: Sun 22 Dec 2024 03:55:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38015
IP address blocks: 120.29.232.0/23 maxlen: 24
123.242.248.0/22 maxlen: 22
203.189.176.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13498 (0x34ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Validity
Not Before: Dec 22 03:55:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67678d9a-6cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:34:f2:26:cf:7a:4f:67:e2:7c:7f:5f:0b:
c2:ba:ea:55:d5:61:d5:38:16:ab:82:57:1d:ab:a5:
f3:39:b6:db:c0:8a:76:9f:5f:ca:b4:5a:31:27:73:
01:a2:5a:9a:61:18:09:cc:53:d2:15:31:66:7d:36:
e5:7b:c4:b0:99:36:61:31:98:d7:47:d8:39:28:ca:
8e:81:b8:b5:fe:70:0d:11:83:84:42:fd:2b:a2:1a:
42:5a:6f:41:52:b8:fb:61:37:8f:7a:8e:4c:08:15:
17:af:3e:82:09:0a:64:09:79:d8:9f:a9:e0:18:28:
fb:a0:d7:2e:60:0c:c6:ab:36:53:c4:87:65:15:5f:
0d:5e:94:b9:6a:ab:0a:91:26:48:28:a5:7a:04:40:
c4:81:74:f9:24:61:bf:71:4b:f3:e1:9b:0b:52:b6:
61:a2:56:d8:ec:96:10:c9:0e:47:11:47:c6:ed:88:
14:48:bd:b4:20:80:a8:97:35:1e:0a:72:bb:d8:c4:
7a:76:a1:15:a2:9e:ee:10:7a:dc:b2:0f:06:d9:e7:
fc:cd:c6:66:8c:bb:03:34:40:f1:ca:fe:e3:43:40:
c8:2f:11:53:c8:ca:60:b8:0e:54:d2:de:66:dc:7a:
64:ba:fa:5d:1a:36:72:0a:ac:82:d9:72:68:59:b5:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:CD:74:67:E2:22:CC:D0:8F:E1:B2:8F:BD:F3:D0:99:BE:C4:D9
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.232.0/23
123.242.248.0/22
203.189.176.0/22
Signature Algorithm: sha256WithRSAEncryption
96:42:a0:e4:bd:cb:2e:3e:db:fb:00:95:62:e3:dd:89:49:e6:
18:09:a1:60:a1:bd:21:10:cc:89:44:62:a1:4a:fe:6e:72:8b:
a1:e7:e0:29:19:94:51:e9:bd:ab:5d:20:ab:de:aa:36:cd:9a:
aa:59:de:c7:6c:0c:70:c0:7e:b4:8f:ce:35:ad:1e:b7:60:70:
b4:18:e9:b9:55:d0:0c:07:77:51:c3:ec:a6:34:fb:e2:b7:b2:
3d:2d:66:5b:ad:9d:43:3b:41:04:d6:48:12:ea:ed:83:b5:64:
26:db:78:d5:4c:bc:c5:13:02:d9:5e:e5:55:f5:7d:8c:58:d3:
4b:94:25:95:25:20:ca:2f:cb:0d:63:e4:f2:ac:79:d6:81:dd:
8d:64:e3:4e:90:02:5d:74:76:5a:81:ac:ef:bc:77:f3:f5:d4:
d7:c4:88:c7:0b:2c:c1:a0:21:54:c3:ff:b8:2b:a7:50:9d:7f:
31:83:b7:23:52:af:8b:b2:aa:cb:f6:06:33:b9:10:de:74:8f:
4d:cc:ed:1b:b5:3b:14:09:95:53:ac:33:84:f8:2f:20:49:ab:
f6:bd:3a:75:a4:b7:b1:a5:a8:44:ac:72:ee:39:ab:62:e4:9f:
55:82:55:5e:97:00:be:a5:32:a7:7f:39:98:0c:ab:73:0c:8f:
10:96:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:56:16 2025 by rpki-client