Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa
File: 56C4925E3B0711EC9715501EC4F9AE02.roa (raw, json)
Hash identifier: zzgWG6q6KItbF0m0zrC3rt7sfg/sytV8ZrJ1Qdcqn+E=
Subject key identifier: 19:D6:69:71:EE:E3:4B:17:2C:F7:5C:A0:52:7B:6D:58:4A:A1:E3:F0
Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Certificate serial: 03C5
Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa
Signing time: Fri 05 Apr 2024 03:05:18 +0000
ROA not before: Fri 05 Apr 2024 03:05:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23669
IP address blocks: 202.93.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 965 (0x3c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Validity
Not Before: Apr 5 03:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660f6a6e-54fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:81:19:ea:25:79:95:83:64:8b:c7:e8:97:
12:39:1b:b9:a0:fb:ec:ef:4c:9f:9c:79:17:2f:17:
b8:e3:62:35:54:c1:2a:24:9b:22:ed:b9:ef:c0:94:
cf:cb:f2:68:05:a0:4b:08:75:ab:59:50:89:58:01:
79:3e:92:41:35:c5:8c:40:d8:5d:3b:86:bd:73:43:
f6:04:6b:b0:cb:e0:6a:81:76:33:ce:58:61:fc:33:
8c:81:6e:e9:5f:5c:a3:75:04:27:51:7b:81:50:6c:
cc:38:5f:27:1b:30:bb:03:11:91:5f:45:01:d8:73:
b8:32:f6:56:9e:f5:78:64:33:f3:bc:8c:67:0c:f6:
1b:f0:b4:37:ee:49:78:f6:4c:ed:c8:02:7f:c6:97:
f4:52:60:7a:4c:b7:75:c7:e1:99:cd:5b:b5:91:71:
0c:7c:d4:a5:de:30:57:ad:a1:98:1f:ce:14:4f:d4:
58:39:aa:d8:42:d4:02:c4:b5:7c:6e:47:db:8a:8a:
68:bc:68:04:f8:58:03:95:6f:f0:a5:9e:ee:1a:7b:
89:e3:4d:56:55:05:40:d2:7c:a2:36:11:d3:a8:82:
06:83:72:ae:5a:4b:9b:74:b8:a3:7c:a0:97:ab:40:
8c:8f:eb:84:8b:b8:a7:77:86:d3:e0:e1:6d:0e:48:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:69:71:EE:E3:4B:17:2C:F7:5C:A0:52:7B:6D:58:4A:A1:E3:F0
X509v3 Authority Key Identifier:
keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.93.160.0/19
Signature Algorithm: sha256WithRSAEncryption
47:3d:1d:89:4b:c8:db:73:a4:a9:92:7a:b6:3f:66:ae:78:d6:
cf:f3:93:c0:13:7b:ed:dc:db:0a:e3:31:b6:5a:62:e1:ec:b9:
94:05:f2:84:ce:a6:9b:dc:9c:13:f2:25:38:d8:b2:a3:58:4d:
ed:7e:44:c2:4a:89:5f:87:67:9d:57:41:ab:30:36:36:96:72:
6f:2b:e7:49:95:07:e8:41:a6:81:73:38:90:02:cc:44:21:55:
9f:cd:09:57:9e:73:34:d1:5d:fc:e1:10:33:77:12:2e:4d:88:
64:e5:d5:c4:3f:f5:11:22:8a:b5:4a:8d:dc:19:a4:7b:4d:66:
03:91:50:59:c1:1d:31:6d:46:c5:da:c7:cf:83:b5:14:22:8d:
56:3f:08:6c:c0:c4:00:0c:af:be:95:1b:96:e7:0c:c2:d3:f2:
c6:2c:17:c9:d3:05:2b:a7:86:42:e2:b6:51:37:af:bb:66:cf:
49:2f:d5:1c:78:bd:45:a8:69:f1:68:dc:dd:19:13:5a:ab:8a:
f4:9a:96:e5:df:ba:7d:8d:1e:18:08:89:c7:dd:93:85:0f:dd:
08:98:c9:b8:c2:a5:2c:2c:6f:a9:c4:56:76:40:cd:6e:e2:b5:
30:7f:65:24:4d:b5:4e:28:76:07:65:06:81:b3:cf:0c:a6:a8:
3e:8f:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:14 2025 by rpki-client