Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
File: 399302423C8B11EE83400D20C4F9AE02.roa (raw, json)
Hash identifier: N2pS8ft3nrcylkyKhXMZRXSMHTWkIIpW9TlSRxcMr/A=
Subject key identifier: 14:AF:1A:2A:55:DF:0F:D7:A1:6C:0C:FC:F3:F6:41:21:C7:8A:B6:D2
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0143
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
Signing time: Mon 03 Jun 2024 06:55:19 +0000
ROA not before: Mon 03 Jun 2024 06:55:19 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 202.126.97.0/24 maxlen: 24
202.134.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jun 3 06:55:19 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665d68d7-d2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:a9:6d:66:53:50:33:1c:5e:b6:61:a2:9d:
90:53:c9:25:a1:4b:3a:69:45:d9:55:89:4d:c8:58:
ad:20:a0:0b:72:a2:52:4a:16:86:36:e6:54:74:6e:
32:7d:ec:6c:88:55:63:9c:c8:35:ec:06:cf:94:86:
d8:f0:fb:09:f2:10:9e:89:c3:8f:b1:2d:05:e8:b1:
72:9c:98:09:50:01:cd:b2:f9:ac:94:ed:25:4f:a1:
8f:18:5a:b2:ff:a0:c0:48:d3:e3:ed:41:eb:1d:06:
08:fd:d8:f4:32:f0:00:78:b4:0c:47:c2:8b:f8:d2:
e7:1d:d1:df:26:84:a9:cf:71:8e:8e:db:a8:2f:a7:
5e:a9:13:90:03:e3:db:ff:12:a8:e1:41:fc:37:0f:
eb:55:ae:7a:55:57:b8:48:7c:ca:1b:50:3d:4a:e7:
05:d9:18:d8:52:d6:b7:a9:d0:18:1b:57:76:6f:15:
98:e5:ee:3f:49:7e:e0:2f:a0:56:7a:22:b7:5e:a0:
ea:07:b1:de:c8:56:1a:84:09:97:6f:e5:05:dc:8e:
a5:64:01:c1:f6:da:07:bc:08:de:cb:c3:fa:fe:db:
18:3c:09:55:e9:d2:0e:5d:a8:e4:cb:f6:24:3c:3f:
86:66:d1:0f:19:17:0c:57:e3:83:51:56:f3:20:5a:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:1A:2A:55:DF:0F:D7:A1:6C:0C:FC:F3:F6:41:21:C7:8A:B6:D2
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.126.97.0/24
202.134.239.0/24
Signature Algorithm: sha256WithRSAEncryption
af:69:4c:98:b3:7f:c5:77:c2:1c:4f:74:3a:97:83:ac:93:8b:
78:d0:e7:d6:fb:d6:40:2f:ba:03:98:ae:b7:fe:50:18:16:3d:
a8:bb:c9:96:bd:40:a1:88:08:03:8d:b0:65:40:d1:9c:77:a4:
99:7b:47:d3:f0:77:3c:fd:15:d9:39:c9:19:82:8d:0c:cb:a9:
1f:25:f7:51:56:37:8a:da:bb:02:17:d2:1c:9d:6e:17:50:a2:
08:59:99:6a:03:5a:09:38:5c:fd:4e:dc:99:d5:63:b9:8c:8a:
d5:dc:38:15:e4:49:e3:a5:69:7f:f1:99:7d:17:77:ab:f3:d2:
c0:83:21:e7:08:22:b9:3c:4c:df:0e:ea:23:14:e9:97:4a:ff:
cf:53:97:09:60:d5:cf:93:a6:73:2a:86:fb:1f:f7:e0:6d:ac:
e0:80:bd:23:77:14:14:60:72:4b:85:6c:8d:55:98:96:98:6e:
03:61:24:70:c5:86:c8:63:11:b1:72:db:45:f3:e6:fc:df:f7:
73:c5:fe:cd:dc:6e:49:7d:0f:0e:94:75:cd:a1:5a:40:15:c3:
aa:71:31:70:45:95:53:6f:32:f7:7c:84:b8:80:b0:74:42:27:
b9:e4:36:45:be:09:38:1d:be:b7:ce:2f:d0:9c:b9:a5:e2:b7:
73:b7:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:30:58 2025 by rpki-client