Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa
File: F9350C3C326B11EEA39EA051C4F9AE02.roa (raw, json)
Hash identifier: l6IS2kpgAAlvqNFhAN1P6ZblqySzuWpYTnlUWX9CEl8=
Subject key identifier: AD:68:A6:7E:74:68:2A:5F:43:04:0C:A7:8C:48:6A:BC:F9:5F:7D:1C
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 014D
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa
Signing time: Mon 03 Jun 2024 06:55:29 +0000
ROA not before: Mon 03 Jun 2024 06:55:29 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 202.126.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jun 3 06:55:29 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665d68e1-e361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:77:be:b8:35:d3:cc:0e:8d:66:ba:ed:4c:f0:
08:fe:f1:78:13:05:30:35:be:78:d6:a8:e7:e9:f4:
2d:bb:e2:54:0d:dd:fd:f4:a4:c7:48:b2:05:d5:69:
d6:e5:8b:82:12:36:ab:4a:15:57:f7:62:92:a1:32:
90:94:70:7e:16:6f:ab:49:64:d9:b5:36:83:11:79:
d3:3a:02:dd:d6:d4:fa:f7:48:ce:48:65:19:fe:d8:
a4:29:a1:7a:75:cf:db:6b:19:7d:0c:2a:80:92:10:
0a:5a:4d:c3:32:77:47:7a:a4:5a:a4:e9:b3:70:7c:
9e:31:c8:e4:66:71:de:b1:e2:80:51:00:ab:d1:d4:
c2:07:a4:52:34:8e:ff:b5:1f:e4:69:4c:55:47:38:
5a:c2:fe:8b:94:fc:4d:08:3f:6b:08:ac:75:fb:f1:
25:9c:55:14:a9:e3:4c:bf:3d:14:27:10:e5:15:80:
8c:56:af:60:e7:c2:6f:29:3d:f8:0a:05:17:1e:d9:
c9:36:cf:04:24:ef:cb:95:75:5d:9a:25:b8:af:ce:
b4:99:b7:50:ef:bf:13:48:ef:a4:be:9c:40:4e:d1:
63:54:c0:15:ce:40:51:01:66:93:d7:ea:99:5e:f4:
e3:c9:b4:dc:59:65:5f:56:54:98:c8:0f:1c:d6:7f:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:A6:7E:74:68:2A:5F:43:04:0C:A7:8C:48:6A:BC:F9:5F:7D:1C
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:01:5f:3e:22:44:f3:b2:9c:64:b5:c5:95:bd:fc:5c:49:71:
36:79:1b:ad:22:7f:50:d5:df:fc:e1:83:6d:80:c8:1c:a2:40:
89:29:0d:38:fb:77:00:6d:e0:12:be:cb:ab:4d:a5:1d:45:03:
c2:b1:0e:fa:27:3a:cf:e1:38:a8:69:8a:d6:39:bc:5a:c4:25:
8a:58:70:7f:ce:ae:b7:50:58:2b:8f:8b:6d:f0:2a:48:8b:8d:
c7:7a:f9:c6:89:db:e5:e6:ec:04:84:56:4f:d7:08:21:8a:76:
66:de:81:0d:15:65:d6:7d:61:8a:92:17:ea:f4:88:96:e9:c9:
95:37:3b:54:ac:9d:7b:55:e7:7c:54:d2:c9:a9:78:99:13:14:
33:45:05:33:19:8b:7e:bc:fb:fd:ae:ea:82:b6:8e:c7:6c:0c:
b7:40:51:75:12:6a:f9:68:76:6f:82:1a:95:e4:54:b9:b0:b2:
68:b0:48:96:c8:62:66:56:a1:72:de:a0:13:24:11:78:ef:d8:
9b:58:7c:4a:ef:7e:2d:58:c1:a4:6b:74:4b:4b:b6:2c:37:c5:
19:aa:ff:35:ad:f8:f8:37:4a:32:92:1a:82:a5:1c:22:0d:10:
db:95:cf:dc:d2:00:f9:27:7e:0b:a6:17:b7:a1:2b:2e:89:49:
0a:16:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:25:30 2025 by rpki-client