Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa
File: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (raw, json)
Hash identifier: TXYafClgQVQeXJUBvNnLknPV2XqYxQCmJVpXmho0QT0=
Subject key identifier: A6:49:A6:11:26:2E:96:20:59:03:C3:24:46:D8:E6:81:34:8D:CC:16
Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial: 0D0E
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa
Signing time: Thu 22 Feb 2024 18:56:39 +0000
ROA not before: Thu 22 Feb 2024 18:56:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9216
IP address blocks: 122.144.32.0/19 maxlen: 24
202.154.192.0/19 maxlen: 24
203.135.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Validity
Not Before: Feb 22 18:56:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65d798e7-f06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:4d:32:68:1e:7d:08:4d:40:b4:d4:dc:3e:
f5:01:53:7f:17:a9:f9:39:41:b3:f4:3a:4d:66:b7:
66:a7:7a:9b:69:41:74:45:fb:af:d1:e3:8c:45:31:
ca:88:89:50:e5:13:95:33:cd:03:3f:6b:3b:9c:e0:
c2:5a:a9:3d:0d:07:7f:c7:ee:7e:25:46:df:54:ea:
18:fd:34:b2:38:fd:0f:90:05:b5:17:ad:fe:b1:20:
95:01:27:ae:c2:ff:8f:5a:ee:bd:ca:b5:b8:9d:3c:
28:8a:7f:b7:75:9b:5d:d9:d2:48:e2:db:f9:40:d0:
c8:7f:26:35:6e:21:13:b8:15:2e:2c:3c:ef:5e:77:
bf:2e:a3:fa:9d:dd:04:ea:5f:dd:cc:21:62:5c:a8:
d4:3a:7b:73:6c:f3:67:b1:6c:3f:d1:a0:80:69:c2:
f3:4d:0c:d5:f8:c6:9f:7c:83:ba:d5:a5:7b:4a:dd:
df:73:05:78:86:f0:a4:cd:19:a1:4d:1d:66:ee:d4:
f9:93:70:85:4a:67:ee:34:e0:91:59:13:48:2b:99:
6a:b6:db:d7:f7:8a:bf:91:ba:bc:17:02:d7:0c:2a:
5a:43:a7:0c:22:78:7e:52:0c:d7:f7:41:e4:57:4c:
9f:67:52:f7:0c:54:d3:74:dc:b3:23:f5:69:e5:ba:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:49:A6:11:26:2E:96:20:59:03:C3:24:46:D8:E6:81:34:8D:CC:16
X509v3 Authority Key Identifier:
keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.144.32.0/19
202.154.192.0/19
203.135.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:68:8d:53:fe:95:3e:fb:e7:dc:df:83:b9:ae:63:52:db:84:
ac:16:20:8b:e0:ec:45:ac:46:a4:72:8c:7b:65:5c:36:fc:c9:
56:35:ef:1f:ed:de:52:61:6f:e2:69:58:e6:16:94:f1:a0:f7:
55:31:17:ed:9c:49:2d:08:58:e9:eb:38:b8:c0:9c:6c:cd:32:
66:32:ed:14:09:e8:99:a5:b1:a3:d5:81:5d:05:b8:59:9a:9f:
27:a1:0c:72:01:fb:c5:87:89:34:25:2a:2d:81:a4:8e:41:02:
d3:96:4d:ce:37:db:3f:ce:d0:59:76:23:37:45:c4:4f:78:f8:
e4:26:54:18:ad:4a:0e:8e:e2:e9:9d:3f:51:57:6c:a7:58:e9:
7b:41:3b:5a:ea:44:34:8a:53:2f:9d:17:be:16:20:c3:ff:53:
6c:9f:32:1b:0b:37:cf:8c:b8:3a:c9:16:a6:f4:26:fa:bd:20:
04:0b:ab:04:10:d3:49:ab:9f:4e:11:4e:15:52:1b:e5:ba:58:
ac:47:b5:df:81:cd:16:aa:13:e7:bd:65:0e:43:7f:68:b7:a1:
42:d1:87:ad:b2:c8:74:e0:6e:c8:a6:b0:d4:b7:fb:8e:fc:17:
cf:75:e6:fc:28:23:64:74:16:e7:a5:b9:51:03:f4:1f:5b:14:
74:e9:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:52 2025 by rpki-client