Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa
File: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (raw, json)
Hash identifier: aGLy/8PjmHM9bBnjKLxACS5cFbKo+n0HrFlLFQU8ICc=
Subject key identifier: 3C:26:46:12:78:16:F4:7B:2E:63:14:BB:42:DD:80:1A:4C:C2:C3:96
Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial: 04
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa
Signing time: Fri 29 Mar 2024 02:51:20 +0000
ROA not before: Fri 29 Mar 2024 02:51:20 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 9919
IP address blocks: 202.58.21.0/24 maxlen: 24
202.58.23.0/24 maxlen: 24
202.58.24.0/24 maxlen: 24
202.58.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Validity
Not Before: Mar 29 02:51:20 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66062ca7-b771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:7f:33:ef:ad:16:38:1b:dc:10:7b:bd:15:
3a:6a:7e:3c:54:2b:da:ce:62:64:9e:a1:5c:1e:91:
e7:ce:25:26:8a:74:b2:a7:ee:13:0b:7b:84:f4:2b:
97:25:4c:11:40:bd:91:24:41:35:a2:67:23:5d:ae:
65:5e:f8:5d:27:45:45:bf:e3:e6:36:9c:69:f2:41:
b7:e5:b5:8d:b8:ec:8b:e7:37:c0:88:c8:b9:05:01:
f2:a8:dd:dc:20:51:a4:36:d3:99:d7:57:af:08:34:
29:d6:45:e0:23:48:7d:9d:79:ae:82:c9:34:69:81:
5c:dd:ed:5d:1e:8b:4e:3d:13:b0:31:21:3c:77:9a:
06:45:98:58:16:ab:9e:5a:af:80:25:6f:96:b0:a1:
f7:2f:4c:23:54:11:18:66:99:e3:f2:7a:fd:3f:79:
0a:48:c2:18:2f:8a:7c:b4:51:05:8f:a3:56:f8:d8:
31:62:77:3e:0c:0d:e4:34:46:1a:5f:cc:74:43:55:
a2:4e:08:77:00:31:5a:2b:e8:6c:38:47:30:29:79:
96:bf:9d:62:96:6e:4a:0a:c0:e6:d2:b6:74:99:48:
e7:b9:b5:2a:46:35:ad:f6:a9:ba:4a:83:65:fc:73:
3b:2e:7f:b5:76:db:53:9d:29:5a:50:8a:d6:b7:94:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:46:12:78:16:F4:7B:2E:63:14:BB:42:DD:80:1A:4C:C2:C3:96
X509v3 Authority Key Identifier:
keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.58.21.0/24
202.58.23.0-202.58.25.255
Signature Algorithm: sha256WithRSAEncryption
92:bc:96:d1:85:29:35:59:5b:ed:ec:49:c4:bf:82:38:c5:7d:
f8:e9:de:fe:66:cc:06:fd:98:45:54:2c:cd:06:4f:cc:a1:3f:
0d:ae:25:46:9a:27:f3:6c:74:47:50:72:3c:16:d1:9b:50:8d:
71:ce:b3:01:83:0b:64:2c:0b:7f:72:e6:11:74:39:eb:f7:3b:
98:01:af:42:d1:4c:31:b4:7f:2f:b2:8d:6c:b6:42:1e:05:b5:
86:c2:a5:42:d4:14:84:19:01:67:14:25:82:37:69:cc:9b:5c:
2e:62:fc:a0:2a:e8:96:6a:c9:1a:97:ee:6d:52:38:11:54:66:
22:5b:9f:e8:d6:ae:1f:3d:73:2e:53:e6:28:f3:e3:84:8e:9f:
c3:c9:11:42:fe:73:d5:66:c1:58:d6:06:84:d1:2a:fc:39:5c:
ee:9a:34:af:42:59:e8:be:25:82:e6:c5:7c:4f:97:a3:33:5f:
e6:82:db:dc:62:76:d8:cb:f3:a0:1b:dd:40:6e:2a:87:e9:20:
1d:d7:65:88:0d:d7:e6:0d:fa:78:03:2f:75:a6:76:50:c8:04:
70:d5:e3:2c:9e:80:67:70:2d:ed:0d:40:e5:ce:f5:8b:66:d5:
c5:4c:23:b2:2a:4e:7c:47:04:53:90:4c:d8:38:f0:7c:5b:6b:
a3:0b:cc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:08 2025 by rpki-client