Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa
File: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (raw, json)
Hash identifier: EkwWJK2JMsgrSqPZGShXj+awl3UUP/bSxj5kv4pCabE=
Subject key identifier: 3F:FC:FB:84:17:19:60:94:1D:66:9B:EF:F1:2D:97:47:66:0E:9D:05
Certificate issuer: /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial: 06D8
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa
Signing time: Thu 21 Nov 2024 10:11:09 +0000
ROA not before: Thu 21 Nov 2024 10:11:09 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 24323
IP address blocks: 45.64.132.0/22 maxlen: 24
103.4.64.0/22 maxlen: 22
103.4.64.0/24 maxlen: 24
103.4.65.0/24 maxlen: 24
103.4.66.0/24 maxlen: 24
103.4.67.0/24 maxlen: 24
182.160.96.0/19 maxlen: 24
202.74.240.0/21 maxlen: 24
203.202.240.0/20 maxlen: 24
2401:c000::/32 maxlen: 40
2401:c000::/41 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1752 (0x6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Validity
Not Before: Nov 21 10:11:09 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=673f073c-b083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:e6:e1:71:30:4e:35:df:a8:e2:e6:22:58:
1d:50:3f:aa:15:83:55:94:c5:1e:b9:af:ca:d5:14:
ec:85:4e:b3:27:1e:8f:be:13:16:6b:34:0f:56:56:
3f:00:7c:b3:f5:d5:c1:d0:fd:09:89:7a:8d:4d:ff:
7f:bc:38:10:e7:c7:80:af:db:9b:dc:96:03:1e:07:
7c:f5:8f:70:f0:be:9b:61:98:fb:a1:0d:13:48:e2:
9b:a5:73:29:37:9e:ec:38:e9:c2:fb:45:36:02:c2:
24:6c:0d:b6:d5:80:3f:8d:2d:c6:d4:ed:71:44:f9:
e6:b4:f2:1e:6f:01:40:05:ba:91:11:5c:04:6b:76:
08:8c:d5:8f:36:54:c9:43:96:3e:b0:58:cd:a2:70:
31:81:e6:45:33:99:1f:01:3d:2d:cb:8a:40:5c:ef:
58:ec:f3:57:b6:6e:f6:3a:8f:12:fa:6f:24:a4:18:
da:87:e0:f8:3b:dd:89:3c:9c:6a:5c:a1:0c:6d:64:
af:0b:34:9c:be:9f:88:bc:24:af:ce:56:0f:ee:5e:
1a:be:73:16:fd:e7:2f:38:84:c8:4c:56:b7:68:19:
a8:a0:04:50:c5:cf:af:1b:2c:85:29:53:fb:22:dc:
8a:29:a5:a5:12:cd:a3:8f:65:70:aa:02:9c:c0:3d:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:FB:84:17:19:60:94:1D:66:9B:EF:F1:2D:97:47:66:0E:9D:05
X509v3 Authority Key Identifier:
keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.132.0/22
103.4.64.0/22
182.160.96.0/19
202.74.240.0/21
203.202.240.0/20
IPv6:
2401:c000::/32
Signature Algorithm: sha256WithRSAEncryption
3e:7b:bd:6b:e0:8c:84:5a:f0:df:76:cf:01:fe:9a:47:32:b3:
2b:0a:81:6c:bb:b3:d1:2a:47:c7:9d:48:3f:c3:cb:2c:c6:99:
68:ed:54:9f:59:dc:af:33:91:42:52:d7:7a:cb:a1:80:1a:f8:
cc:9d:ad:9d:d8:62:1b:6c:a8:65:87:37:d1:6d:c3:9d:2b:f7:
40:88:73:68:64:f0:62:68:cf:49:c4:ff:55:34:73:b2:5a:45:
d0:34:b0:fb:90:3b:f7:f0:af:c3:1d:84:43:4c:2e:9a:13:61:
91:99:53:61:6f:8f:09:03:dc:52:4c:d4:93:0e:a0:91:cf:7c:
7f:94:2b:7f:c3:bf:10:aa:3c:76:97:0d:a3:7e:25:c3:ce:1f:
ac:1b:5e:ec:13:b0:a5:89:93:8f:38:25:3d:1b:e7:5b:38:56:
1c:43:f6:a3:b9:cf:41:b5:a0:f0:9d:c0:05:91:6a:92:a8:80:
e9:29:f4:d2:80:ce:36:b0:35:98:27:e1:8f:34:5a:70:ca:e0:
98:4d:bf:e1:27:42:df:a2:f4:a5:21:a4:f2:74:00:10:36:37:
c5:57:e1:a5:f1:d1:4d:7a:d4:80:4d:7d:d8:40:4a:ca:ea:2c:
cb:f4:36:2c:7a:1f:42:88:75:22:1c:04:49:01:96:81:42:77:
7c:ae:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:59:45 2025 by rpki-client