Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa
File: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (raw, json)
Hash identifier: Ta/ZWvPosDSPnLIBb0P0lxVE7uAqrQxU6Y7zoCnFQ8w=
Subject key identifier: EA:28:00:EC:1E:88:B2:57:EE:4F:02:62:27:8E:0A:66:89:49:EC:89
Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C
Certificate serial: D7
Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa
Signing time: Tue 27 Feb 2024 05:38:04 +0000
ROA not before: Tue 27 Feb 2024 05:38:04 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 19625
IP address blocks: 203.11.220.0/24 maxlen: 24
203.23.160.0/24 maxlen: 24
203.23.162.0/24 maxlen: 24
203.23.163.0/24 maxlen: 24
203.23.165.0/24 maxlen: 24
203.23.166.0/24 maxlen: 24
203.23.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C
Validity
Not Before: Feb 27 05:38:04 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65dd753c-e6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:64:aa:9d:2d:3b:3b:e8:87:21:72:3d:90:
b4:94:e0:d9:95:08:1a:e9:51:f0:fc:57:85:09:9f:
19:e7:40:32:15:fe:11:18:5b:2f:e0:59:59:3b:13:
f0:61:61:ad:98:d7:b9:dd:f3:51:46:64:2b:07:61:
90:df:ae:da:ea:4b:c1:c2:18:49:f1:aa:4c:06:5b:
90:2f:f1:fd:54:46:83:2f:e1:b1:3e:54:83:bd:5d:
90:d6:2a:ca:e9:8e:7e:26:c3:09:d2:ba:b7:4b:40:
0e:61:f1:35:5a:f7:97:49:35:01:c0:86:c6:65:ec:
69:d8:93:34:f5:8d:d9:78:45:07:9d:c5:43:8f:db:
b9:47:5c:d1:f4:a5:81:0d:12:7c:04:0c:2f:50:f2:
2d:e9:92:b7:80:2d:97:8e:88:cf:bf:ca:11:2d:06:
88:cc:dc:b3:e7:3a:b4:23:6a:7d:cc:f7:4f:d4:cd:
e8:e2:ab:7f:89:c2:03:34:59:79:9f:67:39:68:b8:
72:52:73:03:49:56:7e:00:bc:f1:45:92:03:a2:82:
a3:e2:47:a7:96:e4:42:69:c9:9c:a2:d2:bc:9e:b5:
77:6d:98:92:66:2e:e9:d9:e5:f8:01:4c:63:02:72:
3b:59:00:ec:2f:32:68:f5:b5:31:e9:d9:19:39:27:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:00:EC:1E:88:B2:57:EE:4F:02:62:27:8E:0A:66:89:49:EC:89
X509v3 Authority Key Identifier:
keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.11.220.0/24
203.23.160.0/24
203.23.162.0/23
203.23.165.0-203.23.167.255
Signature Algorithm: sha256WithRSAEncryption
93:d3:a6:58:db:c8:55:6d:2d:a6:cf:66:59:0d:3c:0a:60:b4:
53:e5:89:c4:ba:81:8b:9c:e3:3a:ff:24:fd:2d:ae:77:03:92:
c1:9d:25:32:55:89:49:2f:3d:08:16:bd:4a:48:88:4d:f2:1a:
13:77:71:b8:05:46:c0:c9:8c:16:9a:45:c4:f3:1a:13:6f:e5:
49:7d:22:51:e8:42:02:6e:f8:b9:58:52:81:9d:a9:ce:61:5f:
37:a7:3a:b7:f8:bc:48:16:5f:d4:5c:a4:df:55:96:2f:0d:9f:
27:2b:39:d2:41:eb:2d:8a:cf:db:32:07:f2:0b:3d:42:81:09:
9e:fd:f5:39:d7:ad:e9:bd:58:22:ee:fe:68:c5:c9:38:e4:9c:
78:52:5e:a2:8e:24:73:60:20:03:f4:a2:22:f7:44:0f:e0:91:
4f:cd:86:ec:38:8a:94:bd:b2:6b:ed:7a:d5:b2:03:72:32:e1:
89:69:af:0f:1f:ce:c5:fe:f6:3d:5f:91:14:30:70:ce:10:50:
b9:a3:1b:db:fb:30:fb:0d:0c:fd:c5:c0:e5:18:de:20:da:3c:
33:11:86:5f:d4:b7:4e:08:9d:68:0e:cd:92:92:33:62:ba:83:
eb:3e:be:10:fd:35:b0:d0:5f:9e:e4:a9:90:58:85:a7:79:91:
a6:85:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:17 2025 by rpki-client