Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa
File: 6E491F58A79211EFABD45B2BC4F9AE02.roa (raw, json)
Hash identifier: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=
Subject key identifier: 9B:B7:13:55:D4:B8:40:82:E8:10:4B:2E:3B:05:D6:FC:BE:A6:E6:25
Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Certificate serial: 2E
Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa
Signing time: Wed 15 Jan 2025 06:09:25 +0000
ROA not before: Wed 15 Jan 2025 06:09:25 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 153451
IP address blocks: 203.23.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Validity
Not Before: Jan 15 06:09:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67875115-bcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:37:cf:38:3e:9d:9b:ae:c6:ca:89:7c:cf:
4d:df:a7:93:fe:c6:56:88:6e:fc:2f:0a:75:d7:3b:
b1:a5:d2:42:a6:74:2b:25:98:93:99:1c:27:e3:7f:
99:98:4a:ec:f5:89:58:ab:eb:9d:f5:15:41:2d:4c:
79:c6:73:87:1b:51:dd:7d:a3:f1:f6:81:97:e5:4b:
93:07:84:3c:1e:42:35:20:10:94:44:4f:f3:98:e6:
10:dd:ae:d8:33:8a:c3:03:7c:c9:f8:a1:20:14:cd:
25:3c:6f:2a:fd:84:71:88:10:4c:b5:a5:ed:e0:19:
9f:fe:89:cf:20:7c:ba:49:31:0d:85:13:86:a8:16:
be:a2:0a:8b:4f:59:42:3a:c5:43:e2:45:16:00:da:
93:c7:2d:4b:fd:04:9e:28:b8:05:13:f2:33:5d:e9:
91:0d:90:5b:ca:10:b9:2d:f2:2f:d5:a3:92:09:89:
5c:23:b9:a4:92:fc:d3:36:e4:f9:25:63:08:9b:af:
35:5c:68:47:79:82:33:78:f6:93:28:22:13:57:dc:
c9:0e:9b:96:be:bd:85:a4:11:95:c4:3a:24:7a:d6:
af:83:f0:a0:7e:c4:c0:08:1c:d8:81:eb:a9:1f:65:
21:c2:3d:a9:cc:26:24:c5:5d:2c:60:50:c3:6a:9c:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:13:55:D4:B8:40:82:E8:10:4B:2E:3B:05:D6:FC:BE:A6:E6:25
X509v3 Authority Key Identifier:
keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.23.36.0/24
Signature Algorithm: sha256WithRSAEncryption
46:df:09:80:83:97:38:e6:aa:ce:f5:fc:ef:17:1f:e1:3d:19:
07:07:8f:f9:eb:8c:3f:06:27:b6:d6:0c:4d:57:40:cc:a4:8f:
5f:24:c5:cf:3e:03:11:f4:c1:6c:dc:dc:85:80:17:44:e4:9a:
54:c3:61:8c:06:68:00:00:84:a3:13:11:6e:85:4c:a7:fa:38:
c7:d2:2a:8b:bf:9e:a8:8e:61:04:e3:e6:72:4e:ec:24:21:2f:
38:f7:ca:9b:ad:c5:a3:e1:bb:5c:30:47:71:ab:60:41:ab:cb:
57:db:3f:a8:dd:67:0d:69:ab:89:6b:a0:33:cc:05:05:9f:21:
e5:a9:f4:f6:0e:4b:ba:4a:b3:bf:3f:d9:ff:62:14:d3:d5:da:
ad:87:73:21:db:6e:fb:d3:58:95:1a:50:01:a3:3d:49:68:d6:
be:d6:50:60:d8:3b:a6:68:db:9a:81:aa:69:6a:70:76:7b:64:
a8:12:03:be:8f:24:fc:89:93:28:04:80:38:73:8c:f3:5d:3d:
80:6e:61:95:01:44:f6:b9:d2:16:f7:25:f8:11:09:8b:ed:9b:
26:fd:41:c3:cd:5f:99:4f:95:96:2d:91:86:07:de:38:6d:70:
c6:ac:9e:9e:de:a4:ae:fa:23:9f:fc:b1:8e:b3:64:32:2e:46:
9c:df:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:28 2025 by rpki-client