Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa
File: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (raw, json)
Hash identifier: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=
Subject key identifier: 9F:FA:CA:13:B1:75:39:1A:9C:4B:C5:45:E6:B2:B1:F2:A4:9E:CD:8C
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 3450
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa
Signing time: Sat 28 Sep 2024 15:00:56 +0000
ROA not before: Sat 28 Sep 2024 15:00:56 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 139797
IP address blocks: 202.57.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13392 (0x3450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: Sep 28 15:00:56 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f81a28-dffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:93:84:fe:24:ae:58:29:82:89:4a:70:65:
20:b5:3e:a9:29:e8:7b:2c:7f:a3:be:42:c6:0f:0c:
68:62:0e:e3:e6:21:ea:f6:84:a5:1e:a3:34:90:d0:
9d:b0:69:91:5d:45:54:5e:9d:ba:5e:8d:7e:4b:20:
cc:50:d2:ee:a3:94:9e:41:5c:7b:3e:52:1d:5e:4d:
3c:43:dd:40:61:0d:c0:69:03:52:d8:19:2b:c1:1f:
b7:4b:83:f3:3d:b7:a7:9e:55:61:6d:0a:da:46:3e:
83:2c:69:e1:ba:65:d5:ba:06:98:d8:01:bb:ba:5d:
47:cf:04:23:6c:37:50:83:88:c6:f0:99:df:15:a8:
55:fe:0d:e0:6d:e6:10:48:2f:59:e7:7a:ef:ab:b5:
93:c0:cb:39:19:ff:b4:f2:3d:0d:66:a4:cf:66:d8:
a6:ad:eb:37:62:4e:2f:bf:3d:56:9a:a6:8b:c0:6a:
f6:ac:f1:af:ed:15:e1:be:96:d0:52:c3:2f:39:a1:
d5:cd:41:24:30:bf:65:74:eb:1f:94:be:8f:93:bf:
f4:b0:44:c7:4b:7c:f9:d2:84:22:18:d1:28:5e:f9:
18:de:1c:72:c6:84:21:32:87:f2:84:85:ae:30:91:
38:e9:06:d6:ee:79:85:22:ad:ae:07:9d:0b:fa:d6:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:CA:13:B1:75:39:1A:9C:4B:C5:45:E6:B2:B1:F2:A4:9E:CD:8C
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.57.208.0/24
Signature Algorithm: sha256WithRSAEncryption
87:49:69:a7:f8:3a:91:42:ca:d7:51:e1:e5:df:d2:a3:7c:4d:
91:0b:7c:6c:64:be:c7:b5:2e:d5:4b:48:0d:84:d3:42:8f:cf:
aa:8c:e5:49:a1:c4:bd:34:99:e5:aa:91:2d:a6:28:b8:30:20:
97:c4:05:da:17:9f:e0:6c:b7:39:77:74:df:07:9e:26:18:e7:
ad:42:4b:5e:3d:b6:60:27:dc:2e:97:67:ad:e9:6d:2b:fc:7b:
89:17:bc:c3:fa:a3:eb:82:98:d0:b2:45:6d:aa:eb:f5:dd:18:
98:66:cc:54:d7:f1:c5:57:69:25:62:12:ce:3a:7a:ef:95:c3:
ec:74:96:2d:8d:80:bf:2e:8f:fb:c2:dc:ef:f5:fe:0d:f8:1a:
27:38:f0:94:31:9a:d7:65:75:61:02:37:b7:0b:94:74:34:d3:
33:6d:b9:78:7f:39:d0:51:9e:d6:ef:8a:7e:90:31:8f:36:89:
b5:c9:6c:59:f0:bd:23:9e:39:31:8c:a3:4f:6a:53:71:43:7a:
53:fc:a4:12:d4:dc:be:04:f2:63:8b:73:60:0c:a3:cc:03:f1:
ae:54:7d:c3:7e:79:5b:0a:c9:35:70:7f:e5:fb:8f:f2:83:8c:
77:53:9a:7f:32:39:f1:b3:f8:30:80:8b:f0:d7:29:bd:c2:d9:
c9:02:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:30 2025 by rpki-client