Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
File: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (raw, json)
Hash identifier: /wWuVpCPNe4CJwTIQ7NxUOlPcFrAGBgP0omithp9fcQ=
Subject key identifier: 2F:26:BC:A2:64:A1:4B:D9:40:BA:5C:3A:83:C0:D8:34:F1:1C:C3:B9
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 26C7
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
Signing time: Fri 24 May 2024 06:28:39 +0000
ROA not before: Fri 24 May 2024 06:28:39 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 132716
IP address blocks: 203.213.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9927 (0x26c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: May 24 06:28:39 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66503396-64c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:29:aa:78:1c:2f:0f:d8:07:d4:4f:0e:ba:
b3:c5:a5:96:5c:ea:22:69:6e:0d:88:d2:d8:53:8d:
d8:77:6e:e8:c4:3f:6d:e4:09:ad:4d:18:67:38:0e:
4c:57:dd:6e:15:6e:39:c4:52:87:3a:54:eb:5b:88:
f3:f0:77:45:36:1f:23:2b:1d:5f:d7:c8:4a:8a:03:
11:4c:67:4f:f4:20:e0:38:97:af:6f:c2:a2:1c:58:
0b:2d:4a:5b:8f:17:cf:4c:c5:1c:a1:a6:1d:cc:8f:
ee:c6:c2:cd:bc:6b:cc:d7:bd:ba:a0:5a:87:87:79:
45:30:a2:44:08:1c:4b:c8:ec:22:ca:57:1c:3f:74:
fe:40:70:d2:17:35:1c:68:aa:70:5e:f6:8b:61:7e:
e5:98:00:42:83:8c:16:24:fb:31:20:5c:bf:41:75:
8e:32:0d:e6:67:0f:48:b7:2e:f9:e3:60:75:19:c4:
3c:84:2c:e7:cc:17:c1:e6:e7:28:e2:ee:e6:87:60:
26:f8:44:64:28:27:44:20:c0:f8:e5:6d:af:e0:fb:
ca:fe:ff:d4:0c:bf:93:89:56:70:72:01:2c:3c:7c:
70:72:d2:08:3f:d1:f1:32:96:20:30:b4:37:d9:be:
24:d7:25:e8:3f:ec:86:cf:e5:6d:f3:5f:c1:36:9c:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:26:BC:A2:64:A1:4B:D9:40:BA:5C:3A:83:C0:D8:34:F1:1C:C3:B9
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.213.201.0/24
Signature Algorithm: sha256WithRSAEncryption
be:90:40:c7:70:cc:b3:d0:a9:f8:59:fa:20:3e:42:26:c8:d2:
19:62:eb:70:ca:89:89:75:02:60:4f:42:b3:c1:f1:6c:21:12:
04:cd:06:32:3c:06:3b:00:fb:55:f3:9d:f5:35:1e:37:0c:19:
e9:5c:a8:b3:b9:4a:7f:cc:fe:ba:07:fb:f1:3d:da:2c:e1:ba:
3c:d3:a9:5b:bf:76:a9:c4:51:11:4a:26:7e:3a:d4:b5:0d:d5:
9a:c9:a3:c3:02:3f:ca:b3:a1:6f:59:d3:cd:c5:5d:42:47:4c:
ae:ce:e0:bf:36:6c:7e:c8:01:1c:7c:25:4a:74:ba:57:72:e8:
e8:cb:42:9c:e0:67:d3:9a:ab:8c:6f:33:97:b6:01:eb:52:b3:
a6:da:da:37:b2:17:12:f1:97:fe:32:4c:e0:0c:13:dd:cf:f9:
e9:34:3b:b1:06:8f:0d:66:45:0e:48:e0:2b:bc:2c:92:7b:97:
88:fb:79:55:1a:44:4b:00:2f:e8:17:df:67:95:9d:ce:e7:a3:
48:a7:67:94:78:5a:52:59:cb:a3:d0:67:19:f0:de:86:c2:46:
36:bd:fb:d3:57:f9:be:bf:fc:a1:52:1c:d9:92:f4:e3:0b:d4:
26:38:24:98:c5:ce:b3:9a:d4:f2:f5:b9:2c:ec:21:a0:ad:8e:
7d:e4:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:38 2025 by rpki-client