Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
File: 06A899FECCF311EC86719729C4F9AE02.roa (raw, json)
Hash identifier: R0Eg5VTlGn4g/E+8sB7ehm+T8ICQ6nRwL2adzlDHX6w=
Subject key identifier: 68:02:A3:BE:69:84:D4:22:55:5F:F9:39:45:B2:DF:7D:78:41:F8:19
Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial: 035B
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
Signing time: Tue 27 Feb 2024 02:44:40 +0000
ROA not before: Tue 27 Feb 2024 02:44:40 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 4764
IP address blocks: 203.24.73.0/24 maxlen: 24
203.32.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859 (0x35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Validity
Not Before: Feb 27 02:44:40 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65dd4c98-51e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:14:22:93:02:15:58:1e:28:b2:3a:38:59:
c7:e2:0e:43:99:fd:cb:d3:a3:14:d8:92:6c:61:09:
2a:ff:fb:10:83:34:20:3d:af:78:3d:ca:06:cb:0c:
2d:2c:24:b0:1a:11:a5:93:22:49:5b:a1:c2:50:0b:
0d:57:59:3b:4d:59:37:d8:d7:5c:6e:d6:03:70:a5:
2c:66:c9:df:43:9a:7d:5b:3c:54:12:ca:81:c2:8b:
31:75:61:9c:c7:e8:68:fc:30:96:e8:21:ce:f5:bc:
56:15:c7:82:10:69:c7:ae:80:26:84:7c:a3:45:67:
9d:23:77:c1:ad:22:63:71:d4:69:aa:fe:1e:f0:44:
76:d4:e0:56:5b:0e:b1:15:36:0a:38:ab:5e:3d:07:
2d:94:66:9d:0f:ab:48:e6:fd:7f:a9:1c:2a:c3:09:
0a:2d:d8:ec:1f:b2:41:75:ce:07:27:35:ec:74:20:
83:bc:40:0e:bc:7d:99:5f:de:db:84:52:f8:d4:4e:
aa:3d:06:df:4e:0f:2f:b0:3a:9a:db:57:a7:5c:c0:
c8:22:27:40:59:eb:87:c0:4a:25:8a:87:74:3a:08:
da:dc:42:21:d4:26:53:e1:07:3c:b8:f0:91:8b:13:
0b:e5:56:ed:c4:ad:86:28:d8:bd:62:b2:a5:78:72:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:A3:BE:69:84:D4:22:55:5F:F9:39:45:B2:DF:7D:78:41:F8:19
X509v3 Authority Key Identifier:
keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.24.73.0/24
203.32.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a7:70:fa:8e:de:2e:c5:77:ff:a4:25:04:1a:fb:54:61:ec:
f2:bd:b7:6f:d4:1c:04:61:27:28:95:9d:b8:2f:5c:c8:56:e4:
30:eb:04:ae:e5:36:67:7b:5f:56:e9:26:3b:8d:0e:81:ab:e4:
a8:7b:5c:80:1e:bc:b9:76:17:d5:06:c2:95:7a:5b:15:a7:b2:
14:0a:a8:68:7b:ff:61:e9:3f:58:b0:6f:19:4f:ec:57:94:6d:
b7:31:88:f2:25:66:5e:51:7b:f6:45:f0:36:c2:bf:dc:3c:08:
2b:c0:0d:c4:31:5c:97:76:e6:01:5e:2c:b6:12:57:d7:09:99:
1f:62:28:3a:de:32:63:3b:7a:98:65:83:1d:71:4f:20:65:e8:
41:b1:9f:df:8c:b9:60:10:57:6b:25:10:ca:df:21:f4:9c:14:
da:0f:8c:56:41:fa:37:39:64:96:09:68:1e:66:35:d7:27:74:
d1:1f:d9:23:66:43:76:b5:c1:9d:a1:16:73:69:28:eb:c3:44:
1b:98:19:97:c9:98:8c:9a:b9:97:ee:fe:7a:0b:97:b3:cc:fe:
a9:9a:e9:b3:f8:24:9a:5c:34:2c:f0:f9:e7:4d:3d:66:ba:b3:
55:86:a6:90:21:a7:b2:ae:f1:f6:36:c8:20:27:30:3a:59:e4:
8a:a3:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:52 2025 by rpki-client