Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa
File: A3E08ED6825711EFB7585B6FC4F9AE02.roa (raw, json)
Hash identifier: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=
Subject key identifier: CE:0E:0C:AD:60:C4:83:6A:0C:94:69:8F:D2:FE:31:E8:C3:BD:23:57
Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial: 0118
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa
Signing time: Thu 26 Dec 2024 17:24:47 +0000
ROA not before: Thu 26 Dec 2024 17:24:47 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 151987
IP address blocks: 203.99.144.0/24 maxlen: 24
2001:df3:18c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Validity
Not Before: Dec 26 17:24:47 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=676d915f-968d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:1b:2c:61:24:f5:2a:80:cc:b2:7a:be:46:
4b:63:8a:65:9f:b3:83:fa:88:f0:45:b4:6e:a6:bc:
aa:9a:73:d3:c8:c8:1f:eb:7e:f8:f0:9b:1e:14:da:
fa:41:ab:5d:08:c0:d1:02:db:c1:f3:36:4a:bb:40:
fc:de:62:29:38:3b:8c:55:b0:45:41:8a:fc:fe:8f:
24:26:34:ce:c9:dc:72:80:a9:53:e8:a2:9b:b6:d4:
71:a2:88:8a:88:13:90:b1:88:6c:d2:36:96:93:6e:
e7:77:bc:fa:3f:ad:a7:7e:3b:b7:cd:68:69:0a:aa:
c5:4c:b6:7c:5c:78:38:59:3d:d5:7a:f7:ba:3f:45:
4b:67:ab:34:5f:1a:8b:51:de:75:d1:50:08:6f:df:
ff:77:1a:51:e8:a4:c2:e1:f1:1c:f2:97:ec:c4:b9:
0f:fd:f8:d4:c1:43:0c:81:a4:84:07:09:19:d5:88:
db:e9:ff:72:af:66:68:ea:48:7e:86:ed:67:e6:f1:
8f:02:0c:a3:c0:fd:3b:c6:6e:32:b3:e6:29:73:90:
25:0e:8c:2a:46:1a:a8:23:51:84:2c:28:f4:67:12:
5c:9e:45:bb:78:f4:12:98:80:c5:96:4a:f7:da:de:
99:1b:0a:bc:bd:19:03:c2:1c:c4:18:84:6d:f7:8b:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:0C:AD:60:C4:83:6A:0C:94:69:8F:D2:FE:31:E8:C3:BD:23:57
X509v3 Authority Key Identifier:
keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.99.144.0/24
IPv6:
2001:df3:18c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:9d:20:fc:73:24:44:07:e0:fe:e6:9f:0a:02:8e:db:9e:e1:
53:92:53:c7:bc:d8:c6:ee:f8:45:ed:78:9f:57:d7:a2:d7:be:
f5:0d:23:e7:9d:9b:33:b9:7e:d9:c4:11:27:2a:2d:14:1d:c4:
9d:01:5d:13:ea:65:d7:f6:fb:54:7f:76:75:83:46:c4:86:6b:
fd:f6:fe:a4:6a:19:97:a4:73:53:eb:3f:1c:62:28:b0:94:cf:
51:5e:58:88:74:03:86:66:44:d2:ee:71:40:aa:7a:63:54:b4:
db:9a:fa:a9:85:98:45:22:b6:3a:06:55:e8:2b:05:a0:11:6b:
61:4e:43:48:df:b5:51:81:81:b9:05:eb:7a:6a:bc:f3:18:d5:
53:ad:21:d4:fb:b4:39:d5:0b:c9:15:22:b2:10:b3:f2:3e:74:
e7:61:6e:18:6a:1c:80:8f:4a:37:3c:71:36:b7:99:3b:1c:b3:
ff:23:fc:c4:93:ac:14:cd:34:64:70:c0:ef:81:3f:21:67:81:
cd:5a:1b:c9:fa:c7:9b:07:dc:2d:0b:e0:70:b4:8e:cb:b6:fa:
a4:d9:0d:27:9b:31:e4:fa:21:d2:7a:fd:f9:d9:48:e8:35:4f:
1a:23:0e:cd:ac:1c:ba:6c:1d:51:7e:e1:7a:11:8b:99:94:01:
34:21:fe:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:02:08 2025 by rpki-client