Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa
File: 905F258E24F211EEA0863328C4F9AE02.roa (raw, json)
Hash identifier: vI4wCN8zHHpUwDdSCVBVfzEnFZc2gVGdk5XoB213poc=
Subject key identifier: 9B:24:C6:5B:A1:39:73:07:C2:1C:B2:61:5B:AF:3B:E0:BA:02:F2:A8
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 044E
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa
Signing time: Tue 13 Feb 2024 01:53:56 +0000
ROA not before: Tue 13 Feb 2024 01:53:56 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 45396
IP address blocks: 203.9.179.0/24 maxlen: 24
203.9.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Feb 13 01:53:56 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65cacbb4-1c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:c7:18:18:70:3b:50:0e:51:57:e5:87:4c:
09:70:53:3d:59:9e:72:e6:37:9d:a9:85:a5:44:d1:
69:33:53:da:7a:ac:63:05:8f:f5:4c:e3:0b:c4:dc:
71:3e:88:b4:e7:5f:5c:c1:3c:49:d5:65:0d:3c:2d:
6f:f8:94:eb:19:ac:47:66:b9:3f:0c:1c:e5:64:f9:
2b:fe:07:84:e9:41:af:ff:c6:52:39:34:ab:75:be:
ce:25:ce:39:e3:ec:aa:97:a8:3f:8e:9e:d6:0a:b5:
37:80:cd:4c:ba:cf:34:04:5c:21:17:9d:02:93:4a:
1c:3f:0e:44:fd:f1:b1:ba:27:15:32:44:f3:e3:d1:
53:f6:6a:60:95:fd:38:c8:c0:2e:72:65:6d:96:ba:
5e:cf:ce:f8:2f:0b:f3:64:eb:29:8e:aa:18:9f:48:
06:db:6a:b1:05:ff:04:93:81:90:c7:f9:50:ca:56:
e7:be:46:fa:3f:9c:fd:ab:d1:2c:74:36:c9:5b:93:
20:84:20:7d:82:79:8c:10:e6:dc:95:b2:b1:b2:e0:
08:46:b2:87:23:62:ec:71:bf:05:73:94:be:18:d6:
f6:49:12:12:aa:63:3c:51:97:b9:44:c6:be:54:3a:
88:54:8c:97:c6:02:c9:8d:0b:22:02:3d:26:ce:fa:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:C6:5B:A1:39:73:07:C2:1C:B2:61:5B:AF:3B:E0:BA:02:F2:A8
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.9.179.0/24
203.9.181.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:2e:27:bb:b8:4f:d7:2c:84:1e:a8:2e:db:2e:f9:2d:1b:a4:
cb:4a:56:c6:28:da:f3:8c:f4:9a:10:aa:f8:2a:75:9c:62:1f:
0d:68:c7:66:ee:57:6f:bb:d6:3f:c3:64:eb:df:89:67:5a:b1:
46:f5:9d:d5:4e:73:2f:3f:0f:e5:dd:57:08:75:38:0e:8c:c4:
70:1c:38:bf:8d:84:4c:86:80:86:e4:70:45:5f:f3:33:93:ea:
4e:8a:ae:58:b0:01:1b:94:0d:bc:98:89:c6:1c:34:d9:46:4f:
47:65:ba:78:32:ad:31:98:4c:cf:88:38:8e:41:68:87:d7:e7:
c3:0f:a1:13:a1:2c:7b:48:7e:3e:cc:9e:fd:86:d8:5f:6b:12:
6b:c4:a5:60:09:5c:71:56:f3:14:82:a7:df:c8:4e:24:89:ca:
06:b3:54:11:27:bc:e8:f9:e6:96:55:85:4c:35:17:83:0d:e6:
6c:41:9d:8c:c5:7a:fc:af:54:f5:9f:59:e4:33:3b:a0:a1:ff:
f7:f4:ff:65:29:28:53:67:13:27:60:a6:2e:9f:57:c1:03:8e:
5e:fb:b5:00:6f:c4:2f:53:8c:ca:8a:b9:ad:f9:c9:0d:04:2e:
44:e2:cb:48:0f:58:4d:24:12:0c:df:53:4d:ef:6e:bc:6f:c7:
ad:3e:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:33:06 2025 by rpki-client