Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
File: F9F81E3480FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier: uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=
Subject key identifier: 6F:AE:1A:0C:D7:4C:D2:12:06:62:3D:F8:A2:92:B5:DC:10:E7:0B:C4
Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial: 01AF
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
Signing time: Fri 27 Sep 2024 02:26:31 +0000
ROA not before: Fri 27 Sep 2024 02:26:31 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 58611
IP address blocks: 203.28.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Validity
Not Before: Sep 27 02:26:31 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f617d7-b1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:e3:95:c5:b8:28:0f:69:87:8d:d5:c0:90:
c7:c0:ba:91:e8:d8:0c:49:78:c9:59:55:7a:8f:00:
a6:bd:7f:16:47:c5:bf:77:e5:19:e1:3e:45:64:bc:
78:b5:fb:ed:4b:e5:13:cd:a6:b8:b7:13:73:89:ac:
8b:7e:8e:43:9a:c8:ec:11:b6:e8:e4:07:3b:a4:03:
fe:5d:aa:e1:80:6b:b7:87:c4:5d:8c:06:0c:31:4f:
f5:56:8e:2c:58:ab:82:7c:d4:0a:69:f7:ed:4e:19:
6a:e3:07:18:06:15:db:ba:06:7a:78:5e:66:bb:8e:
6d:16:d0:78:d7:ba:0a:62:09:93:74:31:ea:8a:ef:
74:f0:95:f7:fb:71:dd:7e:41:60:45:61:77:31:e1:
8d:9d:de:14:bc:b8:c5:41:0c:fa:99:4c:f7:9a:41:
8b:6e:58:8e:fd:46:0f:8c:11:db:b0:c1:96:79:15:
37:a9:be:9a:70:c0:b9:da:c7:89:13:31:e3:f6:36:
bf:65:98:f1:a8:54:76:44:2a:73:a8:8e:d9:a5:98:
ce:4f:84:ab:a2:63:68:ef:5f:63:7b:44:d5:44:d0:
43:ff:e1:64:f1:85:86:a1:cb:65:41:72:ae:78:15:
3f:62:4a:6e:aa:2a:ef:ab:31:5f:fe:59:b4:f9:3e:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AE:1A:0C:D7:4C:D2:12:06:62:3D:F8:A2:92:B5:DC:10:E7:0B:C4
X509v3 Authority Key Identifier:
keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.28.79.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e1:1c:fe:17:1b:2d:68:f3:3c:7d:5f:43:0a:98:be:6d:4b:
13:dc:ed:ca:0e:50:48:d2:4d:ba:9a:8e:5b:77:e8:25:e1:79:
e4:f5:38:f1:d1:24:66:a8:c8:92:14:ed:3b:23:19:7d:94:fe:
90:71:93:cf:dc:1e:a4:07:65:75:29:b4:04:d2:86:b8:a6:75:
19:bd:99:8c:f3:0d:52:90:e4:b9:36:4a:8e:b9:78:24:1e:9a:
30:74:fb:02:0f:20:7a:b4:3c:af:70:64:ae:e4:03:b1:0f:b8:
bc:5e:86:27:32:93:6e:c2:1d:a4:7f:e1:37:56:d0:bd:98:25:
e4:ae:1c:3c:54:31:e2:9b:26:84:e1:5d:93:79:96:11:f0:77:
b5:dc:cc:32:2f:c4:5b:b2:71:a9:ed:11:d7:09:1d:35:b8:60:
88:fa:5f:9a:68:df:a4:ae:56:4b:95:15:a3:a7:9e:cf:95:54:
c6:29:8f:9f:0b:29:a4:1e:ae:eb:f1:70:19:63:a8:cd:50:26:
10:f4:9d:85:5c:eb:05:f9:92:90:ae:b5:28:d2:be:4b:96:29:
e8:18:3f:93:39:a8:48:76:28:50:38:f0:76:8e:eb:ce:ea:8a:
de:fc:40:6a:55:3e:b0:0c:c5:4d:01:a1:f1:a2:10:7a:09:92:
fb:62:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:43 2025 by rpki-client