Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/93957C3A25B211ECB5356475C4F9AE02.roa
File: 93957C3A25B211ECB5356475C4F9AE02.roa (raw, json)
Hash identifier: rxXFLYO2jOx+4E1gXwptPALsOETYyiBrkxClqr3viBA=
Subject key identifier: C7:48:33:BE:41:F4:7D:83:4F:03:A4:49:E3:5E:5C:8E:94:A1:18:69
Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950
Certificate serial: 239D
Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/93957C3A25B211ECB5356475C4F9AE02.roa
Signing time: Tue 16 Jan 2024 16:12:40 +0000
ROA not before: Tue 16 Jan 2024 16:12:40 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 3758
IP address blocks: 202.176.192.0/19 maxlen: 24
203.208.224.0/19 maxlen: 24
2404:5800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9117 (0x239d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950
Validity
Not Before: Jan 16 16:12:40 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65a6aaf8-5d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:92:95:e5:5c:8f:f0:62:a5:dc:7b:2e:6a:
42:ac:04:62:c9:c7:be:d4:cb:cd:30:55:78:c9:b9:
2c:ce:03:aa:0c:eb:8c:d6:99:29:84:f8:d1:d6:70:
b6:c5:d5:08:d2:20:00:de:c7:62:2e:6d:1b:a2:96:
10:ec:cb:87:e5:eb:fe:3a:02:c0:f7:9f:f3:6f:99:
36:e2:59:39:c5:f4:ab:03:45:c5:f0:a4:97:48:94:
c3:75:84:bf:29:a3:7c:89:be:38:9d:57:14:36:fc:
36:96:64:dd:fa:b4:12:c9:ff:95:fc:8e:4a:dd:7a:
87:9f:e0:72:4f:ba:dd:e0:09:36:12:36:7a:54:c2:
15:d9:91:9c:3b:40:08:5e:89:b3:6f:1d:4c:49:42:
28:61:24:5f:c9:8a:a5:77:61:4d:7e:71:fc:21:21:
d0:a9:d6:df:c9:99:71:65:49:a8:6c:d9:27:16:64:
3a:bf:05:60:ab:1b:a9:a3:3e:a7:a5:c4:eb:05:ad:
1b:fd:12:60:1f:ea:bd:73:1b:d0:0b:40:02:cb:b1:
e1:ce:7c:6a:0f:7c:2a:87:32:eb:6e:4d:c2:0a:a4:
f4:7b:4e:1e:cf:67:a7:8b:07:d7:11:fa:46:38:59:
11:8a:a0:41:ea:e4:b5:e0:ce:db:7f:f2:d1:91:57:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:33:BE:41:F4:7D:83:4F:03:A4:49:E3:5E:5C:8E:94:A1:18:69
X509v3 Authority Key Identifier:
keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/93957C3A25B211ECB5356475C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.176.192.0/19
203.208.224.0/19
IPv6:
2404:5800::/32
Signature Algorithm: sha256WithRSAEncryption
ac:93:ed:6f:b7:aa:4a:34:2e:d7:1b:32:94:83:2b:ec:a7:4e:
e2:cf:27:d9:86:2c:84:58:b7:45:a8:05:0e:be:7d:c6:10:45:
41:11:f3:fa:4f:d7:3d:f9:94:64:c5:66:ba:d3:b4:d1:2f:1a:
28:8a:b3:e7:8d:8e:b9:9c:57:ea:3b:f4:e2:b7:8a:7e:a7:d3:
1e:7f:61:5a:4c:92:be:16:7e:57:a0:a0:43:0b:b2:f3:da:c3:
79:80:ba:3c:25:5f:2d:54:16:b9:a0:cd:ea:9c:91:18:70:72:
b4:fd:47:76:5e:8b:d0:46:9c:19:39:9b:ad:72:a6:17:53:1d:
f1:ac:5b:23:e3:81:88:11:2b:52:7e:28:0d:29:d0:4e:e8:4d:
d3:e9:3f:3b:c1:58:13:93:28:47:6a:37:7d:80:be:1a:4d:34:
96:74:ab:0f:f5:be:c6:4f:9f:03:3a:fc:4d:f8:1a:30:54:c1:
d5:9b:2c:82:d4:61:2b:7e:da:e2:4e:83:32:97:e5:37:17:c9:
c2:9e:6e:2b:57:62:3f:3d:59:87:30:d5:62:5d:6d:ee:6c:5e:
23:38:51:60:ae:67:d5:af:30:53:69:22:bd:04:78:2b:a5:fa:
d0:4f:97:c0:8b:83:bf:be:9d:25:96:e6:09:5f:42:32:65:ef:
a8:6c:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:16 2025 by rpki-client