Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
File: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (raw, json)
Hash identifier: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=
Subject key identifier: F8:3B:72:E3:4E:2C:5A:C8:B2:49:3D:1A:43:DB:17:11:C5:13:D3:72
Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial: BA
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
Signing time: Tue 07 Jan 2025 04:48:44 +0000
ROA not before: Tue 07 Jan 2025 04:48:44 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152153
IP address blocks: 113.192.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Validity
Not Before: Jan 7 04:48:44 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677cb22c-e3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:35:93:f3:b0:43:45:c4:ea:83:82:83:c1:
2f:71:4e:35:51:4a:5e:6b:aa:aa:07:79:a8:38:18:
35:43:1a:81:4c:19:df:e5:a8:a7:91:7f:23:f7:c6:
24:a1:e5:a9:4d:91:e3:2c:11:81:fb:b9:f5:50:bf:
1d:9d:8d:cd:43:25:89:cc:4e:e0:a5:33:38:25:09:
73:8c:8a:a9:03:35:6c:24:7f:c7:d0:85:11:4b:99:
a9:18:ca:d1:6b:51:aa:52:34:c6:30:12:3d:67:24:
bf:a4:3c:88:ad:66:c6:0d:60:ce:32:de:25:74:9c:
23:b9:55:82:d9:cc:42:73:a4:96:b9:54:0a:00:57:
66:42:47:4e:bc:c0:eb:e0:17:96:94:e3:8a:73:aa:
87:0e:76:15:3e:6a:45:db:ec:48:a0:6b:7a:b9:68:
68:fd:ca:4a:ee:fa:ed:7b:db:4d:b9:38:35:95:f2:
88:1b:9b:42:8d:97:77:7d:79:4d:0a:ff:04:e9:35:
5a:ac:8c:9c:85:99:a9:96:a4:43:99:1a:97:79:64:
e8:01:f3:76:5c:c8:f3:15:5c:e2:34:0d:42:34:b1:
3e:7e:c1:81:ac:22:61:25:37:d6:ba:42:56:e9:d0:
fb:49:54:9f:d1:3e:f3:f8:1d:fc:00:d8:41:15:32:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:72:E3:4E:2C:5A:C8:B2:49:3D:1A:43:DB:17:11:C5:13:D3:72
X509v3 Authority Key Identifier:
keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.192.49.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ed:e7:04:ae:dc:99:c9:91:25:42:d9:89:d2:4d:cc:c4:1c:
02:ac:70:08:07:8a:43:92:72:78:b6:aa:6e:3c:dc:52:dd:90:
d0:73:9f:e9:c7:fc:41:a0:73:2b:ee:68:1c:4d:40:5b:13:87:
98:6d:ee:22:2e:d2:0a:5c:43:01:8a:66:ea:3f:fa:e8:44:1d:
3a:f4:29:83:a4:94:61:b1:95:c0:19:72:40:6b:9f:39:d4:74:
85:b6:0c:b8:c7:ef:00:45:e6:5e:55:8c:5f:c5:79:1d:de:6f:
ba:86:30:21:97:86:fb:7d:59:d8:93:1e:a7:7f:29:a4:c2:f0:
5a:93:92:68:63:ce:bf:1a:f1:42:4b:96:f2:e9:62:3a:2f:f3:
28:82:d0:44:5f:10:b2:d7:80:4d:94:b7:63:8c:b6:0f:9d:59:
09:33:34:f3:91:6c:6b:4b:4c:a4:62:e6:a4:8d:05:84:96:0b:
01:c6:75:67:96:59:7f:ad:7e:2d:bf:76:1a:eb:3e:5f:0b:01:
b1:d2:28:28:3c:fe:97:57:9f:15:49:01:6b:8e:57:90:60:34:
bf:b4:e7:6a:ae:09:1a:87:a1:dc:90:66:33:70:33:73:57:59:
75:b6:11:3c:6d:a2:97:c1:98:4e:5c:29:e6:ff:61:ee:72:ab:
78:71:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:33 2025 by rpki-client