Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/08990BC0084E11EF89D29620C4F9AE02.roa
File: 08990BC0084E11EF89D29620C4F9AE02.roa (raw, json)
Hash identifier: i1fkph3atVfnVEbnt9xSvvG/cUJYGzp+on9uV8ITB20=
Subject key identifier: 08:71:2A:E5:C2:DB:7D:F2:E0:E4:44:12:55:D4:37:83:B0:18:48:DC
Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Certificate serial: 04AD
Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/08990BC0084E11EF89D29620C4F9AE02.roa
Signing time: Thu 02 May 2024 06:34:32 +0000
ROA not before: Thu 02 May 2024 06:34:32 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 45270
IP address blocks: 223.25.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Validity
Not Before: May 2 06:34:32 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=663333f7-bed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:77:ee:52:85:61:0a:0d:d9:2d:ed:5e:f8:
89:71:37:40:ed:3b:0b:2b:a2:aa:52:a8:ee:56:69:
77:d4:27:4e:9a:d3:51:9f:ec:5d:a0:b4:50:0e:2f:
ea:7e:6a:f0:bf:29:ac:c6:4d:3b:bf:8e:10:b8:48:
76:03:f1:95:19:33:97:f5:4e:3d:9a:80:11:d6:5b:
85:9b:7f:54:ed:49:37:47:f9:c8:90:f9:c4:4a:df:
ce:e8:5d:5f:d1:4e:06:fc:42:3d:3b:29:a7:6b:15:
4d:2a:77:a3:0d:12:6f:39:af:1b:70:62:fb:ff:b2:
ec:18:f8:44:b6:c2:c7:d1:ac:cc:e6:37:ff:46:92:
a5:fe:94:1e:6e:26:b2:39:ee:1e:bc:70:b6:a1:94:
13:63:8c:79:b2:5c:27:e6:84:e3:cb:d7:21:56:dd:
4f:f6:a0:9c:08:59:59:95:6b:a3:4f:94:24:aa:ec:
fb:49:87:13:e7:c2:88:8f:2d:3f:5c:f0:12:c7:cd:
88:2d:9e:d5:37:87:2e:96:64:a8:4c:5f:5a:29:5f:
3d:f5:61:09:71:31:ea:dd:8c:9d:15:cc:4c:f0:fa:
68:5a:ee:ae:f3:bd:6e:d5:52:37:63:37:5d:59:de:
7d:df:bf:b2:07:df:45:0b:d3:38:47:29:c2:4e:a3:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:71:2A:E5:C2:DB:7D:F2:E0:E4:44:12:55:D4:37:83:B0:18:48:DC
X509v3 Authority Key Identifier:
keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/08990BC0084E11EF89D29620C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.25.224.0/22
Signature Algorithm: sha256WithRSAEncryption
32:91:ff:db:a3:9b:7a:ec:d0:ef:f7:69:87:f7:94:aa:e8:dc:
1c:8f:a0:34:97:b5:de:35:6b:d9:23:df:33:39:29:30:26:70:
b4:e0:b2:eb:bd:45:ee:43:c7:55:4e:8e:ee:78:8c:36:70:67:
3e:54:cb:b3:57:d0:f5:c9:10:61:0b:ff:78:ec:48:06:be:47:
a5:76:d6:41:54:4e:d8:fb:f0:24:71:2f:63:77:26:bd:99:94:
e9:f3:38:bd:ed:d7:52:b3:0c:76:46:f6:41:41:67:55:a1:12:
46:93:87:eb:c1:91:01:5b:aa:b6:32:d4:13:e7:e6:01:8a:bc:
3b:7f:39:a5:92:57:ba:32:02:d9:53:70:42:ad:3e:b9:24:ec:
25:ec:55:5e:75:7d:7a:bb:c4:3c:93:dc:9e:45:55:ee:41:35:
94:a4:94:88:db:0f:95:39:1c:11:4d:58:c2:20:d5:da:27:17:
35:b7:d5:79:b8:90:cd:e4:69:fd:a6:b9:19:36:f5:d5:7b:16:
2e:59:df:05:bc:5d:30:40:cd:b2:28:51:40:07:2f:8f:f9:65:
f7:b2:2c:92:2f:b6:80:68:c2:1e:36:36:e5:15:00:29:89:f2:
f1:86:80:c5:a2:46:f3:ec:32:bc:34:7a:dd:20:79:d4:ce:6d:
61:36:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:51 2025 by rpki-client