Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
File: 931C5524175011EB8585CA60C4F9AE02.roa (raw, json)
Hash identifier: MDoU/JuIBzWyeNV1mWU+1cfbqy0SljZrseShx5ONDms=
Subject key identifier: 5D:EB:8D:00:CA:5F:97:4B:09:CE:9F:ED:D0:65:89:4D:47:4E:2F:E6
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 3425
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
Signing time: Thu 02 May 2024 15:30:58 +0000
ROA not before: Thu 02 May 2024 15:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18345
IP address blocks: 202.60.80.0/24 maxlen: 24
202.60.81.0/24 maxlen: 24
202.60.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13349 (0x3425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA
Validity
Not Before: May 2 15:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6633b1b2-a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:79:12:9d:30:82:3f:76:2d:a6:2b:6a:fe:
ae:e9:2d:1e:30:39:a1:8d:17:4a:ca:5c:19:09:ba:
88:77:10:90:4c:bf:7f:8d:fe:71:b5:a4:23:9f:f5:
d9:be:03:19:8e:d8:e7:61:38:91:28:a6:50:ac:2f:
d0:4c:c0:2d:92:1a:fd:12:09:be:2b:49:f1:cd:25:
c1:5f:b3:53:af:22:94:69:bf:ef:f0:0c:3f:35:21:
67:e0:26:0b:f0:ae:59:19:d8:33:32:0a:64:4c:e9:
18:5f:10:77:73:b6:33:15:65:db:ac:d0:2b:65:22:
4a:6d:41:63:51:f9:71:97:51:4a:77:25:52:a6:db:
1a:de:70:85:7d:43:bf:21:50:7f:49:8d:df:1b:12:
db:e3:5d:87:95:40:d2:3d:38:e3:0d:73:a6:ab:df:
26:11:00:dc:14:5e:48:c8:90:2f:f7:d8:ac:38:63:
5e:37:5e:c1:c2:d8:81:61:1e:7c:a0:9d:a8:17:a1:
a0:ac:82:2a:2f:11:98:1d:f1:0e:9d:6f:b7:02:a2:
10:ae:a3:56:77:cc:e3:ec:bd:61:d9:b8:87:20:de:
27:29:46:73:3c:cf:7a:f4:50:76:b7:d0:3a:99:ba:
ea:5d:6d:e4:06:5b:9f:4a:ce:8a:a1:ef:bb:c3:60:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EB:8D:00:CA:5F:97:4B:09:CE:9F:ED:D0:65:89:4D:47:4E:2F:E6
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.60.80.0-202.60.82.255
Signature Algorithm: sha256WithRSAEncryption
4d:16:6d:0c:ca:06:3b:4a:e7:2c:07:95:ac:b9:78:b9:1f:35:
74:0b:c2:d9:42:52:bc:0c:ce:72:f1:6d:aa:1c:ed:a9:7e:08:
6f:b3:12:a4:73:d4:d8:58:ed:24:86:72:2a:71:2d:3f:87:1f:
67:63:ec:5f:79:7f:65:89:2f:0e:37:dc:28:9c:20:c0:a0:67:
e3:69:4b:c0:69:c3:47:6e:f5:9b:0b:fe:5f:90:49:e5:e1:02:
9e:88:05:d3:20:f8:a6:f1:10:15:16:ab:70:7d:0b:82:59:ba:
1b:49:9f:2b:8d:16:83:42:b3:98:39:44:d3:22:a3:0c:f3:fe:
e3:ee:43:a2:57:c7:d1:45:65:30:65:2b:b4:18:77:84:22:f3:
4b:2e:37:5b:d3:ff:29:95:31:b8:e1:83:09:14:4f:c6:ee:b5:
5c:eb:98:8d:f4:be:a2:f6:03:07:d4:47:be:bb:4c:fc:c3:84:
d9:e9:af:a3:63:53:59:6a:93:b0:ba:53:67:69:64:73:92:f6:
18:cf:6c:c6:c5:07:40:b9:28:ad:b6:90:3e:fd:c2:43:e2:e5:
fe:d9:48:e0:75:0e:c7:41:a2:57:b8:f6:63:19:fc:b9:2e:03:
59:53:53:95:79:f9:ec:f6:f8:34:22:41:1d:e6:67:e7:d2:b4:
52:df:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:39:46 2025 by rpki-client