Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
File: F7078BC4B73511EF8537DE81C4F9AE02.roa (raw, json)
Hash identifier: e90+mjyZj2zuwbEyBzLynR/xbGV19fXGWIy1lxomBoA=
Subject key identifier: B9:32:B2:3F:3C:26:2C:EA:0B:93:8C:CC:1C:D4:C4:56:3E:98:8B:60
Certificate issuer: /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial: 0C
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
Signing time: Tue 10 Dec 2024 20:33:08 +0000
ROA not before: Tue 10 Dec 2024 20:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23921
IP address blocks: 202.38.157.0/24 maxlen: 24
203.31.183.0/24 maxlen: 24
203.92.27.0/24 maxlen: 24
203.190.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91394E7
Validity
Not Before: Dec 10 20:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6758a584-b717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:5a:51:ac:79:94:da:eb:d2:18:09:99:9b:
4c:8d:fa:9f:a1:26:bf:9c:77:24:ae:db:4a:0f:ab:
05:17:d4:4d:e0:77:42:27:ec:88:2e:db:92:2f:01:
ee:1c:32:a6:50:40:a7:36:79:c9:43:0f:ed:04:f9:
4b:f5:73:1b:3c:b1:a7:01:23:be:2a:f5:bd:18:6a:
c6:ff:6c:8d:8e:b6:50:4f:f7:4e:a3:b0:36:a8:3c:
d2:50:fd:1a:66:8d:ea:5b:23:38:6c:35:8b:f3:3f:
4f:55:ac:f0:59:c4:7e:7a:41:2a:47:74:9e:d9:58:
e3:ba:00:13:92:7d:36:1b:b4:d6:5b:4e:ae:47:6d:
76:e9:d3:62:21:80:08:73:8e:c2:bc:c6:26:79:97:
4a:15:4c:38:e1:c4:8c:9f:88:1c:82:ac:be:4a:97:
64:f9:b0:97:9e:35:02:df:73:50:83:68:72:9b:4f:
08:9c:61:45:eb:75:85:fd:3d:09:da:a1:ca:2d:3c:
8b:db:17:52:35:d9:9b:58:57:3f:fa:3e:7c:ca:2c:
d9:b0:6e:9c:59:64:d3:73:26:df:4b:e6:2a:b0:f2:
92:da:53:8f:83:ec:1d:96:a6:76:39:4f:12:22:26:
ba:c4:0c:22:c8:ad:2d:00:0d:74:3e:c6:33:ef:f6:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:B2:3F:3C:26:2C:EA:0B:93:8C:CC:1C:D4:C4:56:3E:98:8B:60
X509v3 Authority Key Identifier:
keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.38.157.0/24
203.31.183.0/24
203.92.27.0/24
203.190.25.0/24
Signature Algorithm: sha256WithRSAEncryption
16:bb:45:a9:6e:c1:69:1e:67:97:39:0f:cd:01:4c:16:bb:4d:
d3:f4:ed:b1:9b:8d:89:f0:f9:55:73:d7:df:b8:5d:4f:1a:03:
9d:22:7d:c5:d0:54:7c:21:96:ed:7e:24:7d:94:b4:7c:50:b6:
90:11:e3:0d:37:22:c1:ee:de:fb:60:c3:ac:a7:f7:63:32:51:
1e:2f:ad:2c:b9:94:a5:03:54:cd:a2:35:a5:60:37:84:36:98:
71:7b:12:e9:f2:19:43:57:ce:a4:ba:09:22:85:0a:2c:4e:e6:
ed:56:3f:f0:fc:1f:b5:b3:23:6f:b2:95:98:0b:9d:c9:7d:4d:
18:5c:d7:23:f3:d0:84:2f:14:dc:4c:57:bc:03:94:38:a4:2d:
2e:b4:57:d4:e8:bf:5c:af:b3:ed:1c:97:53:74:37:1f:b2:fa:
b1:08:f5:b9:48:72:8a:f3:d1:0e:04:79:22:91:b4:0e:14:27:
e1:79:b8:ce:30:23:51:1b:6d:93:0a:c4:c7:93:98:de:ca:c3:
64:70:0a:ca:9f:6a:b9:ce:a9:fd:66:60:3c:46:5f:16:29:be:
ce:e9:28:06:6d:e9:95:9c:9f:86:37:80:f3:35:4f:55:84:c3:
1f:b4:d1:ef:00:48:f2:16:ba:37:f0:55:3a:7c:6f:f3:c7:9b:
9c:97:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:04:27 2025 by rpki-client