Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/FD6286EA22B611EFBF5D3960C4F9AE02.roa
File: FD6286EA22B611EFBF5D3960C4F9AE02.roa (raw, json)
Hash identifier: OT9nmfEqQIusq5e8dp/kCIgj5rUezQlTB68c6LVcxWs=
Subject key identifier: 05:0C:CB:ED:E9:4C:3B:FE:24:69:E0:81:D5:B5:2A:2D:E6:F3:08:FC
Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial: 2C
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/FD6286EA22B611EFBF5D3960C4F9AE02.roa
Signing time: Tue 04 Jun 2024 21:11:20 +0000
ROA not before: Tue 04 Jun 2024 21:11:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 203.26.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B8D0
Validity
Not Before: Jun 4 21:11:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=665f82f8-7772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:01:fb:b1:df:0e:e4:3c:73:7e:d5:30:f5:
41:33:01:87:9e:35:6e:3c:c7:63:43:6e:3b:cd:81:
e1:f3:23:b8:ff:e5:46:19:42:d4:76:9f:fc:ef:3c:
48:2f:b4:b2:85:de:ee:29:bc:f7:c0:d7:05:86:28:
5c:ea:b5:a2:bb:11:db:ef:f8:59:8b:d6:5f:05:00:
4f:aa:ec:c7:9a:06:41:6b:94:75:67:c9:23:3b:76:
60:02:39:51:48:19:10:ff:c1:62:5f:35:21:8f:99:
8b:d4:01:57:bc:b8:e7:57:77:e7:a6:2d:d7:01:2e:
06:19:1b:e3:b2:2d:72:7c:bb:88:24:13:01:e9:fa:
25:90:aa:46:e8:d9:30:62:cc:9e:66:14:c6:39:ff:
07:9d:9f:e0:5c:73:9e:9f:12:30:69:e7:d2:ed:0c:
60:4f:2f:8b:4a:0e:6d:8c:33:ef:c8:b6:1d:e9:05:
91:a0:ad:a3:0a:1b:f6:b6:f7:52:70:59:69:8b:db:
c1:d5:6e:7b:0e:0b:1a:eb:cc:e1:2b:55:67:0a:7a:
1f:c7:fd:11:6f:10:d1:3d:d4:85:0d:24:5d:58:a6:
87:01:b3:95:a0:cf:ba:2a:47:c2:66:73:96:e0:e5:
1f:0f:95:d6:e2:b5:12:7b:ab:56:40:bc:be:24:ef:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0C:CB:ED:E9:4C:3B:FE:24:69:E0:81:D5:B5:2A:2D:E6:F3:08:FC
X509v3 Authority Key Identifier:
keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/FD6286EA22B611EFBF5D3960C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.26.150.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2d:e7:60:90:d9:f6:e6:82:9c:66:02:44:d8:a0:91:10:fa:
9f:76:d1:2d:89:b1:5f:6f:47:8a:3c:90:96:04:3e:7c:77:4c:
49:26:61:95:05:50:fe:71:ae:b1:4b:56:4d:cc:7b:7d:be:d8:
8c:d4:82:c9:4f:36:5f:95:bb:ba:1b:a6:a2:f0:34:c7:9d:5a:
b9:9d:0f:be:28:5a:e4:37:dd:7e:33:59:54:a3:de:c4:21:f4:
26:43:b9:69:ae:99:e0:72:c5:6d:38:8d:26:39:56:43:12:01:
bc:b8:47:9d:98:49:b2:fc:51:7d:20:d9:47:4e:12:75:fb:cb:
97:e2:24:62:de:13:14:65:f8:d7:49:fe:51:98:26:5b:74:1c:
3a:da:37:e2:57:43:43:62:96:8b:46:70:6d:bc:72:75:00:71:
95:70:91:cc:72:93:15:54:87:43:74:88:a5:06:dd:e5:fc:30:
3d:3c:dd:cb:6b:a4:47:ed:f6:73:d2:45:02:fd:9f:ce:8c:53:
74:4c:ae:0b:31:c4:43:43:6b:8f:0d:89:ea:ca:b3:78:7e:b3:
ae:f0:f2:50:83:13:65:c6:b9:18:e5:65:4f:65:c5:2c:78:c7:
1a:bf:52:5f:f6:f8:8d:00:3b:e5:17:72:1b:4c:06:7b:db:bc:
0a:18:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:16:29 2025 by rpki-client