Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/8BDD1204FC5211EE89D8BD86C4F9AE02.roa
File: 8BDD1204FC5211EE89D8BD86C4F9AE02.roa (raw, json)
Hash identifier: AkiCxp9N8gMV3WtYdhLNJWSezcOAW2+2oJlKVD4H2Co=
Subject key identifier: 5B:53:BF:04:9A:FB:E6:D3:00:AB:07:A7:53:88:77:B7:62:D0:26:19
Certificate issuer: /CN=A91647F5/serialNumber=579118B148E27D1571751568BA070FE1E62C7EB9
Certificate serial: 52
Authority key identifier: 57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/8BDD1204FC5211EE89D8BD86C4F9AE02.roa
Signing time: Wed 15 May 2024 08:12:39 +0000
ROA not before: Wed 15 May 2024 08:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203963
IP address blocks: 203.28.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91647F5
Validity
Not Before: May 15 08:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66446e76-f802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:c0:fd:23:bc:ce:68:1c:f8:44:cc:96:7f:
36:0d:6a:cd:73:54:a3:e4:13:ca:0c:4a:d3:fb:2f:
b4:79:6f:c2:87:45:29:30:8a:2f:bd:a1:0d:8a:70:
ea:8d:79:f6:f6:3c:84:62:ed:23:05:62:9a:5d:e1:
6d:06:16:bc:32:1c:0e:43:5e:fe:b2:bc:ba:1c:7c:
15:fe:71:01:d4:da:ef:81:e3:c6:90:08:53:f8:8b:
33:fa:e9:4f:dd:12:22:cc:b7:b9:fb:38:3e:b4:ab:
a5:47:87:56:b8:c3:41:ae:de:be:16:1a:48:50:ae:
6d:6d:b3:52:e1:2e:a8:2b:c6:1b:dc:ec:92:7d:8c:
76:d6:d5:84:02:3c:c8:b0:d7:e7:3e:8f:10:3e:8a:
c2:86:4d:2d:14:58:2e:4b:01:9f:1c:08:64:e2:89:
35:c9:af:e6:9d:7f:50:04:f9:6a:b1:12:09:2c:7f:
1e:0b:6f:a6:12:14:52:60:36:a7:3f:30:aa:26:f4:
ca:ab:bc:90:8a:84:32:e6:a7:b7:f3:c5:73:71:da:
7b:61:f0:a4:b3:d4:f3:fc:14:a2:f2:ba:bd:fa:51:
38:55:ef:0a:fb:c5:42:6e:9c:fb:75:db:4b:cf:b1:
92:2d:8f:d1:7b:83:0e:da:18:fa:9c:d4:80:88:96:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:BF:04:9A:FB:E6:D3:00:AB:07:A7:53:88:77:B7:62:D0:26:19
X509v3 Authority Key Identifier:
keyid:57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/8BDD1204FC5211EE89D8BD86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.28.216.0/22
Signature Algorithm: sha256WithRSAEncryption
99:3c:42:b4:d4:71:ec:44:09:c5:d4:c4:08:2a:49:0e:f1:bd:
32:7a:9a:6b:23:0e:fe:66:ce:de:c6:75:90:57:26:a1:69:ec:
19:1f:a7:25:06:2e:e7:73:6f:6d:8b:a6:db:18:53:b6:c9:38:
66:fe:aa:ab:d6:02:b0:e4:a2:98:c1:92:0d:51:6a:e6:2d:40:
8f:73:67:e8:66:64:78:6f:a2:c6:8f:42:62:86:a8:27:a4:24:
2b:ad:33:46:ee:54:88:c1:86:39:94:c8:73:2f:0d:d3:96:e3:
b5:67:8b:e3:1c:42:4b:a4:3f:2b:cd:53:9e:47:90:d3:64:ee:
32:06:2c:a3:3e:d5:15:40:30:a5:41:cf:7c:38:38:1a:8c:a8:
4c:62:a0:e9:bb:c2:06:dc:b5:33:db:36:35:0f:4b:06:30:bb:
a4:9d:47:f8:2b:1c:7c:95:5b:ca:9c:57:84:f6:3f:f6:33:21:
dd:3b:c1:c1:93:ff:5d:14:5b:74:79:a2:2d:1b:75:36:96:cb:
d0:2c:44:58:0b:38:1d:eb:1c:b8:26:40:f5:67:fe:83:d7:f3:
d8:ab:90:6a:f5:d4:11:a2:55:e4:77:02:76:1b:3c:01:02:f4:
1d:da:d8:05:69:3b:a5:38:ec:6c:a0:27:33:ed:34:8c:a8:76:
97:cf:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:44:28 2025 by rpki-client