Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa
File: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (raw, json)
Hash identifier: 4wWkALarNhzIV0d1ZybqQK8tC375NaVcRuBFdReJXsc=
Subject key identifier: 3C:28:F2:3D:36:DC:EF:0F:F7:26:43:7D:45:25:21:3C:2A:B3:11:9F
Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial: 05BC
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa
Signing time: Thu 23 May 2024 00:34:00 +0000
ROA not before: Thu 23 May 2024 00:34:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 56186
IP address blocks: 43.245.240.0/22 maxlen: 23
103.13.8.0/22 maxlen: 22
202.3.80.0/21 maxlen: 21
202.92.216.0/21 maxlen: 21
202.92.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1468 (0x5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91673ED
Validity
Not Before: May 23 00:34:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=664e8ef7-fe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:bb:85:86:54:b8:3e:77:15:1e:33:e1:34:
ec:7a:00:f6:2e:26:18:c4:99:db:b1:72:2e:e8:c1:
3d:12:da:5d:00:2e:2c:19:5c:f2:f2:81:e7:00:75:
8e:c8:46:8b:81:db:82:aa:5e:82:58:c1:a6:cc:cb:
84:21:94:91:84:7f:d9:e5:98:d2:92:a8:fe:17:11:
cc:97:67:e9:67:a1:ba:42:af:7a:90:a4:56:a0:8b:
4d:24:05:47:98:4b:7a:96:f9:1a:21:e1:77:4b:ca:
41:29:4e:d8:53:4c:50:9a:7d:90:4f:ae:c4:70:cd:
d4:6f:93:63:48:89:9f:78:c6:b9:60:b4:01:79:47:
92:8a:1b:77:b1:ea:f0:8a:38:ee:f9:79:b0:2b:b0:
e7:aa:3d:1b:64:3e:40:bc:64:55:c2:d7:a4:66:22:
16:ec:d8:25:1a:a7:b6:48:dc:d0:00:bc:95:40:b2:
f8:95:f6:51:8b:d6:f4:df:d9:fe:e3:cc:20:dd:6d:
a8:64:03:93:e4:a7:85:39:61:43:bd:92:60:33:de:
c1:9d:96:af:2e:e4:26:06:6b:f5:2f:5d:9b:85:74:
72:20:bb:da:c0:20:5f:c0:77:06:9a:37:0d:4e:b9:
c0:42:1f:8f:20:83:2b:c7:af:bd:9e:34:29:17:49:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:F2:3D:36:DC:EF:0F:F7:26:43:7D:45:25:21:3C:2A:B3:11:9F
X509v3 Authority Key Identifier:
keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.240.0/22
103.13.8.0/22
202.3.80.0/21
202.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
57:bd:e4:79:fd:b5:0c:06:ac:34:6f:db:59:f1:2c:f8:e1:41:
9c:9f:03:5d:7e:2a:aa:89:6f:5f:d6:7b:1a:aa:3b:c6:57:e5:
47:68:1f:14:1e:ec:de:b4:b9:f0:06:00:f9:1b:8c:0d:7b:86:
9b:d6:62:54:64:2a:19:b3:fc:50:86:12:b7:ee:08:97:58:30:
4a:78:30:fd:25:a2:5e:26:4a:1b:b7:8c:af:4e:be:53:c3:9d:
8a:ab:a6:bc:58:39:ac:0f:a2:cf:6c:fe:66:fa:e3:1f:5a:11:
3e:f2:cd:13:f9:77:80:29:5e:39:24:75:45:f3:b1:e0:66:af:
d2:bc:ae:3b:a0:02:8e:9e:e9:72:00:e2:4f:15:6d:82:65:89:
d6:cd:a7:12:83:b5:70:8d:97:2d:d1:3b:70:41:67:99:d9:68:
fd:b1:4a:38:14:e0:c0:62:23:1e:2d:52:e9:67:56:bb:d7:27:
e5:1c:e6:63:7a:2d:82:e1:41:bb:40:be:be:8d:ea:97:29:16:
f7:7a:7a:7e:2b:19:e6:dc:54:47:d4:d5:87:bd:3f:8c:65:1c:
31:c4:1d:de:15:e1:25:c1:90:24:1b:61:28:f3:18:f2:05:cd:
b6:83:f7:1c:49:d5:6e:13:de:8d:9e:86:ac:dc:30:2c:b2:c3:
46:fb:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:27 2025 by rpki-client