Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa
File: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier: nCFG+bk+dqsOuGFESr8+Ya9a1BnYrZYntqhV2PYzrJ0=
Subject key identifier: 7B:61:30:22:96:1C:19:CC:21:D5:CF:2B:02:94:74:17:BB:4D:7C:CE
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 34D4
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa
Signing time: Mon 22 Jul 2024 14:40:16 +0000
ROA not before: Mon 22 Jul 2024 14:40:16 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 133376
IP address blocks: 203.209.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13524 (0x34d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA
Validity
Not Before: Jul 22 14:40:16 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=669e6f50-3b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:72:ce:0c:2d:44:3b:84:d8:ba:5e:ed:97:
fe:c2:35:b8:a6:68:bb:6e:58:4e:90:91:31:ed:5d:
2a:28:fd:7b:a9:5c:1c:05:22:46:8c:c3:d5:69:eb:
50:80:50:f6:aa:67:c0:57:31:f9:1e:7d:7e:73:08:
a3:37:88:f9:27:e6:4a:43:57:bb:1b:8c:1e:83:71:
73:8d:90:63:d7:90:2f:b5:ab:40:9f:b2:9d:a5:8c:
f6:a9:40:ba:ed:a1:eb:56:7d:df:f9:e9:e4:e5:14:
57:60:51:e4:99:2f:d3:2a:ae:57:9e:21:78:ce:56:
c6:f8:25:62:55:db:54:95:e6:b4:b0:45:5f:32:b3:
f4:30:3b:81:cc:30:73:89:6e:69:6d:d4:9d:19:4e:
f1:94:54:b6:34:3b:1e:6f:e8:9d:69:b8:ee:ad:0b:
1e:e6:01:b5:3a:f9:37:32:a6:7a:04:92:3c:7d:e6:
9c:1d:80:eb:45:5b:0e:8b:76:d1:2a:9b:4b:a5:20:
9c:44:e4:5a:9c:0c:19:e3:47:e6:2c:42:f4:7b:64:
a0:f1:4c:23:4b:f4:4d:15:54:fd:df:dd:8b:6b:96:
0a:f9:4f:b3:07:af:da:50:cd:31:4d:1f:af:76:fb:
ab:aa:1f:ea:70:7d:e1:3a:23:43:fc:e6:00:9f:1a:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:61:30:22:96:1C:19:CC:21:D5:CF:2B:02:94:74:17:BB:4D:7C:CE
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.209.121.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5d:06:1b:d7:0b:26:1d:4a:8c:2f:cb:e5:b8:1c:5f:0d:fc:
fb:83:13:08:1b:e5:30:7c:79:9a:81:0d:b3:05:3e:f0:13:11:
da:77:7c:a1:20:85:39:74:f5:54:c6:e3:16:42:9b:44:2a:fa:
0b:3e:8a:fd:6d:30:1c:d0:0f:a4:07:28:8f:42:c6:79:88:5d:
bb:c9:24:94:b0:87:52:8f:50:a7:05:34:0a:96:21:df:ce:25:
3a:01:ce:2e:f2:f4:ee:25:a5:9b:8c:39:ad:8a:2f:09:ba:ac:
12:38:cb:21:c6:2e:28:f3:0b:bb:85:f1:ff:54:ad:f4:7b:24:
0a:57:ab:26:72:ed:12:04:6c:3c:30:00:95:0f:3a:67:6d:e9:
95:93:25:3a:0c:86:58:6d:02:93:07:a7:ec:d7:c2:29:17:59:
e4:d7:a7:61:66:0d:6e:93:2a:99:78:34:fe:8c:74:4f:16:01:
63:cf:40:18:88:ce:61:f2:99:54:c4:79:70:85:05:ea:1a:4d:
ac:e2:1e:4c:a0:a2:91:29:6b:63:04:a9:79:66:47:4d:8d:2f:
ea:74:d7:a7:7e:db:f0:4c:10:39:17:7e:30:ee:30:7b:b1:b1:
f9:30:69:ba:77:d4:32:22:3e:3c:12:e1:c0:b1:e9:f7:ba:55:
56:12:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:25:18 2025 by rpki-client