Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa
File: 525850829D5111EC9F57A656C4F9AE02.roa (raw, json)
Hash identifier: UPlqEQ+6yrfO8QwofkgwsJWjOy3datbbZML+kp3Ld7c=
Subject key identifier: C7:89:99:42:1F:F8:49:40:75:BD:BF:F4:A9:F2:B6:42:68:A9:AC:B7
Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Certificate serial: 089B
Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa
Signing time: Sat 28 Sep 2024 20:39:50 +0000
ROA not before: Sat 28 Sep 2024 20:39:50 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 9441
IP address blocks: 202.58.252.0/24 maxlen: 24
202.58.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174685
Validity
Not Before: Sep 28 20:39:50 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f86996-5dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:bb:f5:30:59:a0:4b:54:fd:e2:68:4a:cd:
ef:9a:13:f2:9c:ef:cb:3b:66:f9:48:32:a8:d6:f4:
d1:4c:b1:b9:1e:29:88:b3:56:4b:0f:b3:24:24:bc:
95:08:8a:36:0f:a4:ee:0c:49:7c:95:b7:7f:ba:b5:
0f:2b:69:4a:9f:5e:82:e3:4a:97:e2:bc:78:d0:5d:
ed:14:c7:2a:ec:86:85:43:be:07:4d:ec:33:90:57:
1e:68:e1:f5:8b:0c:d2:cf:d8:48:51:2f:e1:9b:1a:
a7:ab:fa:9f:9d:46:11:c3:fd:f3:17:1e:d5:73:5a:
9a:57:a5:66:4d:db:4a:9c:3a:1d:7d:4d:0e:9c:bb:
9d:3c:a5:a7:e5:74:b3:fd:b7:cc:01:28:e4:42:da:
86:12:37:f3:c2:25:41:29:52:d0:4a:67:04:24:10:
ad:9e:b6:1b:f2:32:64:3d:70:21:29:30:5f:ad:7f:
52:3c:d0:29:6d:20:ce:cb:86:ed:3c:47:ca:a4:b9:
fd:78:2f:b2:0f:e6:84:33:e6:b5:88:06:29:9a:98:
b4:16:41:d8:9a:9b:ff:44:5a:44:89:40:46:55:f6:
02:e6:73:82:4d:64:39:01:19:ca:0a:28:46:19:50:
05:0b:75:0b:7d:97:1f:ec:d1:b4:c1:ef:7c:39:79:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:99:42:1F:F8:49:40:75:BD:BF:F4:A9:F2:B6:42:68:A9:AC:B7
X509v3 Authority Key Identifier:
keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.58.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:e3:9e:c1:11:08:60:29:6b:a1:bf:91:d8:28:08:aa:60:d3:
fb:86:43:20:22:1c:6b:a1:19:04:4f:73:9d:b5:a2:f9:1d:99:
ae:5d:df:82:ae:78:1b:d2:93:a3:9a:43:4e:47:ad:14:99:7d:
fe:fd:ee:bf:b9:95:72:1d:36:aa:c6:21:74:24:7b:52:c2:ae:
e9:b8:3f:33:b2:97:0f:9c:89:b6:8c:34:a3:5a:c0:08:4a:7f:
a2:5b:7f:d4:f6:33:cc:91:f2:c4:82:33:4a:c2:d5:a3:0d:c7:
fa:42:06:1f:fd:0a:87:96:2d:1b:d7:9d:48:51:53:cd:8c:83:
93:68:84:61:b0:60:40:96:5b:02:9b:ea:b9:c1:4b:a7:bb:2f:
e0:0a:5d:d6:bc:7b:bd:93:84:47:9a:08:8b:03:53:d3:34:67:
08:ff:fd:39:6e:5d:46:a5:63:d0:55:03:8e:31:5a:0b:b5:95:
24:8e:fe:c1:be:e5:5f:21:34:81:42:06:84:06:a7:6c:ad:c0:
00:06:d4:4a:9f:73:36:73:0f:08:d0:3e:48:06:ac:c8:59:78:
25:81:45:1a:a9:c0:64:47:e9:4e:6b:86:85:e7:7a:5a:d7:fd:
61:76:e7:65:77:00:54:0d:bd:a5:9e:e2:f0:04:2b:11:16:3b:
fa:a5:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:30:38 2025 by rpki-client