Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
File: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (raw, json)
Hash identifier: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=
Subject key identifier: 09:A5:F2:C6:4A:F8:EE:9E:9E:43:79:73:C3:B0:7C:2D:0C:85:38:E5
Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial: 02AC
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
Signing time: Mon 09 Dec 2024 00:54:12 +0000
ROA not before: Mon 09 Dec 2024 00:54:12 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 131254
IP address blocks: 202.137.224.0/24 maxlen: 24
2001:df3:9e00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199A70
Validity
Not Before: Dec 9 00:54:12 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67563fb3-4120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:19:a0:ed:fa:4a:55:6b:0f:20:d9:d1:12:
35:0c:0f:68:7d:01:38:a0:0d:51:b5:c7:fd:ad:93:
76:69:b6:68:d9:16:77:f3:0b:fa:80:af:19:d4:5f:
5b:94:b8:d9:1b:eb:d8:cc:03:0a:6f:e0:ed:85:32:
00:7b:b8:9e:89:38:87:a6:e3:9c:a3:1f:85:a8:90:
d1:c3:74:8e:d6:2b:48:c4:e2:c3:d2:be:c5:93:bd:
2f:6e:ef:cf:46:03:06:48:6d:f8:b4:e3:52:68:ed:
0b:8e:78:2a:b9:5d:e5:24:89:f8:54:ca:35:be:75:
16:d3:03:94:c2:c9:e5:e8:81:c5:92:f9:ce:5e:e9:
e3:a7:d3:9f:3c:82:c1:82:ef:da:44:69:5d:4d:2a:
13:1e:fe:d8:e9:4a:ff:71:87:89:2e:46:4f:99:35:
91:f9:c8:e9:cf:8b:29:bc:48:67:f8:72:48:75:a5:
5e:14:b5:b0:51:d3:35:e0:21:ba:84:3c:be:00:39:
9b:60:43:59:17:a1:aa:72:17:ee:47:cd:a5:12:94:
a8:ed:63:86:4c:60:0a:d6:fc:90:13:a9:55:df:a9:
15:36:54:0c:e6:25:e2:ad:ba:e6:9a:1f:19:d0:18:
8a:d1:95:e1:52:13:0c:f2:78:71:be:28:b0:5a:76:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A5:F2:C6:4A:F8:EE:9E:9E:43:79:73:C3:B0:7C:2D:0C:85:38:E5
X509v3 Authority Key Identifier:
keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.137.224.0/24
IPv6:
2001:df3:9e00::/48
Signature Algorithm: sha256WithRSAEncryption
95:76:f7:f5:67:73:b2:88:78:6e:19:13:75:43:fb:96:9b:89:
9f:e1:65:a9:e5:c8:27:15:cd:40:6c:97:f5:00:37:62:32:28:
10:9a:bc:12:fd:75:63:2d:47:a4:d7:a6:97:79:ff:48:bc:79:
4a:34:7f:88:3c:43:b0:d3:bb:3b:88:60:78:2b:1e:75:8e:99:
44:58:9a:79:03:80:cf:d9:7f:bc:e8:f2:15:d1:b9:34:11:cb:
60:21:a3:2e:5a:d9:0e:54:8d:87:6a:37:f4:b0:6e:37:1b:fb:
56:43:38:25:95:b4:39:8a:bb:83:80:2e:c0:b1:45:86:24:84:
4f:23:fc:9a:03:bd:ce:16:a1:01:f2:25:12:e1:27:ff:e1:1e:
09:69:82:a1:59:08:90:a8:ae:cf:4d:7b:14:3e:39:aa:21:b9:
3d:53:22:2e:75:5d:de:42:ce:86:09:c9:42:3a:e3:b5:62:66:
50:4f:a9:64:44:c5:cd:e4:77:0b:82:ad:4a:5b:f3:d6:e7:b6:
6c:2b:11:a0:aa:05:6d:47:7e:d6:4a:8c:20:ab:4e:80:61:f3:
2e:53:75:e8:19:2c:a0:69:26:41:21:11:fc:57:4f:41:c9:80:
ee:fa:34:91:b4:e1:f4:89:67:a6:ba:50:47:84:7f:7e:e3:65:
f7:49:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:23 2025 by rpki-client