Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa
File: 6E7D3C16816811EF99DD7787C4F9AE02.roa (raw, json)
Hash identifier: GJjFHlhUrw3PK9n6h+pqP/cBSWFV8op0nahH1r+sT6k=
Subject key identifier: E5:EA:55:CB:06:AC:74:43:26:C1:4C:A5:DB:D2:A2:F7:2D:52:A4:8E
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 55
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa
Signing time: Sat 11 Jan 2025 05:48:43 +0000
ROA not before: Sat 11 Jan 2025 05:48:43 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 38534
IP address blocks: 202.12.93.0/24 maxlen: 24
203.1.104.0/24 maxlen: 24
203.1.105.0/24 maxlen: 24
203.1.106.0/24 maxlen: 24
203.1.107.0/24 maxlen: 24
203.16.32.0/24 maxlen: 24
203.16.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A
Validity
Not Before: Jan 11 05:48:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6782063b-bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:18:69:4b:c5:55:3d:d4:d7:05:fe:9e:4c:
a9:27:0d:20:30:52:39:f9:a6:5f:14:fa:62:e0:67:
b0:5e:81:02:13:3c:d4:5c:8c:88:43:01:91:5c:07:
db:f7:50:7d:41:c9:35:8f:ab:41:46:9a:65:4d:41:
08:3c:e4:14:e8:ba:d1:ee:fa:a6:13:df:00:c2:4a:
ae:bc:85:da:63:43:cf:7e:99:d6:b2:bb:02:48:2b:
f7:db:5f:87:24:f7:3e:ab:06:68:90:ba:d7:c7:5e:
73:34:d4:40:a3:08:08:c2:35:73:26:1f:04:dd:e0:
86:85:32:62:08:a1:51:77:65:f9:99:69:e3:90:21:
5d:93:aa:10:c9:4c:eb:93:c3:f4:e0:b8:76:f6:0f:
41:73:3e:bb:c9:59:b2:ac:10:82:90:3c:95:27:b9:
c9:6a:de:e8:fc:4b:64:89:ad:5b:4b:3e:91:0f:7b:
bb:20:53:74:3c:c9:29:03:5f:21:85:2a:55:48:9d:
6b:81:b1:d5:51:ab:03:4b:5b:5f:47:27:ca:31:63:
62:9c:3a:4d:4f:17:4c:c4:3a:3c:83:0b:ec:e1:1d:
bd:e2:f1:2c:e7:25:3d:16:11:bc:48:ae:2a:48:d5:
0b:e3:b0:91:4d:f2:ee:5f:de:05:34:1a:a0:58:dc:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EA:55:CB:06:AC:74:43:26:C1:4C:A5:DB:D2:A2:F7:2D:52:A4:8E
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.93.0/24
203.1.104.0/22
203.16.32.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:97:b2:f8:99:63:71:f7:1f:e5:56:e2:fb:db:af:9a:ad:09:
0b:9a:88:78:6e:42:19:e8:dd:2f:3e:e5:4e:ae:94:c8:9a:d1:
e2:44:60:d3:07:fa:df:51:03:46:cc:69:de:7e:95:31:55:04:
d9:df:fb:f8:81:41:ce:21:82:00:80:d0:ef:77:6c:00:1c:db:
fe:c1:76:a3:25:f6:dc:b8:b8:2e:55:7b:7d:c8:da:06:db:36:
25:be:05:cb:89:ff:71:29:ce:29:74:11:b9:c0:b7:74:c8:94:
74:05:33:63:b3:63:b2:56:c5:82:5a:82:b3:bb:54:36:c6:41:
86:46:70:6a:e9:8b:21:22:c2:20:f4:b4:28:3b:cc:83:17:c4:
53:42:5f:51:03:87:84:83:79:bd:a9:2f:ee:c2:2a:1b:b6:e9:
f6:2b:90:a9:b9:ab:58:a2:8a:5f:bd:5d:96:ba:00:40:e0:b2:
bb:f2:86:1b:69:bc:00:3c:f8:1f:78:3d:75:c0:b2:f2:9b:2d:
d1:e7:b1:44:9d:56:97:6d:ee:6d:09:30:16:b0:c1:c1:5b:cc:
48:23:4b:b0:2b:80:ae:a3:0a:d3:d7:76:e3:73:a4:8d:47:ed:
f0:54:4a:20:15:4c:fb:07:e3:d4:7d:36:92:91:41:bb:58:31:
28:8b:86:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:33:19 2025 by rpki-client