Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F41921E6721311EFA9D7CA3AC4F9AE02.roa
File: F41921E6721311EFA9D7CA3AC4F9AE02.roa (raw, json)
Hash identifier: ouq0s0gfUBMWKxuhdozFKAxQEQkB9beYNjd4Qbsfb/E=
Subject key identifier: BC:BC:BF:5B:53:E7:18:8A:FE:99:18:68:51:1D:74:B1:0B:5B:00:22
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: BA
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F41921E6721311EFA9D7CA3AC4F9AE02.roa
Signing time: Sat 21 Dec 2024 05:50:01 +0000
ROA not before: Sat 21 Dec 2024 05:50:01 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150410
IP address blocks: 202.29.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2
Validity
Not Before: Dec 21 05:50:01 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67665708-faf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:09:16:0c:f4:7c:17:fd:77:66:ad:fe:17:
de:8b:30:69:9d:c1:59:34:3f:7e:c1:0e:87:12:8c:
0a:c6:8c:ea:ea:c6:4a:ca:a4:f2:ea:fe:af:63:0c:
c5:ed:6d:eb:48:a5:9a:51:ae:71:dc:73:75:aa:34:
42:98:be:d5:93:eb:c5:f9:86:42:6d:cd:e9:fb:3a:
85:6e:3f:f8:8c:78:88:32:2e:27:91:05:b9:17:92:
71:3e:1f:6a:6a:b9:89:7a:79:30:b7:b6:8f:fc:46:
9d:a4:6d:88:a4:80:6b:ca:89:87:40:72:8a:b9:07:
f3:58:29:a1:da:7a:9b:cb:66:47:5b:e6:d7:72:54:
4b:b6:38:20:06:ea:f3:ad:b4:ee:4d:ef:64:4a:ad:
34:95:df:f4:a8:e0:e1:56:2e:3d:16:6b:d6:c2:02:
4c:84:90:c6:cb:aa:7d:e0:06:6f:48:34:ab:cd:00:
63:98:e0:d2:9e:a0:2c:b4:41:de:6c:01:38:bf:82:
5c:1e:5e:c3:ef:13:24:9f:ce:66:43:63:7d:5d:cc:
a8:09:2e:b5:cb:26:c9:d0:e6:5c:9e:81:2b:3b:70:
5e:e3:a8:b2:6b:da:46:29:d1:53:cb:66:e4:00:2f:
a8:50:eb:1b:b2:f9:a0:97:3f:42:eb:7a:3e:14:33:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:BF:5B:53:E7:18:8A:FE:99:18:68:51:1D:74:B1:0B:5B:00:22
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F41921E6721311EFA9D7CA3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.29.93.0/24
Signature Algorithm: sha256WithRSAEncryption
07:89:32:b4:2b:38:d5:78:9f:f7:30:14:73:d3:2d:a3:b3:1f:
77:e8:ce:83:ab:95:47:e6:e2:70:fe:60:e1:34:0b:da:1c:4a:
75:75:83:1b:09:e6:ea:0a:27:f5:50:c6:06:0f:9a:5d:2e:77:
c3:41:3a:d9:e0:72:d4:8e:fa:92:a2:26:95:a5:8d:c9:1b:c3:
b4:06:e1:93:84:85:e4:f4:57:9b:13:01:d2:d7:da:95:e7:ff:
5d:83:7f:e3:fe:d1:bb:1e:fb:ea:18:2a:c7:1d:bd:72:05:2c:
2e:38:a5:3b:f1:e7:d3:55:95:93:01:0d:01:2f:b9:5f:35:7c:
59:93:31:3c:a6:6e:89:6c:53:de:7e:b0:fa:7f:c9:d8:b2:2a:
45:ee:5d:36:ba:88:ed:a1:8b:86:6d:d4:a2:5b:79:40:31:2a:
e4:19:78:2a:06:12:0c:a9:3a:4a:ac:40:48:9d:a3:42:16:bd:
92:65:4a:59:0b:c6:a7:b2:e6:f7:cf:31:d7:de:e6:c5:9a:87:
bd:ac:6c:77:ba:39:1c:1b:b3:31:d0:06:89:82:b9:9f:bd:b1:
c2:2c:2f:ca:f5:cb:af:c7:7e:76:c4:05:b6:4a:84:68:40:f5:
08:1b:f8:f8:80:70:bc:f1:b8:4b:1f:57:69:f7:2b:7c:6d:d5:
2f:72:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:51:28 2025 by rpki-client