Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/DC4CF7C4BECE11EA9F27811CC4F9AE02.roa
File: DC4CF7C4BECE11EA9F27811CC4F9AE02.roa (raw, json)
Hash identifier: EOIU3SGjaG3yoWQkMK90rrbkd5uHcov0oh9wII9VG+A=
Subject key identifier: 08:28:38:FD:3C:DC:C4:5F:DE:0C:B4:87:B6:B5:B2:9A:29:14:9C:1C
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 3406
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/DC4CF7C4BECE11EA9F27811CC4F9AE02.roa
Signing time: Mon 22 Apr 2024 14:50:47 +0000
ROA not before: Mon 22 Apr 2024 14:50:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38015
IP address blocks: 120.29.232.0/23 maxlen: 24
123.242.248.0/22 maxlen: 22
203.189.176.0/23 maxlen: 24
203.189.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13318 (0x3406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770
Validity
Not Before: Apr 22 14:50:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66267947-d7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:a0:f9:67:9d:b6:98:6e:60:b1:57:ea:5d:
33:8b:f9:73:28:36:5c:ec:c0:84:a3:6c:3f:67:1a:
a2:e6:58:e6:44:24:dd:a0:6a:65:3f:e7:1e:a5:2f:
a5:55:93:c6:de:5d:19:e2:4f:c2:09:41:b1:7f:ad:
d3:94:3f:22:da:d7:50:81:e2:dc:b4:09:49:cf:d8:
a8:e5:b6:65:13:f9:a9:e9:82:22:06:51:a9:fd:9f:
f8:51:2f:6a:dc:43:20:0f:52:a3:3c:78:9c:4d:a3:
b8:38:69:28:67:28:51:45:e0:25:0c:4a:33:23:c1:
23:d9:c8:f9:63:eb:c9:06:cb:7c:c3:ca:09:26:99:
6b:2b:8d:9b:fd:e7:32:87:0e:53:a8:7e:bd:24:c1:
c5:49:1f:8a:7e:10:76:c3:3e:5e:03:bc:52:7f:48:
63:e6:2d:8f:9a:7a:29:95:52:07:6b:96:70:c2:7b:
cd:19:e5:1c:a7:82:89:ab:d7:b0:0e:e1:36:3f:7b:
16:99:ba:93:2f:f6:e4:28:2f:d7:92:f2:43:c8:07:
fc:54:ef:95:88:98:31:bd:73:6c:21:48:ae:75:11:
7e:3d:c8:06:82:6d:12:53:da:d8:90:79:30:77:13:
9b:0e:90:c0:ed:2b:25:d7:59:b0:62:13:af:32:47:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:28:38:FD:3C:DC:C4:5F:DE:0C:B4:87:B6:B5:B2:9A:29:14:9C:1C
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/DC4CF7C4BECE11EA9F27811CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.232.0/23
123.242.248.0/22
203.189.176.0/22
Signature Algorithm: sha256WithRSAEncryption
84:4f:6d:d2:f0:3b:46:d3:e4:d9:87:7f:0c:32:4d:00:b4:02:
7b:dc:18:97:19:4b:f4:7b:01:f0:47:06:a2:13:4a:f7:f4:fc:
14:3f:af:16:52:7e:35:b6:69:35:58:75:de:8f:ea:5f:ec:43:
4f:0b:65:d4:c5:e7:f8:e8:ca:9c:a5:9d:1b:bd:52:1e:59:ce:
78:28:3e:d2:c1:82:f8:ee:4f:4d:55:49:a2:18:af:f4:f3:b7:
aa:cd:fb:94:f7:4f:63:36:37:95:f4:50:ae:5b:f9:10:64:d8:
7f:a4:5f:ea:6b:59:1e:8b:cf:c0:df:77:1e:79:5c:53:00:c6:
8c:53:be:f1:29:0f:5f:51:03:75:20:82:d1:b2:1a:7e:65:14:
8d:38:82:65:90:e4:c8:f0:ed:4f:c8:22:92:f4:cf:5c:33:3c:
6e:28:8c:36:18:65:d2:88:16:09:56:b6:33:28:ea:63:b1:2f:
e4:1f:ac:82:90:26:de:94:aa:fc:68:d8:f8:3f:29:b2:7d:5b:
33:cd:4f:4b:26:81:97:ce:1b:48:32:da:e9:18:79:5e:13:a9:
8c:20:18:60:1e:53:70:a0:5e:29:74:ec:74:6b:18:da:ad:3a:
c5:a0:b0:f2:6f:64:8e:86:62:18:d6:7c:43:f5:67:92:bc:ba:
18:d5:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:38:51 2025 by rpki-client