Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa
File: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (raw, json)
Hash identifier: FfGvWbRgw7M2d0HlF6t0whQketZeGqrQDCwVLn5jEfk=
Subject key identifier: 71:95:84:3B:75:66:A0:5E:39:DD:FA:E0:81:1B:AB:D7:51:DB:58:00
Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial: 0767
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa
Signing time: Wed 06 Nov 2024 21:19:54 +0000
ROA not before: Wed 06 Nov 2024 21:19:54 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 64073
IP address blocks: 118.67.192.0/23 maxlen: 24
118.67.194.0/23 maxlen: 24
118.67.196.0/22 maxlen: 24
202.36.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8C3
Validity
Not Before: Nov 6 21:19:54 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672bdd7a-a860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:88:39:4c:18:f2:96:1b:42:de:47:54:77:
4e:fa:de:26:6c:30:f9:7a:d7:ee:20:d5:ce:dd:c7:
1c:ee:e7:a0:93:85:57:5f:f9:00:db:84:3b:6f:ce:
22:d7:6b:0d:fd:00:43:30:4e:0f:5c:ed:a1:fb:24:
c6:70:a2:9c:0b:9f:8b:e3:64:3e:54:59:67:6c:8c:
05:76:ee:54:79:45:e5:7f:53:09:33:75:23:6d:7a:
bb:75:a8:35:88:b9:91:93:6b:06:83:a8:ea:9e:c9:
1e:c6:28:b4:b0:14:e7:bb:3c:fe:31:13:35:e2:bf:
e1:6a:2f:43:3f:df:3f:bf:2b:e0:69:71:73:de:6e:
3f:2b:8e:9d:d8:83:2d:24:41:7c:24:51:1d:35:74:
ec:47:16:82:7b:73:d1:04:51:3f:8e:c2:78:5d:19:
74:b0:18:86:67:07:ba:d1:71:d1:d2:56:6f:48:2f:
84:35:1b:78:83:c5:04:ee:47:2f:2d:ce:fc:8a:62:
ad:a3:29:f2:12:03:d2:50:fa:af:e2:bd:3d:60:0d:
68:6f:27:a6:c8:90:9c:c0:fc:c6:0e:9f:ce:e2:bb:
68:74:37:a1:a2:ec:c3:fa:b6:d6:2b:ee:91:aa:43:
7a:54:1e:31:91:d9:90:af:2c:11:02:8e:42:4b:6c:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:84:3B:75:66:A0:5E:39:DD:FA:E0:81:1B:AB:D7:51:DB:58:00
X509v3 Authority Key Identifier:
keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.67.192.0/21
202.36.209.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a3:bb:00:5b:2e:97:2f:61:a7:f8:4a:c1:50:53:aa:12:54:
bc:a3:ca:a8:33:50:0b:14:14:85:8d:48:4d:ba:d7:23:c0:75:
d5:c8:4f:f7:e5:c9:2e:b9:49:ce:65:a4:a5:45:0e:f2:a0:56:
72:35:35:99:3b:14:a1:78:5b:18:7a:39:bc:14:fa:bd:cf:88:
a2:24:1f:1f:d5:aa:b8:1b:81:0b:27:af:3a:98:29:a2:7b:ce:
6e:3b:87:fb:34:b7:4d:53:67:3b:c4:e3:c0:d5:e4:89:41:11:
f9:75:6a:f4:a0:87:01:f1:38:f8:2e:07:b0:96:3a:75:77:08:
93:3e:81:be:ac:33:11:10:97:7e:33:41:5c:51:f1:d5:78:e3:
64:11:d7:cd:60:01:45:3e:a5:93:53:c7:2f:c5:8d:12:6f:e1:
f7:50:21:ec:9e:f5:3f:7a:48:c7:54:27:b3:12:c2:11:ea:ee:
9d:55:45:11:30:51:bd:65:bf:8a:12:f1:6e:a8:e8:fd:24:c7:
3c:f4:7f:ff:b3:7b:3f:11:f4:0c:34:45:bd:b4:ae:b1:eb:e0:
3b:08:93:41:42:d7:be:04:0e:c8:1b:3a:8c:44:38:64:f0:84:
a7:62:fc:58:e8:06:81:60:c5:9c:68:25:6c:f7:b1:85:e5:97:
92:69:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:51:26 2025 by rpki-client