Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/8941689CB44911EA92F1F886C4F9AE02.roa
File: 8941689CB44911EA92F1F886C4F9AE02.roa (raw, json)
Hash identifier: 4Z25oEXKd2i0RXY7kF9Yj9e1Ufs0rVahsGX9EeBSaFg=
Subject key identifier: CF:19:D8:73:84:6D:14:71:17:8D:6B:57:9C:93:2C:8C:B9:76:80:3D
Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial: 0BAC
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/8941689CB44911EA92F1F886C4F9AE02.roa
Signing time: Thu 31 Oct 2024 15:21:02 +0000
ROA not before: Thu 31 Oct 2024 15:21:02 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 134692
IP address blocks: 202.50.0.0/23 maxlen: 24
202.50.4.0/23 maxlen: 23
202.50.5.0/24 maxlen: 24
202.50.10.0/23 maxlen: 23
202.50.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988 (0xbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49
Validity
Not Before: Oct 31 15:21:02 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6723a05e-bdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:07:af:98:0a:7b:e2:90:9a:66:44:5f:80:
7d:82:8d:22:98:c4:d5:a1:bf:9c:a3:61:30:0f:cd:
ea:ad:6e:f3:53:be:80:27:db:01:73:8e:12:60:d3:
8d:cd:4d:c0:83:9e:21:a7:53:7b:cf:d9:08:89:a5:
f0:61:e1:4d:e0:9e:31:7c:cc:c3:34:48:01:da:9e:
17:c6:02:1e:f5:89:27:56:e1:14:87:a6:06:09:3c:
b8:40:6f:4c:7f:87:90:2c:98:da:48:3a:24:01:64:
1d:ca:29:81:d1:53:94:3e:c1:4c:55:a0:ad:b0:86:
9b:4b:34:a2:a5:b6:08:2d:39:5c:1f:50:80:ab:61:
d9:e5:1d:e2:70:09:be:ed:bd:9f:a2:35:af:cb:e4:
ad:28:1b:75:17:95:2b:c9:75:83:3e:07:01:85:0f:
9f:e4:db:50:64:fb:82:7f:eb:b9:b6:87:f9:31:f6:
44:86:48:97:f6:1d:99:a8:1e:28:35:6e:f6:c5:46:
e2:8c:6b:e4:d1:de:9b:9e:7c:f4:33:55:06:26:c7:
6f:70:3b:af:06:89:04:c4:3f:37:ef:da:e1:f4:95:
09:5a:12:13:be:d9:c9:23:78:72:7f:8c:c8:2f:20:
9d:5d:cd:04:c0:5a:ea:27:07:e9:66:70:c0:e1:9a:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:19:D8:73:84:6D:14:71:17:8D:6B:57:9C:93:2C:8C:B9:76:80:3D
X509v3 Authority Key Identifier:
keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/8941689CB44911EA92F1F886C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.50.0.0/23
202.50.4.0/23
202.50.10.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:6d:7f:73:b5:3f:13:23:19:06:97:43:19:57:bc:7e:9b:59:
1e:e3:4e:79:7a:56:ea:fd:a8:5d:3f:01:51:7e:4d:60:81:d7:
88:9e:96:c5:4b:fc:67:58:d8:12:0f:bc:63:64:26:99:34:5f:
43:85:6a:b0:eb:25:3a:8e:8a:a5:d2:0f:a0:4f:a6:91:2b:54:
41:93:0a:8a:01:95:fe:ff:8d:b2:49:06:53:ca:8e:b9:5e:e4:
9f:67:b9:da:fd:00:ab:fd:67:1e:dd:f0:5d:48:8a:f6:0c:a8:
8e:16:ae:d7:64:ae:7f:69:a2:a6:18:ff:ed:6b:98:09:27:1e:
22:4e:ec:88:5a:d4:5e:94:58:50:1d:81:85:15:bf:c0:41:a7:
9a:ef:c6:f6:60:ef:63:86:e0:bc:95:b2:60:5e:6e:3b:a3:d7:
a3:99:95:89:cd:fd:ab:c6:03:48:71:8e:a2:4c:e5:bf:d3:e5:
a5:e9:8c:37:e4:56:8c:86:40:62:8d:f3:df:35:b0:74:93:0a:
17:d3:4f:41:66:d5:2f:a6:58:9b:24:ae:1a:ec:e5:28:69:7c:
2e:81:d9:84:c9:63:be:28:d4:64:f0:a5:fd:45:45:7d:8e:ce:
6d:47:62:71:c3:2c:98:e0:5f:98:98:a3:b0:20:1e:79:21:eb:
18:05:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:07:30 2025 by rpki-client