Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/87A6A0A2ECC911EF8304FC49C4F9AE02.roa
File: 87A6A0A2ECC911EF8304FC49C4F9AE02.roa (raw, json)
Hash identifier: IEzMpoKtI4ved8IKiobP4YPxAakxf8jh3wDGqx3HmlA=
Subject key identifier: CF:89:96:08:A8:71:57:FD:49:99:B8:43:18:10:78:5F:C5:5F:07:B9
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 01E6
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/87A6A0A2ECC911EF8304FC49C4F9AE02.roa
Signing time: Mon 17 Feb 2025 00:52:58 +0000
ROA not before: Mon 17 Feb 2025 00:52:58 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.134.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550
Validity
Not Before: Feb 17 00:52:58 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67b2886a-3554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:1b:27:92:df:51:9d:7d:2f:3e:3f:f9:32:
70:54:85:30:21:07:6a:cc:79:08:e0:bf:2b:88:a4:
e2:6b:b2:52:bf:04:fe:2d:e6:8e:f1:90:a3:69:c8:
6a:fc:10:87:0a:ad:68:fd:c6:79:2e:91:95:b4:db:
e1:9d:0b:dd:08:e1:f1:78:7d:e3:e2:75:61:8a:91:
a2:89:d9:eb:2d:1c:89:a6:d8:f7:a3:eb:18:88:19:
71:b5:f3:fc:44:6b:62:1c:f8:a4:80:90:c5:aa:f1:
94:01:b3:99:39:51:d6:b6:4a:d1:a7:c4:04:70:1f:
bc:04:04:a5:d1:60:f8:ed:f7:27:dd:68:67:99:d9:
64:e7:cd:be:dc:10:c2:1c:1b:6e:84:42:c2:7a:4e:
db:9e:20:60:47:36:17:a2:cc:d3:46:2b:51:48:1e:
44:4d:5d:26:1c:65:a8:5d:66:45:7c:32:79:08:98:
fe:0b:ef:10:ac:f2:65:e2:9c:12:17:65:61:9d:9b:
95:f3:c9:61:65:67:49:45:8f:51:a8:e7:1d:4d:89:
31:e9:5b:ab:78:52:5b:ee:4f:88:ff:3b:6e:92:c5:
5b:31:88:51:c5:3b:40:2c:b8:90:9c:af:0e:17:05:
c8:b5:08:3e:48:1e:93:de:b5:49:03:fc:bd:16:06:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:96:08:A8:71:57:FD:49:99:B8:43:18:10:78:5F:C5:5F:07:B9
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/87A6A0A2ECC911EF8304FC49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.253.0/24
Signature Algorithm: sha256WithRSAEncryption
22:20:62:e7:ea:51:8e:39:e4:ce:43:80:1f:3d:bd:70:24:e7:
58:cb:81:c3:80:85:df:fa:a9:6f:e0:a0:80:23:0a:e3:2a:e0:
13:4a:75:27:a5:7a:e2:03:f3:02:39:06:ea:21:dd:8b:5a:25:
85:59:0f:50:5a:13:d2:a9:f6:35:ae:5f:f2:74:ec:4a:9f:51:
09:72:ae:4f:02:f2:bf:99:92:f6:9a:df:34:4a:54:32:a8:7e:
b7:d8:63:9e:e5:19:f9:3a:87:9f:b3:5f:e3:d9:52:a0:0a:76:
44:c7:3c:42:64:b4:a6:fd:cf:90:d3:df:cd:fa:63:25:90:ac:
34:14:62:35:22:fe:c4:02:98:26:a1:c0:2b:11:36:32:79:93:
cd:76:cb:db:50:f9:14:0a:a5:d2:82:8a:df:57:27:85:55:f5:
62:bf:92:e6:0e:f5:35:6d:3a:f4:6c:80:33:e5:e3:d2:eb:63:
da:6f:2f:74:89:f6:d8:41:01:de:f7:fb:75:00:ef:eb:a3:81:
e6:6f:98:c4:40:2e:59:99:2e:f8:f1:ba:c0:03:25:94:60:ea:
48:41:70:63:84:0b:8a:ba:5c:b5:80:5d:db:85:0f:14:19:e3:
7f:11:69:45:da:b5:62:fe:63:83:09:93:41:93:1c:89:4f:9d:
56:b7:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:57 2025 by rpki-client