Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/C1D6899A766D11EF8DE77D09C4F9AE02.roa
File: C1D6899A766D11EF8DE77D09C4F9AE02.roa (raw, json)
Hash identifier: hhDKyyrQxKGGNGFA6ebmUiEAzFW+VilENtN1Yqjy+bg=
Subject key identifier: E9:97:2D:3E:C9:FA:56:31:B2:B0:B2:1E:97:C9:E9:E3:1D:B1:41:DD
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 018D
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/C1D6899A766D11EF8DE77D09C4F9AE02.roa
Signing time: Thu 19 Sep 2024 09:58:45 +0000
ROA not before: Thu 19 Sep 2024 09:58:45 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10103
IP address blocks: 202.134.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550
Validity
Not Before: Sep 19 09:58:45 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66ebf5d4-ebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:5c:89:b1:24:bb:f7:f2:0d:c0:f3:77:c5:
a0:9c:19:47:c9:51:76:b6:c9:58:22:25:4d:2a:e2:
f8:11:5f:6b:27:2f:2e:b1:c5:6a:35:88:b3:f2:dc:
40:d0:1a:ba:43:36:44:b7:39:ed:5a:21:f5:ac:08:
b8:24:0c:11:5f:6a:c0:0c:54:e7:bf:50:14:7b:e3:
55:c9:68:27:57:df:81:89:ef:90:3c:83:20:46:bb:
e4:4a:d0:d7:2a:27:39:f8:e7:76:72:80:69:39:fb:
10:42:88:18:63:f0:09:e6:37:a8:ed:8e:28:dd:e7:
b9:ec:be:8b:ff:f1:7d:85:67:8e:08:33:da:3c:b5:
df:a4:e2:52:ca:3d:47:d2:18:15:16:46:e6:d5:77:
19:9b:b4:64:44:80:56:ef:29:cb:dc:44:d3:74:4f:
37:79:f8:6f:96:69:26:bd:eb:2f:04:ca:e8:c4:91:
23:1a:38:21:5f:dd:32:2d:06:0f:3c:e6:bc:5a:49:
69:fd:d4:e0:95:d8:54:4b:3e:23:80:b2:1f:43:52:
a7:c5:40:96:82:bb:b6:30:34:fc:cc:ea:89:36:5b:
b3:ab:0d:6d:ac:48:b4:cf:17:fc:08:70:99:80:be:
1c:d6:12:1f:23:f0:8d:5f:eb:5c:b8:dd:33:ed:a9:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:2D:3E:C9:FA:56:31:B2:B0:B2:1E:97:C9:E9:E3:1D:B1:41:DD
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/C1D6899A766D11EF8DE77D09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:35:ef:48:5c:a7:7d:95:f4:1e:d5:a9:a6:14:29:e4:7f:38:
0c:45:80:fd:ac:3f:44:d3:dc:b8:f6:4b:90:26:89:56:b8:01:
ae:9a:12:9c:01:ac:e2:3d:b8:b9:1d:6b:4f:c6:64:52:93:80:
d2:eb:2e:7d:1b:14:0c:9f:c2:9d:d6:eb:d4:58:65:ce:cb:c5:
cc:7c:9e:64:95:99:8b:20:8a:88:0f:9d:13:1c:05:6a:88:12:
ae:78:c3:d4:5d:8d:0b:9c:40:5a:99:fb:9f:fb:97:10:93:61:
66:2a:7f:78:6d:c3:59:93:af:e2:f7:d3:fa:66:f9:dd:83:bc:
ba:4a:45:90:f2:23:1d:5f:1c:24:44:cc:dd:16:94:f8:8d:10:
71:27:4c:ba:28:c0:77:e7:3f:48:bd:4b:34:66:32:a7:ab:55:
c3:4e:04:0e:b4:f6:79:49:2f:05:1c:f2:2b:63:f7:43:be:85:
97:1e:0f:9c:02:8f:32:68:c8:e1:97:52:1c:65:f8:d0:7c:02:
e2:29:18:ab:b3:f3:07:ef:37:87:d3:75:39:3f:3a:b0:41:4d:
6e:e5:b8:ca:63:12:2b:49:5c:37:5b:b7:dd:ff:8b:4e:c7:8f:
65:db:26:d5:91:48:80:8b:f5:87:0d:9d:61:b6:02:35:07:f7:
94:97:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:12:21 2025 by rpki-client