Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa
File: EABEFD16232E11EFA6F6B887C4F9AE02.roa (raw, json)
Hash identifier: ia4Ra/GF14x26JDiIjwbkjuR5bTGoRpVxx3Eq8bwfHI=
Subject key identifier: D1:BA:E4:05:37:00:ED:10:B8:94:B5:C6:3B:12:63:D4:85:73:B0:86
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0150
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa
Signing time: Wed 05 Jun 2024 11:29:49 +0000
ROA not before: Wed 05 Jun 2024 11:29:49 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 202.134.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550
Validity
Not Before: Jun 5 11:29:49 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66604c2c-8fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d7:d8:27:05:2b:b2:c4:9f:0b:63:f2:6b:8a:
68:36:fb:c6:b5:fa:f2:db:b0:ea:08:d1:72:b4:d7:
49:07:3f:49:a7:a7:12:ea:23:c1:89:c2:bd:11:bc:
9c:07:24:42:aa:b7:31:97:9a:ea:b6:ad:0d:35:fe:
d3:53:80:98:9d:ed:2f:ed:e2:b9:c3:43:ad:fd:52:
c3:67:84:df:39:2b:89:c1:4a:f6:b4:9b:17:52:dc:
b1:b1:ae:4c:b5:73:9c:43:ec:9e:89:4b:ce:95:21:
a7:74:d8:10:89:ff:97:77:69:40:16:1f:8a:34:91:
bb:0e:ff:ab:f9:13:6a:0a:96:78:c4:bf:ee:3f:e6:
90:da:f5:32:b5:47:0f:42:20:bb:3d:94:17:f3:2b:
80:04:6c:1b:38:78:8d:cf:a7:d9:30:f3:2a:9a:ce:
c6:cf:a5:cf:0f:5e:5a:a6:5a:8e:e7:94:0a:a7:0d:
54:31:ae:2f:18:f2:b3:37:4a:e6:3c:77:90:10:9c:
7b:77:2f:fa:c5:20:ea:62:ee:72:ae:69:7e:c8:4c:
37:56:ac:ff:7b:9b:4f:8e:1f:04:83:64:69:12:56:
0c:4b:fb:44:d5:e8:de:be:e7:da:ac:91:38:36:b0:
74:b4:44:69:83:b2:c7:aa:9f:3c:3b:0c:43:ab:21:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BA:E4:05:37:00:ED:10:B8:94:B5:C6:3B:12:63:D4:85:73:B0:86
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.229.0/24
Signature Algorithm: sha256WithRSAEncryption
31:02:88:d8:48:6d:2a:10:55:77:b7:96:c0:08:ca:6f:10:5d:
a1:49:57:de:61:11:77:d2:1f:9a:8e:9a:b4:3d:92:3b:df:20:
e0:c7:f6:42:72:e4:03:ed:4c:d7:02:9b:b0:c0:a6:3d:89:7c:
79:8c:e2:c6:d6:7b:e1:8b:5f:9b:b8:b6:00:78:89:5d:7c:29:
e6:4f:ca:f3:b8:e7:08:9a:c1:81:c2:15:90:f1:df:66:4a:5d:
e0:67:ef:4a:df:0d:50:a3:82:b4:3f:8b:3a:72:88:1b:9e:6a:
b9:42:eb:7c:b9:67:b4:ce:43:5e:c5:44:ca:51:1c:86:40:23:
86:b6:8e:31:2e:6b:05:5e:76:e2:6e:26:78:bd:c6:ea:b0:24:
dc:7a:6e:cb:4f:db:65:0f:6c:0e:0f:41:1d:f9:86:c3:97:f4:
f7:92:ea:66:22:4b:07:d3:0a:1f:cc:7c:75:af:24:af:b9:ec:
7c:44:7c:0d:67:bb:0e:de:a6:50:62:7b:fb:c8:e2:c3:ea:d7:
77:01:fe:44:ee:36:15:f2:3a:8e:10:17:0a:bf:85:d4:49:68:
0a:fc:17:a4:b3:a8:02:c5:8c:f2:fe:7a:1d:b2:b3:8b:ac:4e:
3c:45:26:5a:70:57:16:9c:60:7b:48:9c:49:2f:34:dc:eb:0d:
f4:c3:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:43 2025 by rpki-client