Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa
File: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (raw, json)
Hash identifier: qrOVzHUnQpUjj2NXO2uI9c1Lmn26rV+B/0QYiSJpTNM=
Subject key identifier: B3:9A:2B:F2:81:55:B0:83:43:D8:3B:DA:2D:E4:4F:74:B8:CF:49:4E
Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Certificate serial: 0802
Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa
Signing time: Thu 18 Apr 2024 22:00:48 +0000
ROA not before: Thu 18 Apr 2024 22:00:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45918
IP address blocks: 116.193.10.0/23 maxlen: 23
116.193.12.0/23 maxlen: 23
116.193.14.0/23 maxlen: 23
116.193.14.0/24 maxlen: 24
116.193.15.0/24 maxlen: 24
2401:9100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8530
Validity
Not Before: Apr 18 22:00:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6621980f-10f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:91:5d:53:60:c3:71:73:f6:68:9f:82:33:
c1:1c:8e:6b:e9:ec:36:b3:01:a1:ec:8c:84:ef:55:
e7:b7:d7:71:6c:00:b7:f0:4f:e2:af:74:49:65:67:
89:03:f0:21:ae:d3:58:77:94:6a:0b:dc:e3:f3:fb:
33:bb:f0:6f:8a:e5:78:e0:6e:03:92:b7:56:2a:76:
ec:e9:f4:4f:85:bf:42:e3:ce:a6:d3:fa:9e:04:18:
08:6a:bf:91:bd:a6:82:d3:e8:1c:bb:45:fc:af:07:
1b:17:5e:d9:c0:f0:c0:ba:9b:ea:98:52:cb:d1:8f:
6a:89:17:ee:b9:eb:24:1c:65:45:14:fa:0d:78:44:
04:8c:28:b1:ff:b9:07:69:0b:e4:20:a9:9b:0a:c2:
97:03:e8:01:da:93:07:8a:e4:c3:82:94:ca:49:0e:
c5:93:f5:4c:07:88:ae:0b:7e:ed:42:07:42:58:7c:
72:ea:09:8e:ae:4d:78:a3:4c:58:b3:95:23:03:3a:
d4:76:d7:f2:e2:e0:da:ef:18:7c:9d:35:36:47:26:
27:c7:8e:ce:ac:fc:46:c9:40:9a:56:38:16:d7:b6:
fc:1d:85:35:53:ed:5d:65:12:84:84:a2:c9:39:3a:
b2:57:63:81:09:36:e7:17:51:5b:9a:30:99:e6:8a:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9A:2B:F2:81:55:B0:83:43:D8:3B:DA:2D:E4:4F:74:B8:CF:49:4E
X509v3 Authority Key Identifier:
keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.193.10.0-116.193.15.255
IPv6:
2401:9100::/32
Signature Algorithm: sha256WithRSAEncryption
25:23:9b:5c:a7:0e:af:5b:fe:30:46:3b:ec:2a:4c:7c:6b:ef:
df:97:77:0b:dc:1f:c3:07:e1:1a:41:0d:af:6c:fa:be:4d:cd:
d2:6b:14:68:a2:12:4b:f3:e0:ed:01:3c:f5:04:9f:e3:46:57:
56:0d:94:cc:92:15:e5:05:dd:1e:cb:69:20:2a:1b:6f:bd:25:
c0:c5:52:ef:e4:6c:70:43:4d:95:5d:7c:6d:59:02:1d:45:e2:
74:d0:a6:12:8d:52:80:23:8d:df:e2:3d:ed:d6:2d:1c:ed:f9:
d5:83:43:b8:c5:27:70:ed:17:8c:12:14:c1:f3:25:20:fc:11:
6e:3c:9a:9a:cc:dd:21:11:ec:18:45:15:f6:f1:7a:5a:3b:aa:
0c:67:75:06:50:5e:fc:6e:06:90:f3:a9:cc:60:ed:a5:14:75:
55:79:cb:1c:8f:cf:5e:6a:b5:93:09:fc:7f:a0:6e:d6:e9:ab:
e4:d2:69:a7:b7:fa:be:ca:6f:6c:63:59:db:eb:df:14:a0:47:
06:8d:20:94:69:b4:3e:e3:88:c3:53:4c:49:5e:e2:84:ab:08:
55:a4:31:e0:a8:fc:eb:f9:e7:2a:e6:aa:47:7d:97:5b:82:81:
e8:92:e1:a1:87:1a:2c:5e:cc:6b:a9:e6:38:64:68:2a:9c:72:
2a:f8:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:56 2025 by rpki-client