Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa
File: 25ED44B41EE411EFA62B1335C4F9AE02.roa (raw, json)
Hash identifier: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8=
Subject key identifier: 27:D7:CC:1D:C5:D7:91:02:09:3A:AB:30:B8:25:E4:C1:57:AF:C2:CD
Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial: 9B
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa
Signing time: Fri 29 Nov 2024 05:28:25 +0000
ROA not before: Fri 29 Nov 2024 05:28:25 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 202013
IP address blocks: 203.56.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC711
Validity
Not Before: Nov 29 05:28:25 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674950f9-f993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:87:7c:a9:ff:7f:44:7c:f8:0d:44:3e:ea:
32:37:01:19:b5:ef:cb:f4:8a:54:49:a2:6e:ef:13:
6b:d8:fe:90:82:ab:71:d2:14:81:d6:f3:ed:b1:23:
0d:71:90:6c:07:f5:0c:e2:43:e0:04:49:fe:ee:6b:
66:2f:0f:78:9a:aa:78:37:1c:a6:d0:39:96:7c:7e:
4e:15:a4:54:f0:eb:65:eb:c7:2c:87:02:c2:35:c8:
1e:61:74:68:bc:63:08:db:10:31:e0:be:f6:97:61:
72:b0:81:60:48:f1:50:57:46:5a:07:36:cd:32:c5:
05:f6:64:ee:88:66:62:9a:ba:6d:d1:9e:c5:ff:64:
58:69:2c:59:af:2f:be:c0:58:13:90:1d:80:8f:85:
29:1c:38:29:a4:aa:d4:2e:77:7b:3b:bf:4a:06:54:
6b:c6:7a:53:c5:dc:5f:f1:86:73:27:d4:a9:2d:4b:
1b:d7:1e:8f:66:da:8c:eb:be:d4:56:c5:02:98:24:
9c:d5:b1:bc:bb:0c:22:0d:42:cd:8f:85:af:69:00:
c6:fd:a4:f2:94:de:70:90:f9:93:4e:15:e9:7b:bd:
b4:4f:62:78:cf:bf:9e:50:fc:a1:b0:be:b4:71:a4:
8e:07:fc:f8:21:72:d5:5c:a1:6a:77:7f:b4:eb:29:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:CC:1D:C5:D7:91:02:09:3A:AB:30:B8:25:E4:C1:57:AF:C2:CD
X509v3 Authority Key Identifier:
keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.56.81.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5c:e5:d1:38:f5:5c:b4:e9:fe:5e:de:c1:95:e5:0b:8f:27:
94:d1:6b:59:9f:99:85:6e:09:eb:0d:88:de:72:b6:a6:4d:87:
15:e9:3c:ee:b7:83:68:5d:a6:23:8f:32:e4:92:95:78:f1:64:
cb:b4:3e:06:24:e9:f3:79:ad:2f:34:e2:a4:c4:95:c1:ea:23:
19:5f:05:4b:f6:5d:c2:4d:7f:2c:94:f2:ed:84:1f:0b:91:e6:
75:9f:2e:bd:8c:49:60:18:cc:57:af:ac:cf:66:58:d4:ee:69:
33:15:f0:ac:81:0a:2a:b8:12:f3:4d:13:05:be:70:fa:22:93:
92:02:ca:01:06:80:58:5d:70:75:ac:58:43:c1:a4:78:d9:b3:
4b:19:3e:1c:ca:97:b9:95:ef:0f:66:60:5b:2c:cb:ce:17:9b:
59:76:07:62:14:17:d2:5d:2d:ee:36:ac:bf:e8:0e:bc:94:12:
38:99:5a:ca:7f:43:e3:88:5a:89:09:7f:f3:6c:ec:58:59:89:
77:ac:03:16:09:43:1d:52:66:92:5b:73:47:04:13:8c:c0:b3:
0a:53:f3:89:38:16:66:a5:3b:40:d8:02:e7:0b:31:75:91:6e:
1d:c0:02:0f:ca:4c:98:8b:b6:64:34:cc:42:1f:d6:bc:16:0e:
60:e3:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:30 2025 by rpki-client