Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa
File: 359CBDB28D0D11EF90882959C4F9AE02.roa (raw, json)
Hash identifier: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU=
Subject key identifier: EF:21:B0:E3:7C:D8:4F:F9:2C:73:F6:2A:D2:2A:D6:61:57:AD:0C:2D
Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial: 9E
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa
Signing time: Fri 29 Nov 2024 05:28:28 +0000
ROA not before: Fri 29 Nov 2024 05:28:28 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 5666
IP address blocks: 203.86.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC711
Validity
Not Before: Nov 29 05:28:28 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674950fb-c33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:73:03:e2:48:f5:1f:93:62:f2:62:cc:19:
1b:2e:c2:78:1e:82:92:a2:2e:d5:99:46:02:ba:78:
3a:ce:ec:78:40:7e:7d:ac:b4:8e:94:05:8d:da:7d:
23:e1:f9:1b:18:ce:5c:0e:98:ce:4e:3f:3f:ce:db:
97:9c:2d:da:e5:ab:68:e2:0e:2e:38:1a:8b:90:04:
c1:87:66:4f:76:4d:ff:7f:3d:96:8d:37:69:11:7f:
2e:2a:d9:70:49:6a:46:13:33:87:50:d5:8a:2f:90:
a9:3b:6c:91:2d:69:83:5a:59:2a:4d:74:5a:5a:79:
b9:77:7d:aa:c3:87:c6:4e:99:b9:6d:4d:ef:de:b0:
2a:21:23:bf:43:56:a1:cb:c0:0f:4c:b0:36:99:24:
7f:0a:82:e4:33:00:99:9d:d6:66:44:39:89:a7:67:
fa:5e:fc:1d:6f:3a:18:20:27:85:bb:84:9f:d4:48:
2a:bc:98:c7:e8:c1:f9:ce:3d:ef:6f:53:45:5a:fa:
18:23:fe:99:c9:ec:fb:92:e2:f0:ae:7c:62:04:f8:
a5:f3:9f:16:2e:e8:f9:d6:7c:f9:e9:35:14:f5:4b:
4c:c5:36:37:b2:92:41:97:67:84:75:76:45:76:68:
50:25:3f:cc:2a:c6:4e:70:de:eb:c6:66:6c:f5:27:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:21:B0:E3:7C:D8:4F:F9:2C:73:F6:2A:D2:2A:D6:61:57:AD:0C:2D
X509v3 Authority Key Identifier:
keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.86.223.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6f:1e:18:11:09:78:2f:1b:6c:21:91:3c:61:0f:bb:a9:b1:
66:99:e3:25:13:39:71:3c:eb:80:45:02:d1:7b:9b:1c:27:f5:
cb:59:a7:6d:03:e8:7a:8c:1c:5e:c1:35:2d:a8:d3:39:10:7c:
c7:30:4a:49:a6:84:f7:93:25:f2:80:87:6c:c6:70:73:82:09:
5f:62:f2:79:64:b7:5d:08:9b:fc:bd:a6:b6:29:b8:a5:12:d2:
c0:c2:33:cd:7b:43:94:9b:f4:72:07:a4:d2:c5:e5:43:bd:92:
5f:fc:50:ea:d9:d9:03:48:8f:37:b9:34:d6:7d:cb:e0:db:92:
b7:98:f5:38:b6:c6:67:28:16:31:bd:78:8c:c4:dc:9f:2f:41:
a8:bc:1d:14:66:40:54:f8:e4:e3:22:18:db:99:df:08:73:67:
5e:dd:b6:df:5c:af:db:bb:82:10:af:5f:36:75:c5:59:8b:85:
91:67:45:b9:fb:22:b6:36:47:36:f3:5a:8b:c1:a8:dd:ec:ba:
59:bd:4b:0c:ab:eb:8e:2c:dc:b5:d5:74:62:cc:42:32:3a:5e:
6c:c0:7b:6c:83:e5:cd:a7:54:97:d0:b4:ed:01:72:15:c0:a9:
6b:db:dd:70:f2:2c:33:e4:7c:4b:94:e4:66:61:43:72:c4:e8:
06:2c:1f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:25:02 2025 by rpki-client