Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/ED0DECA6E5A611EDADDD1074C4F9AE02.roa
File: ED0DECA6E5A611EDADDD1074C4F9AE02.roa (raw, json)
Hash identifier: z3xacBjovMyDRqTM7g6iTpB77mlZVh09tcUD0xiN+xY=
Subject key identifier: 06:18:C4:D3:0C:FA:0F:AD:82:FB:76:51:15:EE:79:4D:B8:DA:6F:BA
Certificate issuer: /CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722
Certificate serial: EE
Authority key identifier: 2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/ED0DECA6E5A611EDADDD1074C4F9AE02.roa
Signing time: Sat 13 Jul 2024 05:46:05 +0000
ROA not before: Sat 13 Jul 2024 05:46:05 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 21859
IP address blocks: 113.212.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5114
Validity
Not Before: Jul 13 05:46:05 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6692149d-e6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:1e:4c:56:75:50:29:b4:04:5c:e0:84:f6:
c8:e3:fe:18:78:d8:67:6a:97:97:57:07:73:ab:c5:
45:6e:1d:10:d4:47:ae:fa:6d:a1:65:06:a1:26:06:
e0:21:eb:86:c8:eb:0c:39:a4:4c:2c:f0:60:58:2e:
5a:ee:e7:90:26:58:ae:dc:51:a2:70:7a:69:61:fc:
e3:7c:37:ee:20:a1:38:f8:b7:00:24:f8:7f:7b:b8:
4b:12:5c:08:9a:f1:17:e0:a4:fa:a7:ef:3a:65:e5:
d9:0d:fe:7a:dd:4f:69:00:a3:68:a1:bb:c7:23:c8:
49:f8:71:65:56:7f:99:4e:44:14:85:83:3d:b4:88:
7e:1f:5e:14:95:67:81:83:0f:0d:b1:7d:4c:83:60:
91:12:7e:6e:12:57:bd:ff:cc:80:f8:26:f0:ff:26:
43:fc:cb:2a:30:cf:4a:40:28:d7:3c:7e:b6:56:aa:
06:74:a8:3f:ae:44:fb:95:7c:95:d6:97:3a:f4:bf:
b8:de:eb:8a:95:1b:39:fc:55:49:8b:ac:f4:26:b8:
eb:01:d4:48:54:90:8f:52:82:62:84:29:53:77:32:
fb:fb:b4:08:2e:c3:a7:36:96:39:3f:ba:23:c0:1b:
30:3c:38:4b:98:e5:fa:2d:09:43:bc:cf:9b:fe:9d:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:18:C4:D3:0C:FA:0F:AD:82:FB:76:51:15:EE:79:4D:B8:DA:6F:BA
X509v3 Authority Key Identifier:
keyid:2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/ED0DECA6E5A611EDADDD1074C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.212.90.0/24
Signature Algorithm: sha256WithRSAEncryption
67:45:b7:1c:9e:6a:51:4f:52:4c:f8:44:cd:a6:a2:1e:23:b4:
47:1c:c0:a9:db:a5:8d:f0:82:3b:67:df:83:7a:62:16:3e:12:
48:16:34:b7:96:3d:55:05:8a:ab:8b:52:3c:74:a7:46:02:db:
4c:69:53:28:ec:89:7c:55:25:23:b3:18:da:64:7e:8f:23:04:
b3:d3:c1:cf:f3:30:fd:59:40:e7:b1:91:c4:b3:81:3f:1a:74:
b4:ee:e8:43:43:db:36:9f:3e:47:c5:e9:fe:e1:0f:d5:4c:98:
ab:76:e2:86:40:6e:91:df:0b:bb:74:47:57:26:cb:91:86:8f:
fc:45:65:f0:6b:92:45:d2:26:6d:ae:4f:99:75:2e:0d:75:2d:
29:02:e1:c8:79:ec:23:cc:78:25:f7:bf:6b:7c:f3:9d:1a:da:
e7:fc:4a:6d:c0:9a:87:e0:95:6c:d6:7a:eb:83:cc:58:23:a8:
e3:02:ed:f0:f2:01:ef:10:b5:9c:36:e4:f9:ab:97:c5:0a:9d:
e8:f4:f6:1d:5c:88:52:46:67:62:bb:bf:9c:41:fe:ec:94:17:
39:93:44:75:98:03:f5:10:c4:e8:96:65:5d:94:c8:be:31:48:
d3:3f:b8:ef:23:5f:f3:b7:27:b0:22:92:66:2a:df:7c:e2:cb:
4c:be:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:36 2025 by rpki-client