Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa
File: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (raw, json)
Hash identifier: d0oN/FUNzNpOKmQI6ds/0v5d1ZE90v5NzlRPE14knFk=
Subject key identifier: C4:EE:52:6F:09:E2:91:62:72:4B:F6:04:F4:2F:E6:8E:38:0F:53:87
Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial: 0757
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa
Signing time: Wed 16 Oct 2024 21:40:29 +0000
ROA not before: Wed 16 Oct 2024 21:40:29 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 9884
IP address blocks: 202.189.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879 (0x757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5590
Validity
Not Before: Oct 16 21:40:29 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671032cd-2349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:0a:08:4a:11:c3:d0:26:57:ba:b5:26:c7:
c9:99:f2:ed:d7:9f:01:47:02:59:a5:c6:3b:79:8e:
b5:ac:79:02:52:5e:88:1e:d1:8b:b9:6e:51:c2:d7:
b5:eb:02:bb:59:d5:d3:49:0d:37:ae:24:8d:05:68:
91:d8:55:3a:70:ff:e4:dd:6f:a1:03:5b:9d:d9:bd:
f2:a2:3c:0d:a5:51:f0:a2:16:9e:f1:96:41:9d:1d:
29:29:75:4e:73:43:42:59:68:42:ee:78:96:fa:48:
24:a1:6b:0a:04:39:c7:0e:ab:39:a8:5c:88:3e:1b:
34:d2:2a:45:04:da:40:4c:bf:93:ef:43:4f:46:ce:
fb:cf:6f:da:a0:53:3a:9c:e3:ca:4a:25:45:ff:89:
a0:63:a0:36:3a:37:39:af:12:d3:a6:20:c3:63:c6:
ab:bb:90:c4:1f:3f:da:ae:eb:fd:7c:e1:3c:c5:53:
ff:fd:aa:4d:f7:f3:de:90:fb:91:da:e8:05:61:f1:
63:66:48:62:6c:05:ac:68:ef:51:bb:3e:78:ec:a6:
42:a9:b4:11:a6:de:4e:16:b3:80:60:a7:7b:83:4c:
f3:57:bd:57:93:ce:c2:f2:fc:c4:ee:a8:4e:90:2a:
ce:f2:11:9b:68:3d:95:33:3b:e2:87:c6:39:8c:3e:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:52:6F:09:E2:91:62:72:4B:F6:04:F4:2F:E6:8E:38:0F:53:87
X509v3 Authority Key Identifier:
keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.189.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:76:e5:1d:fd:f3:50:bf:1a:94:b9:5f:43:49:80:8a:9b:1d:
9c:f6:72:fa:4f:55:03:c7:4a:9d:98:1e:e2:87:b6:f8:ab:c0:
66:38:2c:38:f4:b3:e6:98:6b:95:ca:33:4c:60:29:59:97:40:
8d:01:33:b8:9c:74:8c:23:14:49:a1:e5:8b:99:68:1c:05:20:
71:a5:69:ab:07:50:22:3d:73:ed:a4:cf:db:85:f7:37:3c:b5:
d3:53:87:e4:3d:69:0f:fe:a5:28:33:f2:6d:1b:9b:3f:19:33:
e5:2f:19:da:8d:b5:23:f6:ac:4d:99:ed:35:9d:35:71:8c:af:
70:f9:88:6a:51:fb:a8:be:99:df:93:5b:59:0c:50:39:59:ad:
a0:e5:2b:df:0a:d2:dd:6c:74:d4:41:6f:08:ac:55:72:bb:72:
c4:cb:b8:01:2f:92:68:8e:7d:4f:d9:1b:cc:04:16:6f:9d:52:
6a:6a:30:c3:b5:53:ba:a8:76:b0:83:9b:bf:73:f7:1e:e4:c1:
2d:b2:aa:01:4b:b7:46:b4:f4:5b:b6:1b:5b:05:0e:e1:58:51:
e7:e5:f7:1f:6f:4f:53:70:29:7c:91:7f:28:2a:fa:65:d6:b3:
7d:7d:7e:a5:fe:e5:cf:6e:97:33:7c:f4:a1:27:2b:42:23:ec:
52:e6:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:17:13 2025 by rpki-client