Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa
File: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (raw, json)
Hash identifier: 1lAGETSydBwVjG0hesN1/ViGN9eOR/26uzUYMFoxaT4=
Subject key identifier: 40:51:F1:2C:80:2C:8E:C6:BC:BC:41:07:24:CB:E1:E4:A3:1C:D1:88
Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Certificate serial: 012B
Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa
Signing time: Sun 21 Jul 2024 04:16:11 +0000
ROA not before: Sun 21 Jul 2024 04:16:11 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 132698
IP address blocks: 203.124.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4696
Validity
Not Before: Jul 21 04:16:11 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=669c8b8b-197b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:69:8f:72:77:8e:ff:f1:e0:d2:96:8a:57:
b8:b1:b4:7c:8a:2a:24:12:8f:9a:b4:5d:46:a4:2e:
7a:79:bd:0d:d9:3b:23:5d:f4:54:8b:19:a7:00:0b:
83:31:56:19:68:de:2e:e9:61:6c:e4:f1:7f:63:fa:
87:9a:e4:01:d6:59:f1:45:ab:b0:a6:b8:33:c4:6b:
55:a9:8e:9a:3e:c0:b0:b9:f7:df:8a:be:49:97:2a:
a0:7c:17:f7:c5:69:b6:37:bb:8a:17:32:b6:24:b4:
a8:e0:64:7a:f3:30:dd:e5:b5:46:da:62:bd:5b:8d:
73:6a:e9:5b:b7:a8:fc:41:8c:99:87:df:f5:02:43:
53:69:e8:fa:09:c4:ae:1e:9c:83:7a:99:c4:00:9a:
0f:f6:d8:71:a6:39:9b:7e:5f:8a:71:fc:a5:8c:e4:
e4:ff:5c:2e:13:87:9a:8b:9f:19:af:61:52:c1:a2:
49:df:7a:9e:72:ff:c3:f9:cd:77:4e:70:69:db:56:
3d:e4:53:fb:b5:b0:ac:67:d7:f8:f6:21:15:32:ab:
fd:d1:8d:39:4b:63:28:63:ff:4a:3b:56:46:3e:9d:
5c:e1:d0:63:67:c7:b8:d6:0e:00:43:bb:8a:d3:f2:
ea:4d:fa:52:63:e8:3f:0c:f7:10:3a:b9:f9:ef:06:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:F1:2C:80:2C:8E:C6:BC:BC:41:07:24:CB:E1:E4:A3:1C:D1:88
X509v3 Authority Key Identifier:
keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.124.14.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7f:2c:aa:01:58:ee:4c:79:c5:0a:bc:b1:6e:c1:12:ab:81:
a6:b9:c8:56:80:ce:19:69:40:a0:a9:52:ad:c7:9a:b3:80:45:
77:68:90:90:52:e6:44:7f:b2:e5:19:56:c0:63:68:a1:00:bc:
09:ee:a0:c8:4b:d7:58:e0:cd:53:e6:e1:3a:ee:be:39:1a:e6:
de:51:7b:70:21:20:83:64:f4:0b:7d:13:17:c0:98:77:df:45:
a4:bf:58:82:2c:94:5f:8e:f0:af:c5:ef:8a:6d:66:f2:e9:5d:
00:71:05:c3:c1:c8:81:8f:8f:18:1e:3d:4d:1c:3d:f3:60:e8:
40:12:a3:c9:92:48:cc:34:8c:92:12:9a:e6:9e:b4:c2:b7:fd:
7f:a2:7e:4b:34:f7:64:d2:fa:e4:15:43:6f:68:ca:a9:b3:5b:
d5:03:ba:30:49:e3:37:27:6d:31:a3:ad:95:e9:e4:40:a3:e9:
3f:ea:de:05:a4:33:e6:78:c6:31:88:d3:4a:8f:2c:c0:58:a7:
c5:10:16:eb:cc:50:08:13:09:60:96:d7:49:96:4d:db:43:3a:
6b:99:70:92:56:01:3a:7d:89:95:fc:c0:e8:56:ee:4b:ff:a6:
2f:eb:de:f3:6f:32:2e:b4:ec:32:15:f1:d5:c2:fd:f2:17:2d:
5e:08:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:28 2025 by rpki-client