Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA9BC95A548711EF89E24A18C4F9AE02.roa
File: FA9BC95A548711EF89E24A18C4F9AE02.roa (raw, json)
Hash identifier: TzqKssNJoGfL9wI2PFMHpXN5yW7cil9sz1WNr4GCrKI=
Subject key identifier: 92:1A:A0:0D:40:4A:30:32:1D:FC:3D:7D:D3:E9:D2:AF:D3:E8:D5:3E
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0AFA
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA9BC95A548711EF89E24A18C4F9AE02.roa
Signing time: Wed 07 Aug 2024 06:40:47 +0000
ROA not before: Wed 07 Aug 2024 06:40:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55453
IP address blocks: 139.190.236.0/24 maxlen: 24
139.190.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Aug 7 06:40:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66b316ef-acfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:56:ac:42:b9:16:73:c3:60:02:52:96:ac:
16:4d:0b:5a:f0:45:1c:02:1c:14:14:bf:84:d3:0e:
06:a2:f3:80:eb:c7:97:a8:4d:d4:3f:22:6b:b1:3c:
d2:7c:f8:45:20:69:ce:a5:29:9b:b2:e9:ba:bf:f7:
3e:7e:e0:bf:07:5b:00:6f:22:d4:f6:dc:10:b9:62:
87:79:00:02:04:5d:5a:69:c1:55:f7:20:48:d1:8f:
ee:4b:da:85:f9:ea:bd:6e:89:1f:68:d3:33:7f:5c:
ce:63:23:01:d0:82:32:12:51:51:e7:0f:dc:7e:4e:
a2:8f:c5:2b:46:f4:87:1e:06:58:bf:48:c1:54:9b:
8e:cb:f7:ec:11:97:a4:14:d3:a4:4d:cd:2a:81:93:
c0:11:4e:8a:47:6c:f3:57:05:02:b7:2a:0c:40:a2:
1b:15:81:77:2f:77:bd:47:72:6f:b0:93:0e:e5:b8:
90:c6:56:be:22:48:d6:cc:e6:da:18:91:4f:9b:62:
6f:5a:7b:3f:ba:4e:09:37:da:2b:b4:79:cb:bb:a7:
37:c9:0b:c1:2f:32:de:2b:86:4f:50:f0:f7:37:fb:
92:85:b3:f8:a6:ec:c0:85:21:b7:37:d6:65:cd:5d:
45:c6:4c:42:52:64:a9:c7:11:19:67:65:f3:75:66:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:A0:0D:40:4A:30:32:1D:FC:3D:7D:D3:E9:D2:AF:D3:E8:D5:3E
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA9BC95A548711EF89E24A18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.236.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:0f:68:84:45:c7:16:05:ee:a4:21:45:5f:33:8c:34:38:6f:
59:ad:49:b7:8e:73:56:78:3a:48:2c:11:c2:e1:04:39:7e:60:
ec:9a:bb:e3:cf:53:24:26:76:31:56:21:54:88:19:9c:99:af:
e8:5c:96:41:4b:20:c9:c0:d6:da:20:07:52:18:72:fb:0f:27:
1f:be:26:aa:99:5f:3c:75:5a:b9:40:e0:07:8a:f6:ca:a2:f8:
cf:48:f1:00:ef:87:59:0c:fb:af:75:9c:80:e2:5d:5d:21:32:
93:77:b0:07:ff:ca:3a:24:79:88:cd:99:3e:94:da:db:64:5f:
16:91:02:20:03:84:44:d0:de:19:6e:af:f1:b6:eb:e9:25:4f:
3d:f6:30:24:58:c5:61:3b:b5:90:22:d5:73:e4:d9:16:da:6d:
e1:fc:1a:50:66:b3:6e:90:3b:1d:49:54:b3:4e:bb:da:92:28:
34:cd:6d:8d:a9:6b:35:1a:69:75:b2:b5:6e:e6:95:b3:65:ea:
1c:d9:5b:2b:4d:85:da:23:3b:79:47:af:13:93:ac:a6:6b:4a:
56:a5:bb:2b:fc:40:2d:44:26:db:ee:73:8e:20:68:ad:3c:49:
9a:9a:a3:ba:87:e2:af:b6:11:8b:a2:9b:49:fd:16:20:4e:ec:
f0:e2:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:20:01 2025 by rpki-client