Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa
File: 2F320256981611EB904AF150C4F9AE02.roa (raw, json)
Hash identifier: zydBQ6+XzPsP0D5XfuooCO12kFS+89HKhQ6kY0lGz0g=
Subject key identifier: 29:D2:05:F2:26:D6:6A:F5:6E:C1:F5:FE:3C:6B:02:7A:C6:CF:46:20
Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F
Certificate serial: 05C6
Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa
Signing time: Sat 02 Nov 2024 22:42:05 +0000
ROA not before: Sat 02 Nov 2024 22:42:05 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 141365
IP address blocks: 203.7.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF84F
Validity
Not Before: Nov 2 22:42:05 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726aabc-c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:9c:05:31:a2:c4:d7:c7:9a:bf:c1:0d:48:
7c:b7:ae:57:e8:62:3c:9c:71:53:f2:7b:91:38:7e:
34:f1:be:bd:ee:42:b8:b1:a2:a6:3b:3b:70:b3:64:
61:c3:70:ba:e0:bc:c0:a8:cb:20:2b:a7:4e:e0:84:
59:ce:b8:fc:84:58:10:3b:25:8a:fd:13:cb:8b:e4:
fb:d5:ba:65:2d:3d:a3:65:32:64:72:f9:0e:19:8e:
a6:3a:6d:f8:6f:e2:70:0b:99:d9:e7:06:5f:40:6e:
f5:1a:50:c8:62:5e:b1:1d:5c:6c:93:51:52:f3:26:
c0:57:bf:ad:f5:32:d7:2f:7d:a6:bf:b7:b4:8c:1f:
83:b5:0b:fe:60:f8:84:ac:12:6f:0a:6d:e1:cd:c5:
db:f3:6c:31:18:45:7b:2f:1b:a5:2d:9b:31:24:bb:
2a:b2:e3:99:ea:77:59:2b:95:9b:df:64:98:5c:40:
be:cd:d0:e9:24:34:1f:50:33:7f:38:5a:56:dd:81:
d0:ed:a6:00:8e:83:ca:e7:4d:f5:2b:b2:18:cd:0a:
02:65:b1:92:2e:6b:f3:8b:ff:10:4c:f9:29:7a:9b:
c0:dc:df:3f:4d:7c:51:a9:74:20:9e:b8:e2:ca:8b:
9e:6c:e3:81:db:ec:9a:d9:88:69:20:d2:e9:db:19:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:05:F2:26:D6:6A:F5:6E:C1:F5:FE:3C:6B:02:7A:C6:CF:46:20
X509v3 Authority Key Identifier:
keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.7.172.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a8:56:d0:3b:13:72:c7:59:2c:ce:e1:a0:45:54:8e:d7:d4:
d8:30:b1:b3:91:e1:ce:06:7e:72:8a:e7:58:9f:19:77:8a:7d:
70:b2:da:8f:95:9b:b2:54:62:2b:cd:e7:d7:64:54:24:db:5c:
5e:b3:33:04:e7:4a:50:79:4c:16:f1:49:9e:61:5e:2e:55:06:
8b:b1:4e:ca:8c:4e:f6:91:a0:94:f1:4b:e9:d5:ac:d1:c8:3b:
2b:19:6c:38:31:7c:06:e4:a6:62:63:2d:7c:14:0d:e7:b9:3d:
b5:6c:39:3c:90:48:7d:db:99:08:f4:2c:ac:eb:4d:f3:5d:91:
db:c8:51:f9:df:bd:b2:1b:5d:3e:24:15:dc:35:4b:13:5c:d4:
f5:a9:04:09:0e:f0:6d:1a:0d:9c:11:a0:b4:9a:9d:ef:63:cb:
e4:de:aa:66:1d:68:72:55:22:c1:b8:74:d7:72:92:4b:9c:be:
a6:64:52:1a:30:cd:98:9f:d5:65:93:0e:6f:fd:32:f2:f4:34:
d1:76:be:a8:7a:0e:19:d6:61:93:be:08:61:67:38:c8:15:93:
ff:99:3e:19:8e:78:96:e5:ce:bc:8d:bb:f2:01:66:f7:91:31:
b0:44:42:4b:85:c6:d6:c4:c7:9b:32:40:85:24:9f:3a:49:d8:
fb:f4:1e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:33:21 2025 by rpki-client