Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa
File: 12316BAEE42C11EF9066AE3AC4F9AE02.roa (raw, json)
Hash identifier: Ij4MYxmZ1kvvIkA44sca2pptoxt6bSkjj51C+GS/Tgs=
Subject key identifier: DD:E5:A7:CA:CD:22:9B:1A:26:4B:44:E4:40:B5:FD:BC:D8:E9:F1:2C
Certificate issuer: /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial: 0F
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa
Signing time: Thu 06 Feb 2025 01:47:15 +0000
ROA not before: Thu 06 Feb 2025 01:47:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 55020
IP address blocks: 183.90.186.0/23 maxlen: 23
183.90.186.0/24 maxlen: 24
183.90.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB7DE
Validity
Not Before: Feb 6 01:47:15 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67a414a3-9644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:87:76:f4:79:55:fd:d2:5c:7c:83:ed:ad:
7c:51:16:fe:78:48:2f:a7:89:e0:d2:f7:52:f2:ec:
cc:e1:74:ec:10:d3:bc:d1:9d:40:1c:f4:ec:5e:b7:
ea:7e:50:96:66:29:1c:de:26:6b:b9:2d:83:10:4b:
f4:ef:c0:f8:38:0f:2c:f7:13:fa:7a:e2:90:76:78:
a8:cf:e5:be:3c:a6:b1:65:32:ed:74:ec:7d:21:61:
3e:87:bf:a0:ad:72:4f:da:88:89:0a:ff:6f:7e:67:
49:79:ee:a9:24:e7:b6:7a:63:0f:0a:d7:79:d8:95:
bc:05:61:6f:e6:26:23:62:1d:00:12:5e:6d:8d:04:
ac:a4:23:85:22:fd:fa:ab:13:f2:18:c9:26:22:16:
b0:9e:22:bf:28:03:47:cb:e7:fc:64:6f:76:14:33:
0d:9b:50:f1:5c:16:10:d4:67:5a:a3:88:4d:ce:66:
44:f9:ac:89:e9:fa:55:13:09:34:4c:2f:72:f9:f6:
bf:42:3e:1b:82:dd:44:98:ed:e2:f0:bd:e0:db:7b:
bf:b3:ea:2c:22:53:39:88:5c:cd:3f:73:ac:c1:57:
d7:cd:67:8d:a3:36:5c:2b:d1:cf:57:89:86:88:2e:
0e:dc:6d:e5:cb:a2:60:18:31:bd:7c:ac:04:e8:eb:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E5:A7:CA:CD:22:9B:1A:26:4B:44:E4:40:B5:FD:BC:D8:E9:F1:2C
X509v3 Authority Key Identifier:
keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.90.186.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:b9:1b:d7:00:70:16:e5:e2:24:53:9f:26:9d:88:43:f3:17:
88:39:41:6d:a8:2f:3e:c2:9b:14:0b:74:e8:ba:de:b8:b1:d0:
79:61:f9:18:65:95:97:7c:30:20:72:65:29:f7:f1:e1:eb:94:
c7:a8:6b:c2:7b:57:32:b5:7c:b5:25:e9:94:35:cb:30:44:63:
bc:5e:b7:c0:fd:5f:96:de:18:d2:16:a7:31:cb:d8:6b:e9:44:
5e:ff:06:a1:d9:c4:73:27:4e:a1:0d:c2:81:13:8b:94:c0:c3:
2f:c6:5b:4b:d4:98:3b:e0:a1:26:b3:ad:6b:b0:32:ba:e1:e7:
e8:73:d8:d0:22:7f:d9:f3:a6:12:19:0e:f8:ca:bb:15:00:6c:
68:33:dd:55:c8:05:5f:bd:66:57:a5:bc:69:81:73:71:ab:d6:
0c:1d:e3:47:27:45:a7:64:ee:a4:9d:77:39:d5:4d:7d:1b:bc:
53:f4:f7:f0:f4:1d:3e:f7:86:4c:19:01:9b:1b:f8:bd:e3:60:
3f:38:25:8a:a5:04:0d:08:14:dd:c7:5d:08:a8:15:40:1f:2b:
c1:b8:76:0c:c6:ce:82:62:f4:49:ef:64:08:bf:1c:c5:82:52:
90:a5:89:38:57:09:8e:02:d8:92:7f:37:7f:82:0d:7d:58:28:
82:3d:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 03:38:57 2025 by rpki-client