Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/2CAD02D2722C11EDBF27E658C4F9AE02.roa
File: 2CAD02D2722C11EDBF27E658C4F9AE02.roa (raw, json)
Hash identifier: V0eBfOenVYpANHuZhENP6Iw9IZbICiCEFvhgrhleTyk=
Subject key identifier: 58:24:7D:DB:45:49:90:7E:1F:6D:53:6E:C9:DB:A5:7F:E8:19:59:5D
Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial: 075D
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/2CAD02D2722C11EDBF27E658C4F9AE02.roa
Signing time: Fri 02 Dec 2022 10:29:18 +0000
ROA not before: Fri 02 Dec 2022 10:29:17 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 3223
IP address blocks: 49.128.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118D0F
Validity
Not Before: Dec 2 10:29:17 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6389d37d-7878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:77:6f:c3:2c:4c:35:2a:23:c9:77:49:75:
95:f5:d9:c9:88:56:e0:db:0c:be:d6:05:9c:a2:f6:
dd:88:72:d2:58:9d:03:d8:76:3b:92:bf:c9:80:ea:
e1:8f:cf:e6:57:64:6d:e8:22:52:92:de:0c:7a:0b:
ff:e7:a0:7e:44:ce:26:37:91:cc:13:6d:07:40:39:
76:e7:e5:40:47:77:bd:88:ec:b4:63:95:c4:92:70:
d4:ec:56:30:10:6b:05:e3:e3:67:12:fa:1e:d7:f3:
4a:a1:ac:50:9e:34:d2:5f:ca:91:e0:06:bb:c6:e6:
2e:dc:2b:e4:ce:85:6f:c1:fb:ed:e3:90:14:fa:9d:
92:59:5e:71:73:22:c3:4c:3f:24:72:ee:64:00:3f:
a8:a9:fe:37:1c:f2:2e:df:b8:b9:2d:82:01:c2:a2:
17:e6:e5:de:61:d7:4d:c1:83:8c:c4:53:13:b2:6d:
50:0d:47:5f:89:0c:29:36:6b:29:4a:d1:6e:d1:82:
cf:46:90:50:04:3f:a4:b4:0c:8a:9a:7f:14:d5:a2:
7c:88:fe:23:ff:d2:9b:d2:1e:f0:8e:b2:c8:28:38:
e2:d3:ee:1d:67:07:44:e8:28:b9:32:f2:36:b2:a6:
58:47:b2:18:1c:77:5d:05:b3:c1:aa:cc:84:60:9b:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:7D:DB:45:49:90:7E:1F:6D:53:6E:C9:DB:A5:7F:E8:19:59:5D
X509v3 Authority Key Identifier:
keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/2CAD02D2722C11EDBF27E658C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.88.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d9:f6:a3:7e:3b:ee:1e:9b:3c:f6:fe:33:66:7a:ee:fd:26:
d6:80:a1:6e:87:75:f7:05:e9:27:b8:7e:65:db:5c:d1:ee:a5:
6d:89:83:74:fd:50:8d:17:78:1f:57:e2:2e:75:4a:c9:7b:9d:
11:4c:4a:61:23:f3:4e:bd:51:a8:fc:28:4e:4a:64:a4:c8:d9:
cb:65:3a:54:e8:be:67:92:53:e1:a6:95:d8:a9:47:81:3b:d3:
c9:fc:5f:75:38:a7:e9:9a:eb:08:f3:8b:51:34:92:09:f0:06:
09:25:26:11:37:ff:66:df:44:b2:ce:fb:42:6c:e5:23:2f:ab:
49:7d:b4:5c:87:db:0d:e8:08:5f:1b:46:06:3d:ac:fa:ff:5c:
9a:ad:3f:a8:d9:5a:90:22:8d:59:70:9b:d7:7f:06:7a:fb:c5:
87:05:af:4a:da:91:d5:7a:66:05:83:88:58:f0:a1:ad:c4:0f:
42:03:0d:8a:49:19:3e:2a:12:62:26:70:46:ff:70:8e:cb:55:
a1:f9:13:50:36:21:ee:27:db:a8:4f:59:e4:cd:97:15:a8:80:
98:de:3e:b4:6d:ab:a1:f3:87:0d:f2:a4:6d:f5:14:06:9d:1c:
4d:47:1e:8e:fb:6f:13:52:84:cd:78:9c:5d:9f:07:7c:75:fe:
a2:b7:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:12:18 2025 by rpki-client