Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa
File: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (raw, json)
Hash identifier: 2LLb2r4TKV4C4xm7YgWWNmxZBFTpcVu/mQPHS2qVAXs=
Subject key identifier: A0:82:F7:9B:23:18:35:74:A3:AE:C7:8A:74:63:D5:88:7B:8A:F0:07
Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Certificate serial: 04
Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa
Signing time: Tue 11 Feb 2025 12:57:32 +0000
ROA not before: Tue 11 Feb 2025 12:57:32 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 58627
IP address blocks: 45.119.0.0/24 maxlen: 24
45.119.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A557
Validity
Not Before: Feb 11 12:57:32 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67ab493c-f8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:f0:45:ef:5a:5b:21:2b:a4:42:96:b4:b1:
a1:96:83:97:0a:1b:ff:6d:af:19:5c:5b:71:50:56:
a8:7c:07:67:f6:3e:fc:ea:3d:c4:17:e4:e9:f5:bf:
b9:03:69:fc:ce:1a:b1:1f:1b:e6:3d:d0:1f:28:61:
a4:fa:94:fb:f4:3a:4f:55:36:04:1d:96:e1:63:c1:
af:48:f8:7e:0a:6d:72:5a:09:fc:98:3a:c0:85:60:
7e:06:87:c5:db:47:1b:71:eb:49:13:60:22:25:55:
54:73:83:fa:de:fb:17:bc:67:bf:60:27:3a:72:4b:
b9:39:27:76:f5:6b:54:03:51:66:09:eb:98:32:da:
8e:34:08:a3:be:56:cf:0b:80:bc:cc:75:77:f4:ca:
19:e5:2e:8a:29:36:61:1d:7c:ae:ad:ec:fc:b9:97:
f3:8c:04:27:6f:85:b3:e8:dd:5d:22:87:6d:a1:a0:
8f:3c:4a:f8:56:c9:3c:27:cd:57:f3:bd:84:c0:ac:
df:83:44:a9:00:d0:c9:4d:11:21:4d:04:3f:eb:94:
3f:45:ee:10:75:12:1b:33:7c:b1:2d:b3:d0:0c:2c:
e0:e7:10:99:da:7c:90:8a:9f:a9:17:9a:80:77:2e:
72:20:cd:16:7b:ba:d3:c2:12:75:c8:be:00:ba:b9:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:82:F7:9B:23:18:35:74:A3:AE:C7:8A:74:63:D5:88:7B:8A:F0:07
X509v3 Authority Key Identifier:
keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.0.0/23
Signature Algorithm: sha256WithRSAEncryption
93:01:92:55:1e:81:f3:71:c0:6f:42:0b:6b:a3:98:41:0f:9e:
ab:ae:93:8e:f8:01:7a:75:31:20:ed:66:0d:63:a4:06:14:68:
20:7a:b7:9c:85:a6:2c:54:d8:3f:28:63:da:8c:f5:4f:98:1a:
94:c3:55:ad:11:5c:7d:d1:31:30:50:3d:c4:5f:48:f6:46:a7:
b2:96:ec:6e:f8:75:08:90:f0:b2:b3:0c:ea:40:89:71:31:dc:
82:70:f5:c9:44:7a:a8:f5:f5:94:ae:e8:60:a9:a0:92:95:0c:
ff:09:bd:ac:bf:95:09:cb:ab:d9:44:07:e9:1d:4d:25:de:11:
76:da:2f:a8:e1:64:3f:e0:f2:fe:05:7d:ea:b4:0c:d3:a5:ff:
51:c3:b8:4c:28:96:15:bc:49:1c:28:bc:b3:13:2d:2d:c2:76:
7e:b4:92:d9:d1:66:e4:77:21:83:ba:11:3b:c3:84:5e:95:17:
19:26:eb:a5:10:68:86:f2:4e:e7:d0:2c:d0:31:1e:a5:59:08:
4d:6d:0f:13:ad:cc:02:4b:c6:11:3a:34:b7:f5:d8:7e:f9:1f:
f8:9d:ab:4d:ab:e8:d1:42:f3:01:70:d5:87:5d:c5:f1:2e:68:
f4:66:e8:65:30:a4:8b:e8:b1:0f:5d:8f:6a:c8:d2:66:93:b6:
7e:e4:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:12:20 2025 by rpki-client