Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/7E15FE0C27B711EF8867AA49C4F9AE02.roa
File: 7E15FE0C27B711EF8867AA49C4F9AE02.roa (raw, json)
Hash identifier: bkjGd2fWeRuAi3rbmd0l8StmCAy/JWREckf9XTM50O8=
Subject key identifier: CF:22:0A:DB:0E:67:97:FC:A9:27:2A:38:8B:A7:F1:61:15:DA:05:5D
Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Certificate serial: 1A
Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/7E15FE0C27B711EF8867AA49C4F9AE02.roa
Signing time: Tue 11 Jun 2024 05:57:32 +0000
ROA not before: Tue 11 Jun 2024 05:57:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138607
IP address blocks: 78.138.12.0/24 maxlen: 24
78.138.13.0/24 maxlen: 24
78.138.14.0/24 maxlen: 24
78.138.15.0/24 maxlen: 24
213.255.200.0/24 maxlen: 24
213.255.201.0/24 maxlen: 24
213.255.202.0/24 maxlen: 24
213.255.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5CA
Validity
Not Before: Jun 11 05:57:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6667e74c-4fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:81:09:20:8b:0c:35:d3:c0:80:c0:e7:fc:
eb:be:0e:15:d5:a1:aa:17:9d:86:5a:9a:b7:89:27:
56:eb:9f:a7:9f:55:bf:f7:c1:77:9e:a4:1b:80:b0:
93:fc:60:c5:54:29:26:88:73:eb:74:f5:34:db:a9:
a5:84:df:5f:6c:d7:a3:ae:79:7c:b7:72:79:1e:52:
94:0c:25:b4:be:02:62:32:e7:c2:91:38:3b:a6:24:
38:1f:a9:c0:fe:aa:32:a7:eb:ac:cc:fb:51:0c:38:
cb:69:e3:b6:6c:8a:ab:a1:da:ff:fe:e4:1b:94:cc:
7a:0d:ce:11:db:df:4c:3f:69:3f:0d:19:fe:42:4f:
1a:84:fe:02:9d:8e:d0:ff:97:17:26:4e:57:ef:b5:
0a:e2:00:8f:03:7d:3d:a3:9a:a4:c6:e4:18:4b:d4:
cd:34:c0:ec:4f:fb:01:21:f3:1c:20:bb:f3:3d:63:
66:c7:1c:b0:74:9e:2e:5e:83:cc:49:31:2e:c4:76:
1b:e0:14:3b:9b:bf:8b:4a:2e:80:dd:1f:e3:aa:10:
00:94:ba:b3:be:8f:8e:d6:3c:7e:5f:30:5a:7e:fe:
33:f8:44:2a:de:1c:34:d8:aa:57:0a:00:6c:48:d4:
fe:e3:20:fc:e4:9d:40:24:ea:8b:c0:e0:03:89:01:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:0A:DB:0E:67:97:FC:A9:27:2A:38:8B:A7:F1:61:15:DA:05:5D
X509v3 Authority Key Identifier:
keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/7E15FE0C27B711EF8867AA49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
78.138.12.0/22
213.255.200.0/22
Signature Algorithm: sha256WithRSAEncryption
02:10:e0:ab:61:8d:e0:b0:4b:55:cf:55:60:74:85:70:84:51:
ba:65:73:27:7e:a5:ab:12:cd:c2:a6:a6:74:df:d8:17:e2:d2:
ba:93:b6:4f:ee:30:81:8b:56:e5:02:28:9e:65:3e:42:10:eb:
f2:08:bd:97:00:c4:23:3a:b6:94:70:93:80:92:db:85:da:40:
bd:04:f0:0b:03:e6:e4:1c:c4:e1:22:e9:1b:8a:22:b6:e6:90:
bd:d9:4a:c5:c6:29:3f:9a:1b:a4:1a:69:20:f2:6d:95:c6:61:
58:69:11:20:88:21:97:c3:0f:d2:f2:07:fb:b9:c6:95:08:d2:
d8:b2:78:e3:90:76:46:e6:ac:7e:53:d7:f2:68:a9:82:9e:91:
6b:53:7e:9c:3f:f2:3d:ae:cb:7f:aa:fa:d5:43:dd:91:6d:f6:
28:7e:df:70:79:1b:2c:94:fc:cd:6c:b5:8e:00:e3:d8:cc:d8:
b9:c7:ef:41:bd:a3:e7:89:d1:79:21:15:3e:d9:ab:6f:01:60:
c6:b7:39:ba:a3:4d:ad:22:65:90:2f:8e:37:1f:3a:d8:0c:3c:
f8:6c:98:fa:c2:0f:55:58:5b:89:ea:fd:8f:20:62:74:fd:01:
c9:24:f3:3c:68:54:11:43:3d:8b:ca:97:8b:9e:ff:8c:47:38:
61:21:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:56:34 2025 by rpki-client