Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa
File: 52319814DF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier: YQdCK4DolCISMw/Ig9l0kcG19vgalQwFEoS0lt2ncjs=
Subject key identifier: D3:D6:9B:94:5C:AB:76:25:B6:61:F5:AE:D4:B5:05:61:BB:2F:34:FE
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0518
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:49 +0000
ROA not before: Wed 31 Jul 2024 02:33:49 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45255
IP address blocks: 58.137.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA
Validity
Not Before: Jul 31 02:33:49 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a28c-e26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:fa:06:82:a7:06:b6:c1:d2:8f:2e:b7:d9:
8e:8e:0d:a1:8e:41:b8:0e:69:ea:44:0c:49:37:76:
a4:5b:28:99:76:64:31:fc:dd:4a:b6:4b:3c:83:f4:
a9:2d:54:bd:2a:2a:ea:c7:0f:1f:fd:ed:56:76:0c:
2c:d3:7d:2b:2b:18:b3:17:e9:f1:d0:0f:07:ee:f5:
36:54:13:ba:1d:c6:8c:7c:92:b1:21:73:69:a8:7a:
8c:e2:20:92:9e:ac:10:02:d5:17:c8:f0:42:6e:09:
5b:59:33:74:38:fb:5e:d4:2f:90:12:bf:f1:70:4a:
8c:55:84:bb:fc:fd:c6:ee:fb:81:a0:55:af:3a:64:
49:e1:e4:89:59:34:2e:2f:c2:c4:bf:fe:ff:2c:45:
5c:5b:00:2c:fc:b9:2a:d8:f8:7b:c3:b4:38:39:db:
c4:03:b6:93:c2:f5:8b:69:49:88:35:e3:e1:e8:13:
ba:9b:e6:04:95:72:2e:89:1b:6e:6d:cb:9d:b4:2a:
00:92:5a:b2:8d:9c:1f:70:bf:0d:67:c2:e9:e2:0b:
49:a8:a2:83:1c:05:05:27:23:3b:bd:18:33:62:e2:
80:2b:05:f4:30:dc:4d:39:4f:9d:8c:c9:dd:04:f8:
c6:54:b5:c8:67:5b:0a:ea:61:af:2a:df:60:76:3c:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:9B:94:5C:AB:76:25:B6:61:F5:AE:D4:B5:05:61:BB:2F:34:FE
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.137.60.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6c:cc:23:ad:58:0a:66:b9:eb:ff:ba:ea:cb:07:68:6a:3c:
96:40:c0:03:e2:2e:46:da:fd:d2:ca:af:ed:b8:19:d9:18:d7:
bb:c1:09:ba:c6:ce:32:c1:72:a8:a1:4e:12:b2:d4:04:ed:a6:
61:e7:18:88:19:bf:e6:13:88:ad:ca:6b:f4:45:93:9b:6d:4b:
cc:e2:55:31:e2:80:21:df:c6:ee:d3:de:15:75:f3:58:ee:ab:
bf:b2:ca:2f:d6:33:cf:53:be:2b:57:73:ea:07:35:e9:48:c6:
a2:fe:81:e2:91:2e:64:b2:01:58:88:ef:ca:e6:2e:90:76:fb:
86:ec:db:11:d1:cd:02:5e:83:37:f3:1f:5e:c7:97:56:a5:9e:
10:d3:44:eb:9d:77:83:26:17:95:66:13:73:fd:7d:96:30:16:
fd:95:58:51:5a:e3:e8:0e:82:c3:b5:60:2f:06:18:c8:83:38:
3d:0e:2e:98:d8:f9:67:05:65:77:96:e4:6a:59:15:3f:90:fa:
b2:8a:f9:2b:4d:2f:3a:6b:fa:cd:de:57:99:2d:a9:9b:6f:39:
f4:14:a7:74:65:a3:69:3e:81:4c:a5:66:dd:4e:1e:d6:9f:dc:
2b:d4:52:da:c6:85:d7:87:b6:22:85:4c:42:f5:60:7e:41:25:
86:ed:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:08:41 2025 by rpki-client