Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
File: 7DDB945CDF1011ECA2548C86C4F9AE02.roa (raw, json)
Hash identifier: vFTjAuZjggtdG9lye3yJ7P7APNCds0fLCxsMo8+3z20=
Subject key identifier: C5:84:7B:7C:17:5D:B9:F0:85:15:F9:AD:68:1A:13:53:0F:DE:C9:47
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0505
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:32 +0000
ROA not before: Wed 31 Jul 2024 02:33:32 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 17980
IP address blocks: 58.137.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA
Validity
Not Before: Jul 31 02:33:32 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a27c-3754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:a8:e0:c2:19:23:c2:25:6e:f8:e6:7c:ca:
a5:d7:c1:05:99:3d:29:29:23:b3:d0:c7:b0:d6:26:
b9:74:89:87:78:13:00:cb:db:cc:eb:25:82:19:3e:
8c:7e:5a:94:10:37:1b:87:9c:61:54:d0:6e:82:8b:
df:b0:8a:88:9e:f5:ca:f9:3c:92:e3:f4:2f:80:c4:
2e:be:ed:f1:d7:51:0e:3f:de:57:06:43:cd:26:31:
9e:06:4f:96:49:62:7c:03:15:de:b0:88:3a:b1:f8:
33:63:27:84:5a:9a:65:89:fc:47:4e:36:22:38:06:
a3:59:1f:a0:e5:86:fa:32:84:08:79:8a:af:36:99:
6d:fd:42:4f:85:e6:a7:06:50:94:a7:01:ba:3e:77:
8a:ea:39:03:99:c2:9a:af:da:a6:f7:ca:53:f8:4a:
7b:e1:cb:44:57:36:3c:77:d5:89:8c:63:0c:54:95:
36:51:6b:86:23:d0:ba:0f:f6:29:3c:fa:8d:4a:f5:
0c:c6:e0:aa:f0:b4:76:be:df:5c:35:52:62:51:b9:
ac:2d:22:ed:57:eb:92:da:8c:42:c3:cd:ee:cb:a8:
f9:63:b7:b1:3b:84:cc:1b:eb:53:68:6d:a7:87:85:
23:8d:a2:e4:cd:70:bf:82:89:15:ee:bc:7a:9c:7f:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:84:7B:7C:17:5D:B9:F0:85:15:F9:AD:68:1A:13:53:0F:DE:C9:47
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7DDB945CDF1011ECA2548C86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.137.108.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f2:b6:94:e8:c7:b2:cd:a9:77:d4:78:d8:4c:e2:0c:f3:58:
9e:fc:b6:e3:ea:4b:6c:91:ad:8b:10:00:e3:d5:67:6f:cb:7c:
45:b8:8c:ea:3a:46:96:55:0c:b8:cf:d0:29:59:9e:11:d7:2f:
d1:fd:1b:47:64:b4:97:5b:33:3e:a3:55:fd:fb:90:a0:ed:bd:
41:dc:9d:7b:d6:a4:f1:fb:72:d6:78:e0:43:e1:9c:ca:1a:41:
5a:a7:07:99:58:bc:a2:66:93:9c:ac:db:df:24:94:32:41:45:
eb:f7:f3:11:a9:5b:b2:77:3b:70:7f:56:7c:33:91:1f:7b:d7:
d7:98:ad:65:06:af:4a:49:d1:07:a9:98:69:11:70:86:3c:ad:
05:81:32:91:62:22:01:b8:d7:50:66:9f:ea:57:ef:36:3b:fc:
27:d1:58:8c:65:91:af:a2:1a:b6:ec:fb:0b:4a:b1:47:ee:5c:
cb:43:e6:4b:b1:b8:ca:b0:1c:f8:60:50:35:ca:16:21:6b:56:
ba:dd:2a:51:b7:60:8b:ff:19:7a:5a:7e:37:c5:af:6c:7a:83:
10:39:13:c6:fd:cc:c4:86:12:ec:c1:5e:b9:71:db:13:27:82:
0f:2d:7a:b7:32:c6:bc:23:f8:b7:19:45:53:d2:69:53:97:55:
28:c7:c2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:30:38 2025 by rpki-client