Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa
File: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (raw, json)
Hash identifier: yAY/Xp66VBMbd2Lc5/zcmj9DVNGz6j22BacFuet4uZ8=
Subject key identifier: 09:5B:4C:3B:88:94:8D:4A:86:18:72:81:91:38:49:0F:D3:2C:29:78
Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
Certificate serial: 02EC
Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa
Signing time: Sat 18 Jan 2025 07:08:38 +0000
ROA not before: Sat 18 Jan 2025 07:08:38 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153494
IP address blocks: 45.123.196.0/22 maxlen: 24
103.192.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273F9
Validity
Not Before: Jan 18 07:08:38 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=678b5376-066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:1e:ba:da:d9:86:f6:bf:d6:3d:0a:66:c8:
a9:de:20:da:89:43:4b:8f:df:b6:ca:32:af:4f:e6:
27:65:14:8c:1a:ab:15:00:26:8a:9a:ab:8b:4d:f1:
9c:12:6f:7c:a0:e2:98:e7:5d:8e:fe:01:27:98:1c:
7d:51:9b:45:9a:fd:7b:ac:81:5c:7f:d5:98:b5:dd:
d7:3c:5a:5d:62:90:46:59:fd:85:dd:c5:49:6e:fb:
39:9f:3e:3e:5d:79:b4:8e:04:a6:02:41:ff:76:12:
5c:7c:22:f7:ea:6c:ff:c7:48:0c:dd:ba:a3:03:f6:
f6:f8:96:10:ed:07:68:f6:ad:ec:bd:02:e3:a0:34:
bd:5d:03:09:7b:62:c8:27:51:c5:7f:71:d5:53:29:
63:ec:ff:2a:53:89:42:a4:82:a6:e0:b9:28:43:4e:
1b:94:48:45:8e:3e:93:62:bf:1f:9a:98:ee:ca:57:
9b:f1:27:60:71:33:39:39:b4:9b:02:0a:45:17:f3:
0c:f4:92:f6:0e:61:5c:8b:3c:98:c4:be:1a:bf:8c:
8d:02:67:59:1e:74:4b:0d:81:f2:ae:ad:db:c7:db:
10:7f:0d:0e:46:64:b9:e9:03:bf:df:cb:1e:75:fe:
c0:08:30:7f:6d:da:ad:13:f9:06:48:da:9b:d0:7d:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:4C:3B:88:94:8D:4A:86:18:72:81:91:38:49:0F:D3:2C:29:78
X509v3 Authority Key Identifier:
keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.196.0/22
103.192.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:e8:86:96:76:ca:bb:98:13:a5:c2:36:22:95:91:83:f0:e0:
93:bd:3c:2c:1a:04:61:15:a3:37:43:fa:49:95:00:81:75:8c:
ee:f3:1d:7b:d2:7e:1e:87:b3:91:ab:b8:6d:22:5e:bc:54:9d:
6f:3e:a0:5a:70:29:59:f8:25:db:c2:99:ff:a5:a5:00:17:6c:
b5:73:f6:af:dd:0a:86:fa:18:8e:40:bd:8e:90:3f:9e:8a:04:
70:cb:f7:59:01:5e:b6:26:2d:1e:5c:0c:eb:16:57:6d:f6:49:
f6:32:7b:f7:84:a0:ec:1c:c3:6f:34:a6:46:25:ce:55:8a:c5:
ab:63:11:b7:75:96:b3:20:ea:87:a2:9c:db:b0:74:0b:5c:e6:
a6:bf:14:f2:6e:d7:83:19:cb:47:95:ce:d7:bf:2f:88:23:a0:
ed:b9:9c:7a:2b:00:14:d3:10:06:5d:e7:4f:2d:2e:40:b0:60:
a4:3b:34:2d:d4:3b:a4:c8:5f:6a:74:8b:23:25:c8:be:86:8f:
5a:08:d0:91:54:e5:c7:21:37:3b:ee:34:39:1b:62:14:a4:31:
84:3a:52:25:b6:3d:95:af:56:30:59:78:e2:d4:e0:cd:df:58:
5b:6a:c0:29:96:9f:82:fb:dd:d0:48:20:5c:c7:6c:f4:17:d2:
ac:ac:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:26 2025 by rpki-client