Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/F0B154E6085A11EBA6864D71C4F9AE02.roa
File: F0B154E6085A11EBA6864D71C4F9AE02.roa (raw, json)
Hash identifier: lS99nYEJf47mH+uz3vQLejaGLFETexj9dK3L1OTP7SM=
Subject key identifier: C8:DE:8E:8D:36:A8:DC:1D:A6:82:F9:A2:F5:64:6A:93:11:51:1A:B6
Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial: 06FE
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/F0B154E6085A11EBA6864D71C4F9AE02.roa
Signing time: Sat 04 May 2024 23:31:48 +0000
ROA not before: Sat 04 May 2024 23:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7545
IP address blocks: 58.6.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B0A3
Validity
Not Before: May 4 23:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6636c563-a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:2a:30:53:7f:08:ab:ba:8b:57:c8:d8:ed:
f6:b2:6c:29:5a:39:64:6b:e9:db:9f:cc:72:e8:bf:
2d:2d:f0:8f:a1:2d:46:80:14:cd:6e:89:8a:a8:e7:
e6:3f:a6:be:e0:9c:30:6a:52:b2:5c:36:64:16:e5:
28:be:11:7c:ca:92:42:04:e2:57:3b:84:5a:00:33:
80:3c:17:8f:50:8f:ff:37:43:3e:9e:85:05:36:ef:
09:6c:b2:b5:57:19:87:77:80:a2:72:4e:ff:e3:4e:
a2:dd:a7:f2:8b:95:b5:35:6f:5e:a0:d4:f6:41:b4:
2d:04:89:d8:21:29:5a:ca:c7:5c:2b:94:79:5f:f8:
ad:41:ca:59:61:0f:06:03:dd:b5:44:51:98:ef:3d:
6e:30:01:0c:3e:41:1e:a9:cf:24:9c:ea:ad:b0:fd:
9c:f1:8b:67:47:04:4c:25:86:64:01:60:e3:91:c2:
eb:25:18:7a:77:ec:f7:de:8f:c4:e0:bd:d2:b2:c0:
f4:ba:e1:2a:d7:a3:e6:95:c8:1c:2d:1a:3f:b8:ad:
ab:6d:21:4d:59:50:72:d6:b3:a0:c1:b4:0b:04:8a:
b8:6d:1e:81:37:d9:5e:2e:22:b2:64:4f:43:a7:88:
ac:4f:be:15:72:f0:37:5b:6d:7a:9f:d0:aa:09:f9:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DE:8E:8D:36:A8:DC:1D:A6:82:F9:A2:F5:64:6A:93:11:51:1A:B6
X509v3 Authority Key Identifier:
keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/F0B154E6085A11EBA6864D71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.6.128.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f4:c6:3e:83:cb:b2:3f:d3:cb:3a:cf:5b:14:28:ee:4f:21:
18:02:eb:17:e5:7b:fa:71:08:77:cc:a6:67:89:de:04:53:f3:
aa:e6:cf:3e:71:39:6f:3d:0f:48:7b:e6:c0:98:b5:2e:a9:5a:
af:7d:3e:85:36:c8:51:f7:b1:a6:d1:89:94:7b:68:9d:08:3d:
25:b8:22:47:74:9b:4a:56:45:0e:07:ee:47:d2:0b:c9:73:94:
b8:f6:e0:e8:ed:fa:b5:63:b6:5c:d8:25:76:31:56:ee:8c:72:
96:cf:b1:23:5d:19:d2:de:a4:39:fc:4f:8c:c8:e9:fc:d5:79:
36:d9:8d:d5:a9:87:06:a2:fa:02:af:c9:64:08:c8:be:07:e2:
53:78:b4:c6:1b:6b:85:34:39:f0:5c:4d:0f:d6:56:82:bb:09:
ba:77:25:57:86:c0:34:c9:3d:95:67:4a:ea:c7:fe:bd:50:74:
b3:7e:c6:ad:b8:d8:81:e3:b3:54:86:44:c6:6f:ea:34:f5:e1:
cb:62:85:25:63:8f:e7:8e:f7:dd:23:ae:ae:23:4b:7e:1a:c8:
e1:99:e4:8b:68:04:fe:24:23:31:64:73:1f:f3:1a:f4:82:fa:
7a:8f:3d:74:00:a3:06:e0:3f:db:1b:71:a0:e9:4f:3d:0e:8f:
7e:92:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:50:16 2025 by rpki-client