Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/6D3CF65A134311EEA2AF3B1EC4F9AE02.roa
File: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (raw, json)
Hash identifier: UBiYNqcmtBfIzuh2rKChQRqBKv4o6kiL3PCKwJHHiWM=
Subject key identifier: 3D:18:88:B2:F1:97:E7:E6:3F:D3:AC:DF:A6:BB:C4:28:54:7A:12:85
Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Certificate serial: 02BD
Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/6D3CF65A134311EEA2AF3B1EC4F9AE02.roa
Signing time: Tue 23 Jul 2024 02:44:42 +0000
ROA not before: Tue 23 Jul 2024 02:44:42 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 55330
IP address blocks: 175.106.40.0/23 maxlen: 23
175.106.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130138
Validity
Not Before: Jul 23 02:44:42 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=669f1919-8af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:41:cb:cc:2a:24:35:c7:52:30:da:67:57:
de:4c:53:cb:88:65:29:4e:ac:60:99:86:02:9d:3e:
cf:bb:b6:3d:cd:13:2a:c0:7a:f4:72:dc:d7:6e:64:
1c:0c:6a:d0:bd:dc:c8:77:f9:fe:05:b3:da:e7:47:
bf:0a:96:44:7e:a2:6e:85:8b:f7:a2:70:a7:78:67:
6c:a5:b0:a4:d5:89:8c:8d:d8:85:72:45:19:db:9f:
93:94:80:d4:48:44:f8:db:a2:e8:7f:e8:76:e3:24:
ad:fe:b2:89:c0:1b:72:e3:e8:d1:d1:50:68:81:f2:
9e:9f:54:dd:63:12:64:9b:23:3b:58:c5:e4:96:8e:
c3:a4:98:6c:9b:a6:67:3d:a0:f7:73:00:67:7c:f2:
d1:ea:b1:a2:d0:36:55:77:48:c5:f2:04:bf:81:f1:
e7:ef:0b:86:0c:9d:b6:40:cb:a3:67:9c:b1:01:6b:
0c:4b:9a:c1:a3:86:45:59:cf:fb:a8:ef:2e:6d:ce:
8b:96:45:2b:1d:f7:fb:28:a9:6f:3e:7e:84:3a:30:
82:38:19:52:60:b6:92:2b:2e:0a:5b:6a:4b:b2:fa:
e2:6c:0b:f3:d4:60:1d:f0:4f:68:0c:36:31:a8:23:
e1:68:6f:65:d5:dc:8d:a5:6e:dd:3f:c2:22:ee:d5:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:88:B2:F1:97:E7:E6:3F:D3:AC:DF:A6:BB:C4:28:54:7A:12:85
X509v3 Authority Key Identifier:
keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/6D3CF65A134311EEA2AF3B1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.106.40.0/23
Signature Algorithm: sha256WithRSAEncryption
81:f7:47:b2:39:ba:5e:50:44:f1:45:27:59:20:51:08:63:34:
92:d3:86:c0:3d:1d:a3:58:0c:b4:5a:e9:17:f5:55:4c:43:07:
d1:f7:db:14:c5:6a:2b:24:f8:c5:44:87:a3:8a:60:97:d0:8a:
bc:7a:dc:00:d8:19:af:25:fe:ca:bd:42:9b:87:73:a8:61:0d:
c3:10:f6:1d:fb:15:a7:bb:bc:2b:f8:57:17:e0:b9:44:c9:1f:
5a:37:4d:f7:1d:2d:fb:29:25:af:b5:4a:16:3b:a0:f2:86:1d:
c6:2f:f4:65:5c:cf:83:d6:1f:6c:f2:24:13:d1:f2:98:4c:35:
ba:5f:b6:b8:a7:d8:28:c3:66:80:a2:71:5e:d3:34:01:84:3c:
49:df:cb:0b:97:40:68:33:e0:be:70:e6:a3:35:02:4b:f9:28:
b8:9d:5f:4d:bc:5b:36:bc:b3:7f:1d:13:73:67:4c:d7:c8:77:
9b:1c:5f:b2:d7:c7:4e:fa:fa:0d:9c:91:63:da:f8:88:6b:89:
81:4b:8b:98:95:ec:bc:e7:e9:bf:00:17:1a:83:db:d6:2f:6e:
8d:1a:ba:61:b8:52:8e:19:a2:9c:c6:88:65:72:84:16:d0:ed:
88:19:86:f8:28:60:92:0c:2d:02:0c:54:28:26:cf:ad:ba:c2:
7c:5c:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:53:55 2025 by rpki-client