Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/EB0C7BBC293D11EFB7D44673C4F9AE02.roa
File: EB0C7BBC293D11EFB7D44673C4F9AE02.roa (raw, json)
Hash identifier: IKl6nPyJLn/aAgur/HiMQsyDMgBlGZzK35JGFF29/M4=
Subject key identifier: 0E:00:EE:E1:51:23:BD:76:03:FE:52:01:4D:E1:B9:C6:5B:9F:0E:D4
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 8F
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/EB0C7BBC293D11EFB7D44673C4F9AE02.roa
Signing time: Wed 29 Jan 2025 13:39:02 +0000
ROA not before: Wed 29 Jan 2025 13:39:02 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 17466
IP address blocks: 58.2.16.0/21 maxlen: 21
124.4.44.0/24 maxlen: 24
124.4.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49
Validity
Not Before: Jan 29 13:39:02 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=679a2f76-03e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:e7:6d:7b:f9:9d:1a:55:f3:21:95:55:7e:
33:57:00:21:88:cb:9a:31:b3:64:58:4d:a7:a4:4d:
e0:d8:b2:e2:26:f3:0d:16:b2:4f:e5:d0:1e:b2:e5:
3b:e2:58:0d:24:aa:ed:c0:4f:d9:df:bb:3b:24:8f:
5b:cc:3b:cd:62:7a:3a:3c:5c:07:9c:50:fd:4f:fc:
5a:9f:99:08:c6:b3:36:16:d0:c8:38:db:c9:94:e6:
18:fc:c0:13:bd:ad:33:17:d7:59:92:39:c8:51:10:
a1:50:89:57:bc:4c:cf:d3:b5:e3:b5:86:27:ac:32:
a3:29:ee:fb:5a:b0:2b:cd:2f:e6:3b:0a:32:f7:8d:
ae:0e:17:26:01:cb:28:8d:78:16:f5:32:d1:52:82:
ee:a2:88:c8:86:10:b9:70:c1:66:8f:1d:e3:8f:b5:
4a:17:7c:9c:fa:e3:ea:9b:a8:50:69:05:5c:88:74:
21:89:2c:4e:18:67:ae:95:9a:25:d8:7d:30:1a:45:
37:16:7c:18:b4:af:fd:7b:f8:c9:ca:c5:7d:e1:90:
ba:1d:f5:90:5a:77:84:1f:78:94:09:ca:71:76:4a:
28:36:c7:a7:7e:05:fd:bc:3c:dc:01:40:87:17:a2:
0a:1e:e0:54:31:4b:8b:a6:7d:52:92:2e:f6:71:9d:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:EE:E1:51:23:BD:76:03:FE:52:01:4D:E1:B9:C6:5B:9F:0E:D4
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/EB0C7BBC293D11EFB7D44673C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.2.16.0/21
124.4.44.0/24
124.4.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:81:5f:1a:ff:eb:08:56:f2:ac:54:34:b0:b9:c8:3e:12:82:
02:e2:87:6a:5b:b8:be:cb:01:26:41:d3:79:4d:62:b5:72:5f:
f0:d8:63:88:1d:71:5b:fe:70:75:80:d7:64:c3:f8:d4:4c:b1:
00:af:c6:97:28:d3:1a:c0:31:bb:38:05:78:d8:97:58:d2:84:
2a:28:b5:3a:09:49:3b:af:7d:8e:9d:24:ea:c1:e5:0e:75:eb:
c5:c8:11:21:0d:cf:c6:1a:7d:89:b0:96:86:d9:2d:68:97:28:
69:9f:63:5f:1a:e5:a5:ef:e5:f0:04:e3:98:1a:05:e9:66:25:
d4:9b:16:db:78:fc:1a:43:4e:27:3c:2e:f2:1a:50:e7:a9:65:
38:b0:59:5f:a9:30:e0:75:85:a0:42:8a:b9:ff:9a:23:d6:20:
57:e8:6a:a3:e1:94:22:35:66:7b:f7:b8:f1:df:58:62:e2:7b:
27:8e:a5:19:e3:2f:7d:82:40:14:08:18:90:2b:9f:b3:39:09:
20:a7:cc:99:b2:85:f2:54:69:7c:7a:fe:05:8b:9b:8d:d3:41:
bc:fb:f5:59:17:83:e3:00:4b:ab:cc:81:a1:40:9d:d1:3e:15:
d1:4a:97:86:54:95:b4:0e:b1:80:f1:d4:39:14:3a:50:27:3f:
db:29:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:36:49 2025 by rpki-client