Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9ECD926E1E0211E9862ECE3FC4F9AE02.roa
File: 9ECD926E1E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier: b1+dgf59UEccR8IDWz1USJbStr/JyInr62IlvG7GHpc=
Subject key identifier: 4D:C2:23:AF:29:0B:CA:B8:6B:53:DB:0E:A5:9F:DF:5E:FA:1D:4C:45
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 387B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9ECD926E1E0211E9862ECE3FC4F9AE02.roa
Signing time: Tue 16 Jul 2024 14:30:23 +0000
ROA not before: Tue 16 Jul 2024 14:30:23 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133063
IP address blocks: 110.170.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14459 (0x387b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC
Validity
Not Before: Jul 16 14:30:23 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=669683ff-ad45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:e3:17:28:fa:c3:f6:f1:35:b9:1e:bc:4a:
8b:d0:98:1a:21:ea:96:ab:14:06:9a:7e:ab:83:c9:
50:31:29:36:60:ac:9d:c4:64:fa:56:6b:ef:e4:f4:
33:f6:67:5c:4f:cf:13:b4:2c:22:ad:6a:ef:18:ba:
a7:dc:9a:a1:69:97:34:fd:5b:77:1f:76:2c:e4:fa:
ef:d8:f0:9d:53:ad:8f:b1:d7:ac:3d:69:3a:b5:08:
fc:cb:ca:39:29:dc:97:70:08:c6:e9:32:d3:75:bf:
51:85:ce:0e:70:eb:d2:53:a4:26:e7:f0:53:a2:33:
54:05:2e:06:78:13:1c:05:24:40:e0:85:83:79:2e:
d3:1f:b4:32:18:19:3f:8f:55:d4:9d:b0:46:61:eb:
60:69:48:54:de:58:0d:de:98:6a:4b:6e:6a:28:1c:
3a:55:58:ae:1f:b3:8b:24:ca:6a:2a:36:5a:09:ec:
35:7b:d9:fe:1d:61:9c:c8:d6:a7:0a:1a:00:0e:c7:
ab:1b:cc:09:40:57:11:fe:d9:97:d2:41:b3:27:b3:
11:f3:a0:5e:12:ca:9b:8b:26:54:7d:0d:19:0f:bb:
7d:7b:3e:da:d8:14:b3:a2:d8:5d:50:a7:28:e8:00:
7b:4f:87:a9:da:25:d0:89:fc:a8:4e:80:c5:c1:87:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C2:23:AF:29:0B:CA:B8:6B:53:DB:0E:A5:9F:DF:5E:FA:1D:4C:45
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9ECD926E1E0211E9862ECE3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.170.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6e:5f:7b:9f:bc:8c:83:f2:19:44:1f:60:be:ae:6d:7d:24:
e9:6b:36:55:c7:04:ef:61:b7:68:91:0d:49:59:45:e3:a8:a0:
1c:b9:e2:36:6d:bb:d4:05:b6:c4:e3:a4:e5:93:cb:d7:ee:52:
49:88:29:62:b0:66:29:2c:93:cb:7c:93:ff:b9:c2:61:6b:18:
de:54:d3:08:0f:1b:52:6f:a1:14:06:b6:29:7b:dc:1e:c6:6c:
d6:ee:27:4b:a8:d3:6d:86:8c:a2:87:e5:e7:e0:27:c9:2b:5d:
63:2c:dd:c7:0e:6d:de:ea:19:00:fd:b8:58:ba:66:10:33:1f:
55:4b:9d:a5:04:b9:ec:1d:84:04:9b:f8:4c:e7:08:06:74:45:
0e:61:36:36:7e:4e:9a:1a:91:13:43:62:dc:d4:82:d9:b7:4e:
42:5d:a6:79:36:3e:f1:4d:01:fd:e5:58:40:cd:20:77:db:78:
e4:b7:ee:d1:10:da:b1:0b:61:e2:6d:e5:02:42:23:ca:2d:50:
a1:62:68:17:fb:f7:7f:6d:2b:02:9b:54:a1:c3:4f:9d:37:c9:
55:a9:e0:b0:ed:9f:2d:c2:79:d0:a2:bb:ac:a3:2b:cb:4f:8b:
1c:41:c9:5e:a8:4f:e9:89:ed:48:1a:c8:77:d8:dc:5c:2c:fc:
03:d2:76:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:12:46 2025 by rpki-client