Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa
File: CDD0BE9EF99111EF945B6751C4F9AE02.roa (raw, json)
Hash identifier: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk=
Subject key identifier: F0:7C:99:A9:0C:56:38:4D:A7:25:B5:9D:46:BA:C9:00:FE:13:7D:51
Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial: 05
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa
Signing time: Wed 05 Mar 2025 07:17:13 +0000
ROA not before: Wed 05 Mar 2025 07:17:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 45691
IP address blocks: 163.61.206.0/23 maxlen: 24
2001:df5:2040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91418C7
Validity
Not Before: Mar 5 07:17:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c7fa79-91df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:96:e8:c2:ac:bd:31:37:7c:92:2c:95:45:
c9:43:25:d8:78:90:f2:13:4e:a0:2a:9c:7c:7d:3d:
d3:4c:45:55:b7:a4:ff:bc:2e:bf:40:7c:5a:e5:4d:
30:f9:38:33:8c:43:cb:30:4e:c6:91:05:d6:56:84:
d9:cc:b1:1d:d2:a9:13:23:f7:90:b4:fe:d1:49:5e:
7b:b6:46:6a:d2:6c:4f:d3:7c:c1:d2:d0:c5:2c:e7:
1d:59:f5:5b:bf:2c:7e:db:b1:14:14:52:11:99:e8:
33:ae:90:6e:b7:37:d0:78:0a:c1:c2:fd:4f:89:49:
d2:b3:c3:c4:19:b9:61:88:68:88:46:20:e5:45:6b:
53:12:6a:b5:95:66:78:7d:11:fb:41:3b:56:bd:d6:
b2:a2:8e:eb:f1:42:93:d1:7c:be:2c:22:e7:d5:73:
67:3b:cc:b5:77:e8:9b:a0:86:28:51:ba:8f:21:36:
1d:25:8d:f1:57:ad:43:b5:13:65:dc:88:02:56:56:
0a:d0:d7:7f:00:83:52:d8:c3:3e:ae:8b:33:4f:7c:
17:86:92:79:42:6a:56:4e:3c:d3:eb:ec:76:e4:10:
c1:e2:63:a7:ef:88:d9:f3:a6:db:e1:60:60:db:40:
17:fb:cc:20:c2:9d:09:0e:ce:94:3f:14:e9:52:da:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7C:99:A9:0C:56:38:4D:A7:25:B5:9D:46:BA:C9:00:FE:13:7D:51
X509v3 Authority Key Identifier:
keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.206.0/23
IPv6:
2001:df5:2040::/48
Signature Algorithm: sha256WithRSAEncryption
04:f5:58:4a:1c:26:72:75:78:b7:08:24:fe:7c:0e:f8:7b:e0:
06:09:e3:27:4b:9d:7c:e9:77:b5:bc:23:8a:e9:a2:10:b6:49:
9c:9c:83:1e:45:cc:94:32:9f:38:17:fc:d5:10:06:a4:ee:5b:
76:31:b6:75:23:1c:ad:16:88:25:2c:c8:3b:90:51:e5:1e:b9:
8f:e0:0c:ee:16:6b:32:8a:45:28:41:0b:3e:36:25:32:cb:0b:
9c:51:ac:be:b9:2e:6b:05:d6:1c:25:0b:b6:5f:7f:b4:2c:51:
60:e9:7d:32:cb:29:42:39:f6:fa:9c:c1:46:48:ef:13:2b:98:
4c:21:ba:d4:24:d9:84:95:bc:48:19:5b:d6:cc:2d:e2:60:40:
c8:21:b8:10:80:ed:79:9f:af:2d:c4:eb:40:0a:2c:09:e1:85:
88:c1:d2:be:06:92:48:83:73:af:48:04:c1:4f:2e:42:e5:06:
a9:9e:57:e0:ce:56:f7:d3:ac:2d:e1:31:2f:1e:ca:d0:65:f9:
fc:67:ae:6d:a3:55:49:51:fc:92:e2:5d:6b:e1:90:31:b2:9f:
5d:b7:91:86:b9:14:92:f1:6b:3f:42:d0:ae:4f:6b:e1:e2:7a:
dd:27:1c:b4:8c:db:89:a9:c4:87:2a:16:79:06:6a:d9:f0:c9:
97:9a:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:34:05 2025 by rpki-client