Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
File: C2A2E774EEC311EE8832C93AC4F9AE02.roa (raw, json)
Hash identifier: ms7snh2IzeS7RUyS63vDyik3Jw03vBKHQY1xlDWMLMg=
Subject key identifier: CB:D8:74:18:25:6E:6C:14:5B:C7:23:95:0B:AC:C5:B4:9D:B1:BF:FE
Certificate issuer: /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
Certificate serial: 95
Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
Signing time: Mon 13 Jan 2025 04:37:56 +0000
ROA not before: Mon 13 Jan 2025 04:37:56 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152131
IP address blocks: 210.79.145.0/24 maxlen: 24
2001:df3:36c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91486D3
Validity
Not Before: Jan 13 04:37:56 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=678498a4-b023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:a0:52:a8:c8:7d:36:44:cc:a2:1d:40:15:
da:fd:37:c2:b3:b4:4f:69:6d:f0:99:8f:42:cf:43:
2c:76:79:20:af:bc:4b:c6:93:c5:a1:a1:c0:8c:1f:
c2:69:7c:d3:31:b4:f7:6f:5e:b7:2b:26:1e:cb:4d:
a6:63:e5:14:94:1d:03:cb:41:75:b0:08:73:fb:8b:
2c:0f:78:ed:8e:7f:b8:2b:38:0c:d1:c4:e8:d8:ac:
81:70:42:30:57:83:e7:c7:fa:4e:4d:9c:09:ee:61:
63:e4:ea:d5:e2:e2:45:c1:07:15:dd:ec:50:4f:78:
3a:29:55:4f:1c:18:b1:11:41:8f:8a:d1:cb:d0:17:
ff:83:fb:c7:0f:98:e0:78:51:bc:f1:63:ce:29:7a:
b3:e7:93:f7:6c:50:cc:96:19:d9:b9:eb:cf:68:ba:
ad:91:2f:22:d3:b1:6a:8d:52:f0:cb:c6:a9:cd:7a:
10:44:0a:d2:17:6a:30:d6:41:94:81:07:15:80:7b:
7d:9e:7c:05:45:b5:a9:97:bf:69:1f:26:83:61:34:
27:a3:f2:78:45:8f:4e:a9:bf:ff:97:80:a2:37:fd:
e9:86:7c:be:78:c5:b8:84:44:f0:d2:b5:c1:a8:ee:
58:fa:29:33:49:eb:82:32:13:c1:6d:62:60:53:0c:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:74:18:25:6E:6C:14:5B:C7:23:95:0B:AC:C5:B4:9D:B1:BF:FE
X509v3 Authority Key Identifier:
keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.145.0/24
IPv6:
2001:df3:36c0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d4:e8:9c:9a:d7:3e:c1:65:ef:32:a8:93:1c:5c:61:8b:9b:
1a:ad:1e:e1:d9:02:c2:b9:09:51:8a:55:bd:c1:00:b1:53:71:
64:92:38:36:4d:fa:56:4c:88:49:92:bc:96:e6:b3:22:a3:5a:
ae:b0:f9:11:35:44:92:18:80:2f:2e:4a:75:a1:46:46:f4:42:
2c:54:fa:6d:8f:da:b8:bd:1f:45:2e:3e:a5:9a:de:4a:4a:ec:
c7:fb:42:b2:c8:dd:41:0d:bc:7e:8b:49:6c:d3:8e:d8:43:6f:
ec:4a:0e:fa:79:e4:b0:c7:08:60:15:f9:2e:f8:77:49:25:fa:
2c:11:e7:5d:13:f2:61:b7:ce:27:70:00:3f:d8:cb:bf:ae:9c:
e4:95:42:6a:22:47:a9:2c:f8:f1:a0:fc:da:9f:04:dd:e9:a8:
c3:b2:62:6d:75:ab:9a:80:27:ca:fa:2a:ed:44:dd:fb:a2:ac:
ac:0f:93:ab:6e:d4:f5:e9:61:19:9d:43:1d:92:7a:77:30:f9:
73:4d:33:e8:49:86:7c:08:09:68:d5:47:6b:be:2d:42:8c:c5:
86:2f:9f:0a:55:14:33:e9:56:c9:20:ef:25:e5:33:5f:e6:47:
25:f8:87:71:5e:9c:0b:5d:d3:e2:ee:ae:d8:c5:41:24:60:7b:
fb:3b:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:23 2025 by rpki-client