Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/4971496EAE1B11EF8FFE0422C4F9AE02.roa
File: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (raw, json)
Hash identifier: uKiFFY8vpTe1cBpydcM6MoqXZ6WNPxhGwHMFnSCc+M4=
Subject key identifier: 4E:26:EF:C5:0F:A0:84:05:84:39:31:1E:58:F8:69:EC:32:D8:1B:27
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 282C
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/4971496EAE1B11EF8FFE0422C4F9AE02.roa
Signing time: Fri 29 Nov 2024 06:29:29 +0000
ROA not before: Fri 29 Nov 2024 06:29:29 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 15347
IP address blocks: 124.29.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10284 (0x282c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66
Validity
Not Before: Nov 29 06:29:29 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67495f49-0bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:74:df:c5:c7:f9:be:dd:ff:c0:1a:2a:37:
f6:d2:10:88:c5:29:17:23:5b:c3:14:b6:48:2f:bc:
8e:4a:9b:ea:23:d8:3c:af:d7:41:3c:dd:93:aa:e8:
cf:53:f0:00:ca:00:b1:07:0f:9c:11:a0:2e:a2:56:
d8:90:c8:02:1e:13:59:ce:6d:fe:f2:2d:16:94:35:
06:42:e4:10:14:f6:13:58:43:32:48:4b:24:b3:aa:
2f:0e:92:ec:48:8d:7b:6a:17:2b:f7:9f:52:d1:a4:
b8:43:0b:ed:6b:69:4b:71:01:2a:84:7f:19:38:20:
0a:d1:21:98:e8:cf:95:6d:a3:e0:35:d0:6f:55:42:
43:11:1d:e6:37:43:22:dd:35:83:2d:5e:c2:04:f9:
d3:d4:a9:4c:04:de:75:2e:7a:d7:9a:b7:f4:a3:e9:
11:b3:f2:9f:38:4f:68:2f:11:60:f0:06:61:de:56:
26:ae:e7:93:b8:1d:88:1d:8f:d3:9c:94:44:d4:39:
e3:7d:e0:a7:71:59:36:ed:ec:0b:32:fb:2c:e8:a5:
28:31:94:d5:75:e4:d0:90:a8:36:8b:77:c3:82:e7:
26:8d:e3:2e:b4:22:44:6b:86:58:49:7f:85:a0:5d:
33:f2:67:ec:f6:88:3c:ef:ca:fe:6a:d9:63:57:1d:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:EF:C5:0F:A0:84:05:84:39:31:1E:58:F8:69:EC:32:D8:1B:27
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/4971496EAE1B11EF8FFE0422C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.29.241.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f4:67:e7:41:34:1c:bc:ce:af:b3:02:fd:46:43:ac:af:e1:
1a:3e:42:e8:63:61:69:0a:c5:d5:3d:1d:23:f8:f8:50:00:f3:
0c:f9:ce:1b:25:d5:49:1e:47:38:5f:ba:37:84:a5:91:2c:56:
ea:77:0e:94:7f:dc:06:d4:4b:77:40:2b:72:93:e9:55:31:e6:
32:44:a0:71:fb:81:1f:a1:0c:90:5f:ff:a1:cb:2b:f1:94:f9:
e7:8c:0d:07:76:04:30:18:36:54:6e:b4:89:1d:b8:bf:bf:91:
6d:9d:89:15:a9:3c:e2:78:11:c9:41:47:35:30:74:77:d5:d3:
16:39:73:6b:eb:cd:c0:9a:d5:2b:30:91:29:c7:2b:11:aa:41:
33:34:94:75:e8:8b:92:b5:93:1d:62:f3:9a:53:60:52:5d:63:
9c:4c:1b:eb:9b:7c:e5:23:33:a4:bd:eb:19:d6:a3:e5:29:62:
5d:cb:49:3a:d0:95:71:d5:ae:c3:eb:5d:26:2f:17:07:5d:35:
f7:85:97:d8:ef:ab:a5:da:79:f1:3f:78:58:75:48:68:96:6e:
7c:1d:88:77:97:3f:51:a6:c9:58:d8:cd:1c:9f:64:17:78:6d:
d7:11:ca:84:fd:75:a9:27:61:72:2f:c9:a1:5b:a6:75:a1:a1:
38:48:6f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:33:58 2025 by rpki-client