Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4F17591C7A4011EFBD861118C4F9AE02.roa
File: 4F17591C7A4011EFBD861118C4F9AE02.roa (raw, json)
Hash identifier: tuME09BR1YGFAnql3LFRzhwbKyOA+0gHS+nharCOusg=
Subject key identifier: 95:0E:FC:20:07:D8:06:49:15:3B:3C:0F:06:02:1D:FE:B8:50:40:A9
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3568
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4F17591C7A4011EFBD861118C4F9AE02.roa
Signing time: Thu 10 Oct 2024 14:50:44 +0000
ROA not before: Thu 10 Oct 2024 14:50:44 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150716
IP address blocks: 175.29.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13672 (0x3568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD
Validity
Not Before: Oct 10 14:50:44 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6707e9c4-a47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:18:ea:f7:a9:91:88:7c:58:13:43:7b:ec:
87:79:04:6d:15:b8:61:d2:35:8a:0c:92:f7:fd:ae:
e1:ba:9f:8f:98:e5:51:b9:22:da:af:6c:a3:b5:f3:
b7:3b:79:d0:3c:6a:3d:f8:df:20:ec:a6:85:34:55:
ff:30:9d:d3:4f:a8:27:3e:fd:69:24:21:30:cd:9e:
59:96:4a:e3:6c:ad:cd:3e:eb:bf:b6:58:4f:66:ef:
8f:f4:3f:18:92:6a:56:07:12:a5:e6:52:1b:42:28:
d4:9e:f8:bb:09:97:04:04:0d:dc:24:ce:bd:71:71:
ec:e9:32:63:ad:c0:c9:c8:1b:b6:f1:43:c6:cf:02:
97:71:32:92:ea:87:95:7f:c7:83:f0:c6:25:28:ad:
5b:bf:11:2a:8a:02:38:8e:16:52:23:44:16:49:fc:
f8:df:07:70:ea:8f:79:8c:f8:f2:e7:f1:a3:73:95:
97:77:c4:4f:50:0d:2f:7b:a4:30:91:e5:15:68:08:
2d:54:c8:b8:12:8f:6f:a9:80:2a:f2:78:c2:9c:e5:
27:5e:31:86:63:c2:07:f8:c0:c0:d5:2f:6e:e9:d2:
ee:6f:88:6b:ba:99:4f:ce:35:80:da:4f:fc:a1:68:
f9:13:7e:cb:01:38:7e:ea:f6:ca:54:c8:58:f4:92:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:FC:20:07:D8:06:49:15:3B:3C:0F:06:02:1D:FE:B8:50:40:A9
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4F17591C7A4011EFBD861118C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:c5:8d:0d:57:65:9a:bd:b6:27:63:6d:71:f6:7e:65:88:d8:
71:87:21:7b:9d:d0:92:9e:6c:74:88:5c:59:76:7d:3f:56:e4:
b9:d2:64:b0:59:32:13:5e:16:d6:b7:f1:c5:3c:92:5f:59:6c:
a7:91:bb:db:06:a0:f1:3f:9c:27:93:15:52:48:85:56:35:66:
93:0a:c3:a2:1b:09:4d:6d:2d:34:45:e4:d7:6c:6e:da:39:01:
34:81:a3:bb:d6:96:31:4b:89:02:92:00:24:57:45:fa:90:4d:
c8:9c:ac:fe:e6:4f:52:d5:da:cd:55:cb:34:66:b5:e2:6d:e8:
49:9a:81:35:da:58:a7:12:1f:88:11:fa:ec:ee:1e:4f:6a:db:
92:83:b8:11:fa:a9:16:ff:8f:ce:be:c5:93:f4:bb:cf:9f:b3:
23:0f:14:9a:83:23:e5:9d:53:96:e7:3b:6c:ec:86:a3:bc:40:
b4:97:61:ce:c7:7b:3b:14:ca:6d:2c:ce:a7:a3:99:80:25:e5:
9a:90:b2:11:b1:b7:8b:c6:1c:da:c7:bb:a1:ab:e0:02:d6:0b:
d8:d8:f9:03:bd:6f:4b:a2:10:7e:23:db:da:f5:5b:45:ea:cf:
e1:22:4b:bd:d6:ee:fb:c7:78:d6:12:d5:64:17:4c:aa:54:9e:
b9:c3:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:52:36 2025 by rpki-client