Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa
File: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (raw, json)
Hash identifier: xcq/WEUSR+w06b6Nwt1nxiayT1ulPnzU6uAyB0f2hwE=
Subject key identifier: C5:DB:B1:64:04:47:9D:93:F0:E6:8F:30:87:D7:B5:A5:45:6D:AC:9D
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 35F2
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa
Signing time: Sat 01 Feb 2025 06:55:36 +0000
ROA not before: Sat 01 Feb 2025 06:55:36 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150675
IP address blocks: 175.29.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13810 (0x35f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD
Validity
Not Before: Feb 1 06:55:36 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=679dc568-cd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:41:58:80:6b:bf:2c:ff:91:b7:48:2e:a1:
83:9b:83:47:79:52:58:e0:0c:00:af:ee:a4:be:43:
08:3d:ea:3b:95:e1:03:6c:6f:8b:57:21:3c:e2:0b:
d8:73:f0:4c:61:51:e5:26:67:c5:7f:c2:90:65:bd:
92:4c:6e:d0:49:f5:9c:af:62:0f:69:40:d5:ee:5e:
f4:44:0a:8c:8c:b0:b7:2e:15:38:c6:79:e5:03:c6:
5a:42:af:3e:25:d1:79:32:99:83:0c:ba:f3:79:f7:
d6:fe:df:d6:a6:79:e8:a5:01:a0:43:20:77:c2:a8:
c2:da:18:b6:1d:cf:b7:7b:fc:5c:3a:55:5d:cc:9f:
5b:7a:94:45:ba:ae:6a:db:48:1a:12:d4:bb:d5:e9:
4f:92:bd:16:1b:21:aa:33:e2:17:e4:0d:e7:2b:57:
9e:58:e6:19:81:50:3c:de:a8:2e:2b:9b:05:cd:36:
7a:57:df:a9:f2:99:8a:66:ee:cf:b8:06:2d:75:2c:
fa:aa:85:a6:ca:b4:af:6d:4e:c6:5a:7e:ff:1d:a6:
f8:80:37:f1:dd:7b:73:4b:6b:0b:06:0f:a1:74:46:
73:d7:4e:5d:81:c1:07:2e:1d:40:89:3b:96:34:3c:
e1:f5:e0:e6:e7:cd:bf:15:6b:6d:59:f1:21:4f:f2:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DB:B1:64:04:47:9D:93:F0:E6:8F:30:87:D7:B5:A5:45:6D:AC:9D
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.18.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ea:f9:95:94:76:1b:3b:9d:b9:13:c6:b0:36:ac:d7:c2:0c:
5f:57:5e:85:4b:b5:f4:99:c1:31:83:ba:d3:30:13:c6:a2:c4:
6f:6c:b4:11:20:fe:96:b7:66:f0:19:ea:0b:84:a6:6d:b8:35:
dc:48:4a:3e:e7:50:d7:b9:b3:ca:9c:1c:93:35:a0:15:e3:2a:
11:cd:06:8b:c7:d0:bd:84:b9:da:6a:05:90:7e:f0:4a:57:ae:
cd:1a:1a:06:15:46:2e:f2:1f:8e:7e:44:1d:82:9a:aa:7d:b4:
c6:f0:37:f0:35:5f:56:eb:09:19:80:92:1c:4d:18:38:aa:e6:
68:7a:0b:20:cf:ff:8d:68:91:0e:9c:91:39:b2:93:df:75:94:
c5:f9:db:9c:7e:62:09:5d:76:e2:1a:ba:6e:44:2c:72:24:2b:
be:d9:cd:4a:49:5e:89:22:3e:5f:93:f9:b8:47:e1:4d:91:c1:
62:68:08:5c:00:42:5a:8a:9f:09:11:17:0a:b7:48:6b:9b:96:
cf:05:4c:87:18:6e:26:7f:6b:57:32:d3:9c:6b:31:a6:35:7e:
37:b2:a3:80:7d:e6:f7:51:4b:7c:ec:df:07:af:01:60:50:97:
28:10:ae:bd:72:9c:50:e2:bf:c5:23:91:b6:85:cd:37:db:0a:
d4:2b:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:26:37 2025 by rpki-client