Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa
File: 0A5276E04BB611EE8F105367C4F9AE02.roa (raw, json)
Hash identifier: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ=
Subject key identifier: 3C:14:C2:55:7D:A5:52:2C:E2:A0:24:C2:79:96:38:8C:07:E8:4F:9D
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3492
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa
Signing time: Thu 20 Mar 2025 15:21:13 +0000
ROA not before: Thu 20 Mar 2025 15:21:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 5065
IP address blocks: 122.8.80.0/22 maxlen: 22
122.8.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13458 (0x3492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F
Validity
Not Before: Mar 20 15:21:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67dc3269-16da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:40:21:8c:b8:66:c2:ce:91:12:03:ee:66:
f6:3b:31:e3:73:04:c6:69:73:34:98:f4:2d:49:76:
c1:45:35:d7:37:21:5b:b6:ff:0a:cd:16:26:79:ad:
e8:e9:56:08:e2:0c:78:65:a4:32:d2:b2:5e:28:12:
53:e6:8e:43:fd:bd:ed:68:22:c2:b6:31:f3:e2:09:
c7:4e:0b:b0:52:bc:4c:0c:42:3e:99:d2:b1:50:50:
5e:fd:d2:5f:ef:6e:46:58:22:6d:89:49:d2:4a:0c:
ae:62:4c:f2:9a:40:85:75:4f:53:e9:a4:96:b3:f7:
12:37:84:9f:99:76:3f:b0:23:1e:76:46:c2:7c:19:
9c:01:8a:b5:00:5f:6d:f8:41:49:59:cf:33:81:66:
02:5c:b6:3a:79:58:2b:5b:2b:db:c3:af:b8:91:14:
ff:07:31:82:68:17:6e:a9:65:e6:e0:0e:55:31:78:
05:95:62:02:2c:2b:d3:08:3c:79:70:6f:ea:e0:cc:
56:d4:b9:4c:4b:9d:ed:06:83:f2:69:65:f9:73:50:
b9:01:9d:bf:a9:a7:76:07:dc:a3:8f:13:ff:a7:28:
26:33:47:be:7f:e3:bd:cf:00:5f:42:b5:89:0f:5b:
fb:9d:34:86:a7:f2:86:aa:fc:8c:04:af:bb:8a:da:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:14:C2:55:7D:A5:52:2C:E2:A0:24:C2:79:96:38:8C:07:E8:4F:9D
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.80.0/22
Signature Algorithm: sha256WithRSAEncryption
56:9e:1c:49:fb:61:af:61:fb:b9:87:b9:5f:f0:f0:50:ff:0f:
bb:e8:1f:e7:c3:51:e5:67:3c:c7:69:d0:d9:58:22:ee:28:c5:
af:07:ba:92:62:b0:53:8d:ca:0f:54:67:49:76:f8:a6:c8:7b:
05:ea:ed:42:88:83:e3:a0:fa:75:03:a4:f7:76:ab:27:3e:ee:
41:7a:67:04:6f:e1:59:20:a3:6a:3b:0e:82:d3:24:95:9f:e6:
70:13:38:e3:eb:74:3f:6d:35:71:c7:fd:8b:fe:c3:42:4b:21:
85:0a:f2:12:04:e9:bf:c1:fc:5a:b0:bd:c6:04:20:2e:0e:8a:
00:8a:33:cd:15:30:0b:96:ab:bc:7a:02:75:f5:57:fb:18:51:
54:3a:8a:0d:0f:f9:24:1c:0e:fd:73:b6:9d:fe:53:f1:b8:d9:
60:7d:53:ee:85:c1:11:1c:48:b8:69:e3:a3:ef:51:73:7c:2c:
88:f6:52:3b:ec:07:9f:70:8c:f6:e4:2b:6f:c3:33:6d:ac:1c:
f9:45:17:d8:87:14:14:39:b2:3d:9f:eb:68:4d:22:c6:75:0b:
e0:c8:9a:f8:60:d4:b4:b5:10:11:3c:7c:86:1a:1e:d4:9e:31:
4e:86:da:08:2c:a2:9f:14:ed:07:d7:7f:b7:b2:e3:94:69:6c:
9b:dc:bd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:29 2025 by rpki-client