Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/1E22D334B2E111EF9B7E6634C4F9AE02.roa
File: 1E22D334B2E111EF9B7E6634C4F9AE02.roa (raw, json)
Hash identifier: gWP0nF1P+s8h0FgJKpKbCahHims7du83LJO+GHkQJyc=
Subject key identifier: 60:DF:5A:C2:AA:6A:86:BE:4F:15:F6:82:31:73:D7:17:6B:7C:D5:D3
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3438
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/1E22D334B2E111EF9B7E6634C4F9AE02.roa
Signing time: Thu 05 Dec 2024 08:15:41 +0000
ROA not before: Thu 05 Dec 2024 08:15:41 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 62610
IP address blocks: 118.26.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13368 (0x3438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F
Validity
Not Before: Dec 5 08:15:41 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6751612d-3409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:a3:77:39:82:f1:83:60:9a:8f:7c:71:0e:
58:83:34:a2:38:dc:08:03:45:25:44:b4:5c:3e:ec:
84:94:85:15:20:c8:00:cd:c4:d3:d8:fe:8a:d4:64:
7d:34:f1:d8:e0:83:3e:9c:12:0f:6d:07:02:27:c9:
a5:ed:ca:24:2b:3a:11:b9:b4:75:58:48:c3:0f:93:
75:49:78:a1:51:27:37:45:f5:ea:aa:a6:56:e6:df:
2a:63:83:4f:17:94:22:f5:87:ca:c1:30:0e:11:cc:
19:5b:df:ba:41:cd:b1:db:03:86:4a:e4:1d:05:f5:
fd:dc:5a:60:d3:ae:34:8d:4b:b3:45:cf:5e:bd:25:
58:d4:f6:e8:56:ef:3e:3a:21:98:42:4d:05:f3:d6:
bd:86:58:59:e3:d8:21:34:29:9c:ed:87:9b:68:22:
7e:21:65:81:9f:a4:de:90:bc:6c:d0:91:6f:0f:7c:
77:07:4f:b2:10:98:b1:55:04:38:bc:17:eb:c8:bd:
6b:d3:e8:4c:a1:36:f2:f5:00:2c:91:44:e4:ff:f5:
f3:79:9a:1e:c8:86:8e:9e:6a:b7:ab:ea:b3:aa:f8:
5e:b7:a1:0b:ca:3f:7d:ff:93:79:9a:61:8f:c5:f4:
92:0a:42:85:de:93:ee:69:8d:d4:37:d9:7c:29:75:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DF:5A:C2:AA:6A:86:BE:4F:15:F6:82:31:73:D7:17:6B:7C:D5:D3
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/1E22D334B2E111EF9B7E6634C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.26.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:09:c0:23:c7:20:fc:06:12:5d:ed:aa:93:86:2a:9c:3d:1a:
65:05:5c:dc:82:02:84:85:22:6f:e8:35:0d:8a:02:23:4e:d7:
9e:67:86:8c:3d:e1:98:91:07:9c:b9:88:a4:54:e7:d0:18:19:
8b:fa:4f:91:e6:5d:b7:0c:6a:d3:81:80:e6:ed:ba:4a:49:73:
d4:b6:30:e8:f0:dd:0e:56:c9:d1:ee:fd:44:22:1a:e0:7b:ec:
fd:a0:97:06:b1:23:d8:41:6d:b4:17:b7:f1:4a:60:12:c9:31:
bf:8c:b9:93:21:26:b8:85:43:1e:e2:dd:8d:28:60:0b:2e:0b:
e2:1d:36:f0:6c:bc:0e:cc:46:38:d6:cc:f7:6d:7c:2f:03:45:
af:eb:3e:44:09:54:f6:b7:80:d8:bc:61:d7:65:98:8b:c8:f3:
2c:f4:32:a5:83:fd:b7:c3:e5:78:cb:6b:35:ca:89:61:9f:5c:
79:7d:e7:9d:f5:c2:f7:13:4a:a9:97:8b:a8:32:2a:a6:da:ae:
56:37:2e:ec:60:8c:cd:63:cd:a0:ce:49:c8:55:5c:31:b0:fc:
06:bb:f5:23:bd:cf:75:51:d6:04:6f:4b:33:38:2f:e4:7f:a8:
38:85:1c:8e:0c:bd:0c:7d:53:22:49:8a:01:32:b0:eb:52:4e:
e0:52:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:12 2025 by rpki-client