Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D28E7D62854811EFA29BE474C4F9AE02.roa
File: D28E7D62854811EFA29BE474C4F9AE02.roa (raw, json)
Hash identifier: 7+m/rprtwB3rQB9AuZkZXxKmZXlWFQztBa9eRId8M7Y=
Subject key identifier: 0C:3D:A7:FB:AD:21:1D:41:E4:17:0E:A7:A3:5A:73:D3:BD:8B:96:2D
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3493
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D28E7D62854811EFA29BE474C4F9AE02.roa
Signing time: Thu 20 Mar 2025 15:21:14 +0000
ROA not before: Thu 20 Mar 2025 15:21:14 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 53356
IP address blocks: 122.8.112.0/22 maxlen: 22
122.8.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13459 (0x3493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F
Validity
Not Before: Mar 20 15:21:14 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67dc326a-444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:12:85:8a:2c:96:d7:c7:c0:da:7a:f0:51:
32:8a:15:c0:26:f8:4f:07:fa:6f:4a:b4:6b:af:c9:
df:37:a9:f7:e7:d7:9e:24:10:b4:37:fe:e8:c3:c0:
c5:49:2a:e0:47:73:62:26:81:c8:9b:18:a2:6b:76:
7a:f6:9e:58:95:41:ec:e4:0c:eb:17:f8:ac:37:cd:
90:65:75:31:d9:de:ad:66:3b:74:6f:fd:47:de:f0:
83:0a:4b:8f:bc:95:01:4c:a5:e3:80:62:4c:56:8e:
52:68:7f:a6:44:37:4c:df:c1:25:0c:47:17:1f:73:
18:62:fc:16:64:f8:aa:71:ab:1f:f8:b0:36:d3:3c:
eb:98:e6:54:03:f5:96:7e:fb:d8:f4:4d:af:df:8f:
a4:7c:57:db:be:43:08:ca:be:b2:45:c8:62:90:9a:
e1:f0:7d:b4:b4:ed:ea:9c:3b:cd:fb:90:2a:5f:33:
de:e9:48:ab:bd:3f:29:6b:12:73:96:27:72:a0:d9:
5f:42:6d:48:b0:dd:05:62:3d:af:37:89:33:1a:a7:
3b:90:e4:73:3b:6a:49:07:2d:eb:bc:80:e2:91:9e:
2d:36:a3:f4:bf:9f:5a:5b:a7:6c:a5:bc:23:0b:35:
2e:ac:d2:d2:50:30:a3:da:5d:b3:d1:d2:61:59:4e:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3D:A7:FB:AD:21:1D:41:E4:17:0E:A7:A3:5A:73:D3:BD:8B:96:2D
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D28E7D62854811EFA29BE474C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.112.0/22
122.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:1c:b6:71:02:b0:20:58:c8:1e:8d:f7:f7:26:84:f2:72:98:
35:f3:72:63:b2:d9:20:f0:e3:5b:4d:21:22:ae:8e:12:f7:7c:
96:69:b0:f6:27:64:28:df:20:40:f7:98:cf:7c:e6:a5:ba:6f:
7b:34:04:f7:84:57:47:1e:fd:8a:8b:6f:09:be:e8:4f:6d:dc:
84:67:9f:6f:4f:f4:0d:b2:31:66:b1:7d:24:07:a3:fa:0c:65:
08:01:c8:1c:85:fd:a7:4f:fe:78:f6:e5:1f:8b:e1:97:42:b1:
a5:5c:fa:0c:9b:11:5d:42:86:4e:38:1a:42:3c:76:f6:f7:97:
7a:b3:e4:18:3a:62:4a:2c:eb:c0:d4:f3:68:be:49:0b:ad:7d:
68:5e:da:3f:45:59:08:77:c2:67:63:8a:9d:75:de:8d:c7:8f:
18:ac:77:d5:fa:33:2a:f2:0b:c4:e0:22:fc:95:4f:35:9d:44:
10:8a:75:a1:fb:47:b8:9a:95:68:e3:5e:db:6b:5a:6a:f9:15:
7e:2e:7b:80:e5:73:df:33:82:e4:6f:ef:ca:e2:5d:05:56:59:
7e:e6:f1:e1:b9:a4:ef:b1:89:d6:6b:75:1e:59:46:34:c9:ca:
92:29:ba:52:b3:09:ef:e6:b2:f6:75:69:bc:e5:2e:59:b4:1d:
b4:3b:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:41 2025 by rpki-client