Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa
File: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (raw, json)
Hash identifier: Z/SQA8GAHBj69mDXnfsLMK8qu+tlZ5LxlzdXDGduFGo=
Subject key identifier: F4:50:B6:98:73:36:52:9C:47:68:FF:04:2F:09:64:31:00:61:A1:28
Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Certificate serial: 0405
Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa
Signing time: Wed 04 Dec 2024 17:25:16 +0000
ROA not before: Wed 04 Dec 2024 17:25:16 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 48266
IP address blocks: 45.129.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE
Validity
Not Before: Dec 4 17:25:16 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6750907c-697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:7c:a6:37:59:04:df:ee:21:e6:c6:12:fc:
ac:33:84:cf:58:6c:9e:23:f7:75:7a:e7:da:37:72:
64:7d:1f:1f:14:4f:a2:1c:65:78:3f:87:9a:a4:09:
38:3b:96:1c:bb:39:72:fc:c5:0d:8f:dc:3b:2b:44:
4d:51:a8:82:15:61:16:91:a3:d5:ff:0d:26:a9:ad:
2d:dc:64:ee:16:8a:eb:ae:e2:3f:ee:b7:36:eb:42:
bf:1c:96:a9:59:18:7d:e6:2e:ed:af:d4:15:46:2e:
10:41:1c:42:5b:4e:ba:67:be:11:6d:8b:7c:2b:2f:
f2:45:38:50:10:a9:19:f3:96:d3:78:46:7e:7c:c3:
99:61:08:79:1f:d7:e4:2d:14:9f:7b:e9:34:fc:78:
34:81:97:ff:cc:5b:a1:38:cd:a7:f4:84:4c:09:d6:
76:bd:e2:a2:c2:9b:48:64:62:0b:e7:c6:06:dc:7a:
ab:20:ff:7f:7c:48:58:31:29:a7:ca:76:42:cb:c3:
f7:07:48:c0:6f:e6:a1:42:73:0c:ef:4e:c2:8a:a8:
b3:65:5a:10:7e:6a:f6:59:0a:d7:53:2a:3f:03:2e:
c2:3d:f1:bd:ab:94:67:70:ff:19:c9:9d:dd:32:2f:
c1:c4:86:6f:85:df:a9:2a:df:9f:d1:70:a7:16:e1:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:B6:98:73:36:52:9C:47:68:FF:04:2F:09:64:31:00:61:A1:28
X509v3 Authority Key Identifier:
keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.129.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f1:24:00:50:ff:96:06:61:a8:3c:a2:85:98:db:52:86:ab:
4e:8d:2a:ef:32:06:e7:8b:08:de:8c:a7:26:19:d4:f5:d8:ae:
c1:b7:e1:2e:1b:94:34:b5:a4:bb:bf:54:bc:c8:a7:a2:2c:87:
af:3b:f7:1d:2d:58:56:b6:bb:a8:4f:7d:be:ea:b8:52:84:e8:
33:b6:ec:ad:ec:30:32:90:c1:23:6b:41:07:e9:e1:5f:0c:53:
55:69:37:ef:b9:1c:aa:96:29:27:8b:77:d1:fa:74:65:11:76:
61:97:b4:22:b0:bc:f6:f9:89:54:75:85:17:cc:74:e9:75:bc:
30:b1:4c:b7:cf:af:e2:93:b0:94:a1:14:da:8b:6f:20:4b:ee:
63:5e:c2:87:f3:2e:32:07:8e:1b:b8:e4:b6:d4:36:20:50:b0:
cc:6e:68:a5:1b:c0:87:2b:99:e6:aa:da:19:d6:33:74:02:40:
2f:bf:df:c5:93:00:3a:2b:90:b0:61:5d:12:04:b0:1c:bb:ba:
b1:1e:f4:c2:ae:5f:8b:2d:35:98:c3:19:94:d2:73:10:c3:81:
55:1d:e0:17:41:5c:ec:b9:86:e8:b6:17:89:45:4a:b5:3d:c2:
e9:fb:ad:84:51:dd:c5:ca:e5:01:1e:94:d1:9c:65:83:9a:fa:
bc:eb:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:02:36 2025 by rpki-client