Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/046CBFCC118911EE88E9FE46C4F9AE02.roa
File: 046CBFCC118911EE88E9FE46C4F9AE02.roa (raw, json)
Hash identifier: 2YPfaFL3JGdbTIRb7b+sYLEZ4hgaklsbCclXu5KvXIQ=
Subject key identifier: 0A:7C:52:9E:43:E2:29:1D:CF:C3:0C:6C:28:24:7D:3F:99:00:E2:DA
Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial: 1CEF
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/046CBFCC118911EE88E9FE46C4F9AE02.roa
Signing time: Fri 23 Jun 2023 05:44:28 +0000
ROA not before: Fri 23 Jun 2023 05:44:28 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138737
IP address blocks: 202.179.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7407 (0x1cef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AE5F
Validity
Not Before: Jun 23 05:44:28 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6495313c-291a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:a2:02:a0:50:11:b9:12:f2:ac:4b:be:64:
ff:6c:96:e4:b5:88:cb:4c:8d:42:a3:d8:31:37:0c:
5e:dc:a0:bd:97:cf:ef:06:7e:df:b4:27:72:27:d1:
7a:74:98:23:66:a3:3f:dd:29:91:bb:c6:7d:0e:95:
bc:0e:32:1f:dd:f5:c0:29:cc:a2:f2:1b:21:40:f9:
fc:80:3b:ee:29:6c:74:61:c0:c1:e5:95:0f:4e:bc:
12:48:c8:69:24:62:eb:c9:e7:69:a3:0c:8d:94:4e:
61:0f:8a:31:17:7c:0d:3b:e7:3b:a8:8b:89:83:db:
53:ed:e5:47:68:3b:4e:71:91:4d:ec:9a:51:21:a6:
b7:1c:8f:82:1d:b5:d1:53:3e:14:fd:71:2b:83:fe:
e5:41:b6:f7:2a:73:a5:ce:3d:76:70:42:84:86:f0:
e4:87:e5:76:54:7c:57:1f:78:08:13:89:d4:4f:5f:
04:0c:9a:d7:9e:1c:66:f7:dd:40:d3:2c:f0:20:37:
2b:3f:f3:e3:ce:18:0c:bc:07:e8:8b:d5:65:58:99:
13:55:6a:82:f2:0e:c0:26:7f:5a:9d:49:c2:97:5b:
12:dc:37:ae:0e:92:d0:84:d5:f2:36:45:68:39:59:
d4:62:be:c8:14:37:fc:29:51:9f:a3:0b:2b:a9:c5:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:52:9E:43:E2:29:1D:CF:C3:0C:6C:28:24:7D:3F:99:00:E2:DA
X509v3 Authority Key Identifier:
keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/046CBFCC118911EE88E9FE46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.179.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2e:a3:86:60:d4:29:a6:fc:50:75:9d:7c:a2:52:a9:ca:af:
3e:9f:16:72:52:73:2f:28:76:e8:1f:29:c4:c2:fb:23:20:22:
1a:5d:0b:a8:dc:1f:06:c3:bc:78:04:0e:1a:c0:19:1f:0d:ee:
ba:57:55:c0:5a:ee:dc:9e:41:fe:95:5e:32:67:44:62:41:67:
67:05:41:db:ef:d4:3f:e5:d3:21:15:ab:f1:0c:49:d0:03:dd:
f7:d0:c9:84:c1:a9:36:de:0d:6d:0b:aa:2a:cc:e5:5e:a3:d3:
2e:d0:87:4e:5c:f4:14:03:2c:e0:6d:5a:53:0f:28:73:e5:57:
96:ae:52:8b:4b:51:01:54:6b:bd:e6:81:b7:a4:56:1f:54:e7:
62:70:28:99:6b:95:9f:ea:a1:b2:49:20:37:e2:06:13:42:04:
d7:00:38:d1:21:f9:3e:a1:a3:7d:30:f8:e7:2c:42:b9:b8:86:
6c:f1:6b:67:09:ed:2d:2b:dd:71:93:ba:3d:7c:bf:53:46:3a:
0a:a2:d4:0d:dd:94:8d:45:24:a8:05:a7:a2:34:15:7f:3f:06:
d8:3c:ec:ae:d0:24:a7:6a:78:a2:6c:a4:c1:d1:d5:c5:a5:b3:
66:1e:85:94:ea:48:16:28:56:a8:57:e0:05:49:b3:42:fb:c1:
a1:c6:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:05:57 2025 by rpki-client