Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/5C6A7BE6E1F511EEA08A5519C4F9AE02.roa
File: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (raw, json)
Hash identifier: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=
Subject key identifier: 68:B9:E0:51:BC:4A:58:DE:22:1E:6B:B2:72:10:7A:9C:1F:00:48:2E
Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial: 1E46
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/5C6A7BE6E1F511EEA08A5519C4F9AE02.roa
Signing time: Thu 28 Nov 2024 16:33:34 +0000
ROA not before: Thu 28 Nov 2024 16:33:34 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 138311
IP address blocks: 202.179.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7750 (0x1e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AE5F
Validity
Not Before: Nov 28 16:33:34 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67489b5e-e2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:02:3c:aa:07:1e:ef:c4:a7:56:d8:7d:f4:
e0:a9:a5:8d:ef:85:6a:d2:59:aa:39:04:86:ea:7d:
22:3a:5f:80:3c:8b:7b:5e:99:64:c0:8b:a6:6b:39:
76:8b:8b:b1:55:5e:db:38:7f:04:a9:d8:51:a7:94:
00:40:06:8e:0d:c7:02:2e:0e:1a:74:a6:32:fc:7e:
c9:85:f6:4c:50:55:1b:ea:96:86:b5:31:3a:90:b7:
95:3a:c7:4a:fc:6a:71:0f:40:42:06:73:e1:89:37:
1e:9a:13:35:09:7c:b6:1f:93:0b:bc:44:c3:14:07:
28:6d:56:1e:fc:3a:00:36:cb:5e:f7:b7:c4:ca:6f:
7b:75:e8:28:f7:ae:eb:25:4e:1e:a2:89:6f:8e:ac:
9a:c6:87:c8:e5:17:dd:b2:70:c5:f1:fe:45:9e:ed:
a0:1e:81:ae:4e:94:61:6c:9a:ad:37:70:fe:a6:8d:
17:29:2f:04:c4:77:ee:61:6d:e1:9c:d4:45:c2:fb:
35:db:07:e3:ba:2b:eb:45:0b:6c:a9:d0:1d:e2:15:
41:80:06:fb:3d:cf:d9:ee:6b:1a:37:1b:7a:34:78:
e3:3c:10:fe:52:ae:e0:e9:d7:ae:cc:03:1f:57:f3:
62:25:e9:c2:e8:0b:43:c0:33:c4:f8:f9:2e:24:f0:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:E0:51:BC:4A:58:DE:22:1E:6B:B2:72:10:7A:9C:1F:00:48:2E
X509v3 Authority Key Identifier:
keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/5C6A7BE6E1F511EEA08A5519C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.179.69.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4e:80:b6:14:36:fa:3e:87:57:69:16:2f:94:1c:4d:f9:79:
0c:a0:64:85:b5:28:e4:9c:d0:d2:df:87:f8:4b:1d:15:91:49:
5b:72:5e:76:40:f6:58:dd:84:14:ec:80:94:a8:f1:28:54:a0:
e7:85:51:02:70:ec:9b:bf:53:e1:55:0e:76:e0:2a:e9:1b:df:
5a:98:91:47:a6:99:71:df:03:f1:48:05:bb:20:23:72:f7:60:
38:63:47:6f:2e:f6:3f:0d:93:13:0a:88:83:57:09:00:bc:e3:
d6:39:2b:ea:9d:fe:50:a2:20:6f:9d:36:d6:e7:64:c6:fe:1d:
cf:f1:5b:62:15:71:d3:d0:08:9b:5c:1f:28:c3:93:16:a8:ed:
9a:75:77:23:57:f9:9b:be:3e:f6:00:d4:8a:73:b7:cf:e4:7c:
fb:28:7f:fd:ac:55:a6:bd:71:de:1c:c1:ed:d3:68:15:bb:8b:
53:d2:ad:80:ea:74:26:ed:06:e1:15:c7:db:49:2f:ae:cd:80:
97:19:41:57:ae:15:d1:6a:d0:94:c8:75:a5:da:d3:eb:c9:5c:
13:1e:d9:7b:cc:cc:33:9e:34:a4:c1:5b:ad:35:d9:24:1e:f0:
4f:33:f9:76:e4:96:47:18:f2:24:d2:55:9f:d6:13:7f:05:7a:
d2:9d:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:38 2025 by rpki-client