Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa
File: 2511401EF40311EFBB6EF777C4F9AE02.roa (raw, json)
Hash identifier: tnCDhZMDrHPp0NMpU0cMFqMJ1EvDl+x9yj+eC20nwlY=
Subject key identifier: 2B:8D:07:59:14:68:AB:00:26:0A:33:EF:E9:2F:52:DA:17:56:78:5F
Certificate issuer: /CN=A915FEAC/serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D
Certificate serial: 02
Authority key identifier: 06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa
Signing time: Wed 26 Feb 2025 05:33:02 +0000
ROA not before: Wed 26 Feb 2025 05:33:01 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153556
IP address blocks: 163.61.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FEAC
Validity
Not Before: Feb 26 05:33:01 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67bea78d-841d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:53:b1:c8:2b:06:88:fa:cd:08:16:dc:1f:
56:f5:2d:65:1c:44:34:2e:57:15:ec:4b:5a:35:97:
d2:04:74:0b:d3:8f:66:32:da:96:ea:3e:03:7d:92:
da:28:82:30:af:08:ab:90:7c:fa:ef:c5:1d:4e:fd:
10:85:ff:1a:91:2a:8a:4e:ff:25:a8:1c:bd:76:4f:
b0:0e:99:16:d4:82:e9:3e:ae:24:2c:c8:53:49:60:
dd:7b:78:4b:a0:d0:b9:5e:99:05:bb:86:8b:56:ef:
e8:eb:dd:0a:18:61:da:2d:58:f4:d9:f4:fe:62:f9:
f6:c8:74:33:8f:b3:4c:64:9f:a6:a6:dd:39:b1:4d:
a4:7a:69:25:e2:76:23:eb:55:2f:b9:bf:ae:19:91:
53:d8:f0:39:43:3d:76:bb:c2:41:b0:f5:c5:7f:eb:
86:d0:6c:78:cd:1d:5a:cd:1d:62:33:81:48:b2:27:
eb:31:1f:d5:b1:2e:a7:19:2e:ba:29:39:c5:51:1c:
d9:23:55:0c:bf:72:7e:bb:db:fb:08:b4:df:31:91:
d6:fe:3c:b8:14:29:70:a1:c2:c0:ca:5e:9d:5e:3a:
a3:76:f9:5a:9d:ea:76:78:ac:c7:0b:6e:29:80:87:
d2:d1:20:43:54:62:42:4c:41:2e:a2:5b:1a:30:d9:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:07:59:14:68:AB:00:26:0A:33:EF:E9:2F:52:DA:17:56:78:5F
X509v3 Authority Key Identifier:
keyid:06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.12.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a0:54:5c:33:f5:09:c0:61:2c:64:e0:13:c4:af:9b:53:24:
13:43:e8:70:1f:8b:f0:4c:47:e1:62:53:f9:c3:23:75:d9:07:
cd:78:99:7f:61:bd:03:3c:98:ea:42:d3:17:2e:56:d1:fb:de:
6d:3f:ab:81:01:43:c1:27:f9:78:f6:7f:38:7c:cd:cd:de:9e:
31:df:51:a1:ce:3b:6b:29:59:df:a3:60:39:45:d5:49:1b:3a:
14:9a:ea:9e:50:2c:7c:1c:90:50:12:e2:d4:31:31:b1:e5:0e:
61:06:1a:c0:5d:04:7c:dd:83:1f:2b:a4:39:78:18:f9:e2:74:
cd:2d:38:4a:16:f1:01:b0:99:73:cd:4d:6f:41:09:1c:7b:fd:
cd:b6:f4:04:f3:5b:d8:01:f4:c2:a1:59:2a:44:57:52:28:b3:
1e:66:56:65:e4:dd:9e:47:fe:57:6f:fb:1e:96:c2:d7:58:1a:
d9:c6:27:f3:e6:0a:a9:0b:0b:20:c7:27:a5:58:4f:55:a9:b5:
c3:2f:ad:44:1e:25:25:75:e9:74:de:02:cf:a3:75:46:45:3b:
ff:90:5f:00:d0:28:0a:d8:77:2c:55:8f:e2:97:fc:01:2e:74:
02:9a:2b:9c:fd:21:1e:5e:b1:e1:58:35:b5:f4:7c:e5:4a:2f:
3e:d9:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:17:36 2025 by rpki-client