Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
File: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (raw, json)
Hash identifier: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys=
Subject key identifier: A7:35:FE:52:35:3F:90:03:C8:A9:61:E5:69:5B:4F:73:12:50:0D:0E
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1C56
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
Signing time: Mon 28 Oct 2024 14:40:36 +0000
ROA not before: Mon 28 Oct 2024 14:40:36 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 136974
IP address blocks: 210.2.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7254 (0x1c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568
Validity
Not Before: Oct 28 14:40:36 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=671fa264-791f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:80:c5:50:75:26:72:71:4b:e9:29:32:7c:
43:7d:8e:26:4e:a4:61:62:2d:71:13:23:c0:5e:df:
2c:5d:78:b6:fd:e6:db:a4:38:35:98:20:cd:c5:b4:
f5:3c:e9:01:6b:50:36:e2:ea:4f:9f:e2:86:8f:35:
b0:4d:88:8b:9c:ab:2c:be:98:ee:d1:65:a6:60:5f:
82:89:72:00:87:14:06:34:8b:69:47:aa:22:a9:f0:
52:e6:c6:73:d6:a7:e6:04:0e:93:4c:15:12:5f:a9:
0a:79:80:f3:17:fa:4d:42:4d:15:0f:df:79:5b:38:
e2:ed:e6:b0:6d:b6:17:4b:83:91:37:b0:91:c5:8f:
80:7a:c6:94:2d:53:8b:b1:9e:76:f5:fa:0c:87:13:
c3:e9:70:63:38:45:0a:0b:5c:2e:97:46:cc:fe:1d:
dc:93:2c:da:06:51:ec:9e:5c:e9:c3:41:d7:9b:d0:
97:51:9b:a2:93:56:f0:38:98:1c:b0:f9:e2:a8:fe:
34:e3:e0:f9:a2:d7:76:cf:70:d3:b9:91:8d:00:c4:
30:27:5e:5c:12:49:ba:a2:15:f4:8f:a7:fd:33:c8:
23:79:f0:ad:7b:f8:c8:54:2e:4a:64:2d:12:a7:fa:
91:81:5e:45:c6:08:57:6c:7a:cc:5f:63:9a:73:46:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:FE:52:35:3F:90:03:C8:A9:61:E5:69:5B:4F:73:12:50:0D:0E
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.2.136.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4d:af:fb:8b:2e:2f:a2:bc:9d:88:7b:b0:af:2e:92:fc:33:
5b:7d:9e:28:a4:ff:02:02:f6:a9:0d:34:fd:9c:5d:32:bf:43:
ac:49:90:9a:a4:58:0f:48:f7:36:40:80:c5:90:6c:88:09:a2:
c6:e7:ce:34:11:b8:c1:e5:bb:a5:a9:f7:0b:ce:96:54:8e:79:
31:46:15:02:08:13:a1:80:44:b8:7b:0a:40:37:7d:33:1e:9c:
2c:47:ba:11:69:35:64:51:93:dd:a0:d4:ce:58:d5:1e:33:92:
3b:60:e9:21:4a:eb:ad:80:a4:18:d4:76:d0:b3:6d:ac:c9:06:
4c:b4:61:e2:6a:ff:46:81:af:fd:1f:84:c4:04:50:92:d8:e4:
20:ef:0e:dc:46:07:66:c2:c2:51:6f:e0:bf:3e:7b:57:5d:c1:
95:63:96:85:04:6a:6e:d1:3e:56:74:ee:78:3c:9a:21:3b:68:
31:b9:26:2b:31:f1:25:5b:60:70:b7:7e:05:66:d7:5c:55:91:
41:86:c4:0e:e8:bd:2f:70:18:fc:af:15:d8:0c:e5:98:27:36:
6d:61:a1:13:6e:2c:b3:03:5c:cc:53:e9:51:4b:41:c6:f7:d6:
79:02:5b:a0:d3:e6:40:c4:ae:a3:a3:bf:0e:8b:de:32:0c:78:
b1:9f:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:59 2025 by rpki-client