Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa
File: 8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa (raw, json)
Hash identifier: ulEoG77MrSiwSYhpxeW0HQs0UzURtgxGQwYkMWVPA0Q=
Subject key identifier: 6E:19:52:16:70:F5:8F:B2:DB:96:3C:4A:2B:1E:F5:C3:05:F1:11:35
Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial: 082B
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa
Signing time: Fri 06 Sep 2024 21:41:54 +0000
ROA not before: Fri 06 Sep 2024 21:41:54 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 198381
IP address blocks: 116.58.5.0/24 maxlen: 24
116.58.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A0B
Validity
Not Before: Sep 6 21:41:54 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66db7722-65b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:98:10:b3:b5:c0:a0:0b:10:d1:b4:b5:83:
8c:d5:97:3f:7d:75:ad:73:79:6d:75:97:77:bd:84:
d6:ff:aa:86:b1:ba:ab:b5:20:74:25:6a:29:0c:ec:
01:be:26:87:e3:82:5c:6f:22:83:fb:52:f7:d1:89:
92:4a:b1:e8:08:0a:b4:6c:50:77:28:1b:4a:89:f7:
57:13:72:37:d8:e3:e3:19:26:fa:02:40:d1:29:31:
ea:44:48:fa:1b:1f:de:3e:2e:34:95:dd:37:23:73:
7d:0c:54:2a:7e:79:8c:ee:16:9c:e4:ab:5c:84:42:
43:4f:47:d7:a0:5f:80:2f:a9:48:ae:cd:af:e6:f8:
e7:81:d1:4f:ac:9e:8c:06:31:99:c8:6f:88:87:a2:
76:a9:86:53:dd:6f:fd:82:10:dc:7a:f6:db:3c:c0:
78:17:31:0e:2d:9a:2a:70:43:d6:19:29:0b:51:23:
3b:48:7b:a2:87:af:1a:04:dd:e3:3d:d4:55:27:fb:
31:92:09:af:a7:25:75:58:d5:ed:3d:ad:28:36:4b:
b3:2c:8d:a7:a3:7b:a1:bf:09:db:d4:e5:bf:18:43:
57:dc:0e:86:9c:21:03:5e:4e:ea:08:5d:68:45:78:
c4:e2:5f:eb:27:fc:6e:57:87:30:1c:87:cf:67:75:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:19:52:16:70:F5:8F:B2:DB:96:3C:4A:2B:1E:F5:C3:05:F1:11:35
X509v3 Authority Key Identifier:
keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.58.5.0-116.58.6.255
Signature Algorithm: sha256WithRSAEncryption
49:3a:c5:12:17:6e:a0:68:a4:b5:e8:90:1a:64:de:34:bc:5f:
3b:b1:6e:c7:fd:1a:52:57:08:90:eb:49:36:fe:24:96:b7:a7:
ee:ef:a3:42:24:41:8e:1a:4d:33:29:d9:4b:6c:d7:9b:00:e3:
8a:7c:4f:fc:0c:05:bf:a2:27:f6:9d:8f:41:5e:6d:d3:0d:71:
51:1c:ff:11:a5:58:e1:a4:fc:d1:df:7a:e5:81:87:93:2e:8b:
ae:5c:45:e6:72:c4:4e:36:77:8b:b0:8f:40:19:2c:a3:49:38:
f0:ca:60:c0:07:f5:eb:b8:d9:41:9b:eb:b0:24:ee:86:ec:50:
d8:20:42:42:05:65:34:5f:71:33:23:e4:a8:a8:10:42:26:47:
76:37:96:b8:ff:45:fb:ba:21:96:a7:2e:32:0b:d1:3f:3b:83:
89:70:90:90:c1:1d:fc:51:e3:86:92:cd:64:e1:50:e6:63:49:
1c:d6:b3:57:dc:aa:89:4d:24:98:dc:d6:1b:be:23:5d:60:5d:
ce:31:9c:41:a6:36:03:a5:72:77:d2:21:28:d5:e7:fa:c2:2f:
9d:f2:b7:4b:86:70:e1:5c:30:82:ef:e5:8e:52:7e:34:62:56:
b0:fa:28:2f:e1:04:03:2b:7e:23:20:2c:13:f3:3c:bd:ef:16:
2a:76:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:00 2025 by rpki-client