Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/05E9BD94E38A11EFA4DDBC1EC4F9AE02.roa
File: 05E9BD94E38A11EFA4DDBC1EC4F9AE02.roa (raw, json)
Hash identifier: 8QiDJheRvLoEiVgTnmxDH1NtfgKhdi6E5lzBQk1CyDA=
Subject key identifier: C1:AA:9E:52:ED:A6:E4:AC:C9:7B:1C:4B:98:16:52:48:AC:B6:02:2A
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 041E
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/05E9BD94E38A11EFA4DDBC1EC4F9AE02.roa
Signing time: Wed 05 Feb 2025 06:25:42 +0000
ROA not before: Wed 05 Feb 2025 06:25:41 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 133410
IP address blocks: 116.204.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1054 (0x41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B
Validity
Not Before: Feb 5 06:25:41 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67a30465-32e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:0f:21:21:2c:e3:6a:b9:8d:08:2e:65:8d:
56:f5:f6:fd:55:c6:fd:63:ce:25:4e:3c:a9:d2:39:
d1:78:ba:a8:de:f0:57:d6:20:06:a4:46:a9:f6:cc:
65:d6:c4:7c:8b:2f:82:20:ee:5b:1b:15:b1:9a:4e:
c4:79:c1:69:24:6c:17:3c:b3:dd:ff:3f:e0:18:0a:
43:d2:d8:63:8f:ec:68:e7:d4:9b:59:b3:bc:28:10:
88:4e:06:c5:04:49:2c:c3:43:ed:3a:75:f4:f5:88:
46:40:f1:f6:52:98:f9:02:ed:37:0b:4a:e4:76:fc:
f1:5e:53:5c:51:17:c4:30:0d:1a:de:8a:2b:02:04:
82:da:41:c0:94:22:3d:e6:0d:99:e6:dc:92:08:1b:
45:7c:04:e6:28:69:f3:72:50:0b:5f:f8:28:f6:cc:
28:12:0f:2a:61:92:93:c4:70:a1:a8:e3:35:91:d1:
71:78:13:54:42:7b:4f:75:32:20:36:e9:88:96:6b:
99:05:cc:4b:c3:8b:8e:0c:1c:f6:d8:4f:c2:d0:86:
af:30:70:24:42:59:17:c6:97:dc:64:ed:ae:ac:05:
79:fb:69:55:c7:82:68:0a:23:df:94:e1:80:28:cf:
68:c6:a3:ec:c3:67:26:4d:e3:f3:20:87:c0:3b:ad:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:9E:52:ED:A6:E4:AC:C9:7B:1C:4B:98:16:52:48:AC:B6:02:2A
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/05E9BD94E38A11EFA4DDBC1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1e:9a:c5:f4:67:28:90:cc:aa:55:e5:72:e4:4f:00:8c:6c:
43:26:ab:e9:e0:d8:58:54:05:ec:af:96:24:8e:5b:45:9f:54:
65:e4:ff:e2:86:22:15:be:2d:d8:73:cb:dd:18:63:1c:cd:53:
db:e6:9a:36:3b:2b:a6:76:96:0e:0a:49:c3:ce:34:43:aa:8c:
2d:49:80:f1:e8:bd:92:47:71:ac:32:ac:6f:63:f6:51:16:d9:
4e:80:1e:05:11:f0:37:87:24:17:c1:6b:c0:94:0c:b4:22:58:
c4:1d:53:f8:c7:90:1c:54:52:6f:d8:ee:ab:fa:d4:a4:4f:d2:
1d:a3:a0:eb:1d:72:c7:80:fd:18:66:c8:23:d6:55:8b:e8:6d:
1f:79:2f:1f:6e:ac:52:bd:b6:91:16:1a:50:58:8d:cb:80:ca:
7e:6d:c3:b3:13:9a:ba:09:ee:39:bc:da:70:a3:b8:23:01:2d:
b8:e5:cb:30:ad:dd:fa:ce:08:a3:fd:7a:64:2e:0b:c3:d4:fd:
d7:cc:0f:1c:84:c8:6e:f7:8e:e3:1a:1a:48:3f:cb:d2:02:2f:
c9:d0:5f:f9:24:3c:ff:d8:b0:92:b1:e9:3f:f5:ee:e3:ea:ed:
35:38:26:a3:96:d7:8b:47:44:0e:86:f9:aa:e8:c4:fe:36:15:
24:70:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:13:23 2025 by rpki-client