Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/AB21A54CE38A11EFB9F37B25C4F9AE02.roa
File: AB21A54CE38A11EFB9F37B25C4F9AE02.roa (raw, json)
Hash identifier: 1oggK7+O/tmWWVDSJFbUV9MOF4SzpzYleUbYaAFH6Ow=
Subject key identifier: 34:2F:76:AA:FF:AF:E6:3A:D2:49:46:01:17:75:D4:25:0C:7C:24:4A
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0421
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/AB21A54CE38A11EFB9F37B25C4F9AE02.roa
Signing time: Wed 05 Feb 2025 06:30:19 +0000
ROA not before: Wed 05 Feb 2025 06:30:19 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136272
IP address blocks: 116.204.143.0/24 maxlen: 24
2400:c7c0::/32 maxlen: 32
2400:c7c0::/34 maxlen: 34
2400:c7c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B
Validity
Not Before: Feb 5 06:30:19 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67a3057b-6d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:7b:4e:51:7e:b2:a4:f1:00:62:96:6c:0e:
fd:c0:5d:4f:61:89:f5:b2:9c:1d:47:f8:75:ba:21:
fa:8d:17:5e:c2:4e:48:43:bc:bc:80:6b:0b:44:e4:
bd:c5:fe:22:ee:fd:3c:ad:44:e1:d6:2d:93:5c:cc:
d9:b8:e1:be:3a:af:1a:b5:bd:e4:a4:98:42:2f:fd:
73:6a:2e:1f:4a:f3:73:5d:a8:40:af:b7:71:d9:2d:
c5:b7:50:57:c4:b1:b9:57:28:f2:1b:b9:a8:86:33:
f2:bd:c8:4e:8d:ba:ba:0f:a3:c0:2c:bb:4b:5b:17:
f4:c6:dd:46:12:5e:ad:d3:e1:a3:ae:65:e2:5f:10:
ae:64:54:97:1f:77:fc:63:d3:e8:d4:d0:89:8a:e9:
f9:2e:d8:dd:65:ee:55:f5:f7:6c:17:bb:9d:7a:a5:
20:1b:c4:c4:e6:12:5f:98:3b:3c:64:5f:02:1b:c4:
7e:7e:79:55:e4:fa:3d:e2:b7:c0:35:92:e3:8e:e5:
52:e2:f5:68:16:5b:c2:41:f7:b0:5f:8b:6d:20:5e:
56:3c:e2:c9:e9:24:5c:5e:50:ca:8c:e1:f7:a2:22:
76:df:a0:c0:8e:b4:8c:59:97:fe:54:43:d5:e8:93:
fd:29:b5:4c:03:6a:01:34:8f:22:9d:53:19:8d:e7:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2F:76:AA:FF:AF:E6:3A:D2:49:46:01:17:75:D4:25:0C:7C:24:4A
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/AB21A54CE38A11EFB9F37B25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.143.0/24
IPv6:
2400:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
47:f5:df:a1:41:30:ad:0a:c4:64:64:c6:77:ce:aa:2a:f9:ac:
3e:d5:b7:41:6f:0b:1d:6b:aa:d5:ca:c1:64:76:42:67:ec:ed:
2e:af:11:1c:43:39:09:35:ad:ad:c4:0e:cb:6d:87:61:df:99:
ee:23:b9:95:0a:c9:1e:1e:7f:60:67:89:84:99:0c:e7:90:b9:
d3:ad:f7:20:9a:a1:ff:ac:e9:15:0f:cf:d9:43:50:fc:ef:9e:
a8:b9:eb:97:7c:20:1c:6d:51:af:b3:41:a4:58:65:c1:68:76:
20:a5:e2:8c:eb:5e:f5:50:84:97:f3:c0:05:70:13:48:61:96:
cc:e3:2a:15:1e:80:06:44:44:21:58:03:6d:4b:00:9c:a1:87:
cf:5f:fc:ed:94:28:82:7c:63:ae:1a:72:9d:52:96:28:95:cd:
50:26:a7:e2:10:dd:ea:64:77:17:62:c4:a6:73:04:28:4b:8f:
d3:78:7c:ce:ec:6a:8d:98:80:d0:ae:1e:6e:96:d5:5e:95:21:
97:cb:3b:1b:bf:f6:9d:2b:f3:ab:9b:4b:bf:62:5d:02:0c:45:
b2:dd:f5:f8:99:a8:47:0a:ee:1f:df:6b:24:fb:a3:f6:5b:ff:
34:57:c1:85:4c:63:b4:ce:aa:3a:32:07:61:e6:58:2a:62:37:
3e:c2:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:04:40 2025 by rpki-client