Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/EE0442B87A9811EE9C6DE851C4F9AE02.roa
File: EE0442B87A9811EE9C6DE851C4F9AE02.roa (raw, json)
Hash identifier: RqKVo50oILDMJR1bMsrFDPp+3aw3bRg8KhYs5RsIOh0=
Subject key identifier: 66:D4:FF:2A:2C:80:90:49:A1:81:47:1D:06:D4:BD:CB:0A:BA:D1:93
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 04BA
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/EE0442B87A9811EE9C6DE851C4F9AE02.roa
Signing time: Fri 03 Nov 2023 22:32:54 +0000
ROA not before: Fri 03 Nov 2023 22:32:54 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9387
IP address blocks: 122.50.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9
Validity
Not Before: Nov 3 22:32:54 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65457516-0fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:31:51:b2:85:3f:d4:5e:b4:5c:6d:e9:1e:
d4:5c:07:bc:4d:59:09:d8:13:37:b8:ce:05:83:da:
21:f9:06:a1:f9:f7:3f:ae:33:ee:e1:eb:9d:4c:cf:
5a:25:d3:36:80:3d:4a:e7:25:25:30:e9:5c:d7:e6:
30:4f:f9:c7:9a:7f:8d:a0:55:55:50:b6:0f:79:da:
ad:2a:c9:64:70:80:51:c3:4c:a5:8a:15:0a:fd:3b:
be:a9:73:d7:12:ba:77:48:f3:68:bc:7b:08:e3:bb:
a7:da:fe:1f:fc:57:2d:9e:e0:14:45:0d:84:58:fa:
0a:17:f6:46:04:76:75:ba:08:43:92:93:67:53:8b:
02:ee:77:42:96:df:58:de:ea:47:58:78:6a:65:01:
08:02:42:95:46:c6:91:96:ae:3c:65:a9:61:fb:3d:
1e:7d:7e:e8:97:20:b1:40:f9:1d:3a:27:f3:6a:0d:
be:0e:02:11:1a:71:ba:e0:17:6a:47:00:43:b8:7b:
8d:f4:ef:46:37:91:96:36:30:cc:c6:cf:61:27:51:
1b:5d:f3:a1:29:49:78:f6:f5:53:f1:f6:0c:0b:1d:
15:3e:91:17:7a:17:66:4c:de:bc:69:99:84:52:64:
4f:bf:c0:2f:cf:e9:1a:99:c9:dd:74:55:4d:49:f2:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:FF:2A:2C:80:90:49:A1:81:47:1D:06:D4:BD:CB:0A:BA:D1:93
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/EE0442B87A9811EE9C6DE851C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
73:79:a8:51:db:cb:b3:34:74:7d:e8:38:89:e4:23:1e:32:44:
66:5a:e0:e7:5d:5e:e3:61:0a:b2:4e:c6:1a:b1:59:a2:53:c7:
5c:b0:bc:31:47:39:2d:d2:5a:65:61:cb:7c:5b:92:8b:dd:b7:
8d:56:86:65:3e:6a:1e:8b:20:02:07:6c:f2:79:e0:28:a0:cf:
eb:18:c2:5b:40:a9:d0:b6:43:29:a2:ae:f3:a0:63:e4:e9:2c:
bd:1c:20:b0:f1:37:cf:3b:2f:cd:6c:f4:45:8e:9f:7d:4e:2c:
81:9e:3e:de:f5:55:41:bc:b3:00:15:9c:f7:e0:ca:9a:30:36:
05:3f:0f:42:20:cf:e5:43:9e:b0:38:26:4a:e7:ae:e7:41:37:
99:5d:2a:9d:5a:7a:e7:dc:3b:94:2d:79:fa:88:ef:4b:48:5a:
d2:44:d3:37:93:02:80:06:2f:a2:e4:91:a5:bb:da:a1:7f:14:
94:17:ce:af:2a:c0:2f:5b:ae:f1:52:95:b2:c5:c8:f2:4f:b3:
a9:ea:63:a0:21:ac:f0:5a:c7:d0:c3:ec:c2:fb:f4:cb:c4:54:
88:2c:88:f0:63:49:d7:79:fe:f0:04:9e:11:35:5f:6d:8a:28:
73:dd:20:96:86:c1:13:55:5b:35:91:2a:2c:65:ec:5a:8d:cb:
02:97:7c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:24:51 2025 by rpki-client