Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
File: 7AC60C48CEB611ED8850A727C4F9AE02.roa (raw, json)
Hash identifier: Kmy121XzUGh8ewwF3KZSeQZhERtI3ipUIuwTYhIH4NM=
Subject key identifier: CC:3E:A2:72:A6:4E:AC:9B:1C:FD:AA:AD:D2:0C:E1:4B:AD:F2:1A:A4
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 05F8
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
Signing time: Thu 04 Jul 2024 23:41:22 +0000
ROA not before: Thu 04 Jul 2024 23:41:22 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 38465
IP address blocks: 210.215.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6
Validity
Not Before: Jul 4 23:41:22 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66873321-ed51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f5:8f:e1:a6:35:d5:09:24:dc:07:ba:b2:38:
23:78:25:c7:dd:f9:da:7b:42:3a:cb:84:10:fc:b3:
38:a1:b3:da:79:59:e8:44:2c:b6:f1:cf:a3:d7:69:
6e:2f:24:d4:8c:23:fd:95:df:ba:a1:5e:59:3d:f5:
60:b9:d9:a0:86:d0:62:ef:23:38:d5:62:2b:e8:99:
8c:d9:7a:e7:58:7a:b5:01:96:0a:b5:c6:f5:c4:4a:
e8:60:f1:05:d5:7d:b0:e7:f6:ce:fa:c7:93:43:ae:
9d:31:5a:2d:32:9a:00:f0:fd:24:ea:7b:af:29:ae:
7e:fe:15:e5:73:a8:17:b2:8e:52:b3:ca:be:e8:d3:
ec:cd:de:b8:25:4d:ca:4b:13:e9:9e:62:d6:83:03:
50:75:29:83:15:3d:0c:6a:6c:38:c8:f5:8f:cf:de:
b7:36:68:9d:55:d7:e7:c7:83:25:25:6f:fa:97:a8:
c0:90:c2:cf:4a:4d:3d:bf:8a:86:71:9b:20:64:07:
dd:01:68:f8:ee:a7:9c:39:42:54:de:30:fb:ac:4a:
23:25:65:94:59:64:1a:e2:7e:cb:99:10:d8:35:c7:
c2:f2:c9:38:21:ea:e1:f8:43:38:8c:f8:9a:14:8c:
8a:c8:78:7e:b5:1f:72:49:9a:ab:b2:62:a9:74:63:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3E:A2:72:A6:4E:AC:9B:1C:FD:AA:AD:D2:0C:E1:4B:AD:F2:1A:A4
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.215.82.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b6:4d:87:ea:29:74:1e:6c:11:c5:b5:81:ef:77:38:71:05:
e7:4c:a6:7d:9a:c2:7f:0a:ce:68:56:37:b8:55:07:b1:34:15:
df:46:08:21:8b:5c:94:e9:78:71:0c:02:db:94:91:b9:71:84:
eb:c0:e1:7c:3a:0d:f5:91:47:36:84:83:41:20:5f:16:58:e8:
89:47:30:1f:b0:64:25:bb:a6:95:2f:ef:74:3b:1f:d5:95:16:
5a:08:2c:c9:21:1f:63:99:68:32:fc:3a:8a:a4:60:fa:1d:f4:
a7:72:fd:09:9e:0d:a7:7e:fa:c2:64:02:37:91:f0:4c:d8:64:
66:a6:43:8d:76:77:f4:bd:1c:9e:36:8d:e1:d8:a2:00:06:70:
41:78:36:74:d0:d2:f3:bd:9d:e5:48:17:2c:a7:c6:96:3a:77:
da:de:7b:b6:be:79:f9:82:7e:1d:6f:ac:1d:d4:c4:99:b9:dd:
c8:69:00:60:c4:95:99:56:6e:db:47:c8:c2:4b:17:07:93:4e:
c7:c5:d2:35:f6:39:ea:c5:87:e0:34:82:08:4e:9c:90:dc:40:
45:4d:c3:8a:ff:1f:0c:59:f0:83:99:b6:0a:1e:77:c1:0b:c2:
5a:9d:81:5e:da:f4:c2:88:f9:32:3c:13:28:cc:ca:37:14:c0:
a2:04:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:12 2025 by rpki-client