Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa
File: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (raw, json)
Hash identifier: BP/bzVM/wZbrOI0ezn03B2cwqDCG358EDLnvWAZLbmw=
Subject key identifier: A2:18:DB:94:FC:9F:87:AB:FA:AC:B3:77:CA:FE:DD:16:21:3B:51:B0
Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
Certificate serial: 02
Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa
Signing time: Tue 11 Mar 2025 07:53:11 +0000
ROA not before: Tue 11 Mar 2025 07:53:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38494
IP address blocks: 123.176.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197ADE
Validity
Not Before: Mar 11 07:53:11 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67cfebe7-ff32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:94:b9:a3:45:1a:fc:5e:cc:82:31:b1:88:
62:31:32:22:ec:c4:7f:5c:94:1e:53:57:a1:df:2b:
3e:a8:a9:a3:62:d0:fe:cd:ea:e3:60:b9:99:4d:dc:
9c:ce:fe:9d:67:74:73:68:d2:3a:5b:bc:a9:ee:45:
7a:2d:c5:cc:6a:b0:14:ba:11:e8:1a:e7:3d:0b:2d:
52:07:b5:99:bf:f1:d4:6f:12:e5:6b:ea:84:42:1a:
d8:9d:bc:31:db:b7:e9:89:09:dc:39:25:31:a3:7d:
f6:f8:1a:11:62:d4:62:d0:e1:2d:c8:5c:e8:c8:4e:
b4:5b:75:aa:48:d6:1e:97:ae:d1:ff:fa:d8:95:eb:
b8:53:e5:b7:0e:58:c9:15:21:2e:84:b7:27:c0:ef:
e8:6c:72:24:5c:89:c9:88:46:5a:21:56:80:1a:e6:
28:5d:62:92:1a:6c:be:59:b9:c7:54:f1:dd:19:03:
75:1b:a7:1c:fb:51:64:d3:21:f1:d6:89:b8:cc:a4:
0a:28:9b:bc:94:ce:8e:77:56:fa:76:6c:66:61:bc:
e1:2b:2e:c7:99:0f:13:40:90:ef:d0:1b:bc:44:35:
a3:cb:1c:19:72:0c:2e:af:ee:3c:b0:13:3f:95:eb:
c7:26:67:43:13:d2:0a:42:62:b4:22:0a:11:37:43:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:DB:94:FC:9F:87:AB:FA:AC:B3:77:CA:FE:DD:16:21:3B:51:B0
X509v3 Authority Key Identifier:
keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.176.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:21:96:55:87:da:1f:71:49:32:99:12:26:66:ed:70:0a:59:
1c:b1:e6:9b:db:a7:8c:fe:5d:39:3f:53:4f:64:f5:b5:59:53:
2c:e6:b1:53:51:19:29:37:04:82:07:07:d1:e8:22:08:10:b3:
17:41:1c:04:7c:7d:2c:9b:66:33:7f:17:30:2c:a4:40:a2:93:
e8:25:16:43:8f:f7:b8:a0:fa:7e:a9:70:4c:5d:6c:cd:dc:28:
aa:51:a8:17:2d:60:42:77:f7:e0:fe:77:37:2f:69:2f:fb:76:
99:dd:f7:9b:e3:19:b7:fb:69:ec:3b:8c:7a:a2:37:d9:72:81:
f2:e4:ac:98:32:cf:77:36:96:81:dc:78:04:37:c6:60:bc:17:
75:68:5f:f8:53:e4:7d:22:27:92:16:97:6c:8b:bd:0c:59:4e:
17:c4:ef:44:f7:24:82:bc:69:c5:8e:30:7c:4c:8a:c4:12:10:
05:c2:56:cf:f2:98:cc:40:30:b2:9e:3e:62:8d:71:2c:24:d7:
01:eb:28:dc:dd:d1:4b:67:ae:15:fe:c7:68:74:99:b1:f3:7f:
f5:15:dd:11:7a:80:a8:c0:bb:db:dc:26:e2:24:15:2c:b1:79:
fc:e2:16:33:a5:75:1a:f8:88:3b:87:29:b0:29:d0:8e:48:c6:
92:44:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:12 2025 by rpki-client