Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa
File: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (raw, json)
Hash identifier: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=
Subject key identifier: 0D:53:E1:69:D7:FB:66:BB:9A:6B:14:E3:1B:21:3F:80:4B:38:C8:9F
Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial: 3458
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa
Signing time: Wed 18 Sep 2024 15:00:38 +0000
ROA not before: Wed 18 Sep 2024 15:00:38 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 58655
IP address blocks: 182.252.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13400 (0x3458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A5
Validity
Not Before: Sep 18 15:00:38 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66eaeb16-b9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:48:56:ad:3f:ca:f1:90:07:d7:ef:34:c3:
aa:2d:e2:08:59:5c:9b:bc:b6:15:40:0a:18:f8:08:
64:d9:07:5c:1d:32:16:f8:bf:89:0a:12:30:e9:67:
be:d1:d3:1d:b8:d2:c2:d1:b0:43:89:d6:74:a4:e6:
4f:00:dc:d0:4f:69:81:7f:ee:1e:17:74:69:11:19:
36:8f:62:50:24:c1:b8:15:a8:ed:63:85:cd:a7:d5:
8e:eb:ab:96:0a:89:d0:d2:62:07:91:c3:4a:6a:b5:
6f:e2:59:ad:51:39:49:bb:5a:21:8e:c9:74:fa:98:
b1:3e:96:55:65:d2:e0:c5:e7:86:c0:1b:6e:eb:1f:
af:cd:30:10:b4:a1:0d:3c:ad:25:e3:b7:a2:20:93:
07:bb:08:07:4a:71:87:9d:68:d4:dc:59:08:45:05:
ca:01:ee:57:6f:89:5e:4c:d0:00:e4:b5:0d:07:24:
e9:6e:62:bd:e9:9c:9b:4d:7c:2f:64:82:e1:f2:c2:
84:f1:cb:77:d8:9e:86:b8:89:82:0a:25:06:e1:05:
50:a0:df:f6:f2:d0:31:ac:1d:ff:0e:00:03:c8:03:
98:f7:50:54:d0:f5:bb:f6:d8:88:a3:f4:0f:b7:8c:
d6:10:d2:92:c7:a7:77:d2:71:2d:72:21:53:76:5b:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:53:E1:69:D7:FB:66:BB:9A:6B:14:E3:1B:21:3F:80:4B:38:C8:9F
X509v3 Authority Key Identifier:
keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.252.94.0/23
Signature Algorithm: sha256WithRSAEncryption
79:53:75:e3:0e:56:95:40:2e:0a:03:d3:0b:66:04:18:90:91:
0e:ee:c2:68:aa:73:ff:fd:28:84:4c:f8:81:21:de:11:01:98:
2d:94:e7:e6:ba:18:1e:b4:24:59:41:32:d1:80:bc:e1:b8:49:
1d:78:34:ae:ff:92:58:78:77:62:44:84:56:0d:9b:ad:90:ee:
2f:80:b9:23:03:97:39:49:61:a5:27:93:ab:f4:c5:d3:f7:46:
67:7a:56:96:a0:db:93:fd:ec:18:97:9f:2b:c2:8c:bf:cf:ce:
67:ab:19:b4:67:53:6e:29:0a:f9:27:3d:8f:b7:52:64:3f:3c:
23:7a:9b:ed:13:e0:7f:f1:5f:4d:c2:a4:74:66:ad:a1:ab:df:
b9:1f:51:42:eb:e7:83:24:2c:c5:d1:e1:34:51:ce:38:2e:d6:
89:3f:6f:ad:b0:1a:6d:4c:58:d8:6b:e2:5b:f6:4f:a1:d3:ea:
b8:f7:da:6a:b2:dd:7d:e3:48:82:f4:6c:6b:9a:2d:3a:5c:35:
ce:9f:eb:94:e7:43:d4:cb:32:b1:fd:45:c6:aa:52:ae:34:65:
4e:f1:ed:09:45:ef:c5:3a:a1:60:6d:60:fc:2b:29:d7:57:24:
53:24:8a:29:20:36:62:77:c2:8e:5f:f9:39:b2:8f:0c:2b:81:
f5:6b:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:35:43 2025 by rpki-client