Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa
File: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier: XVeZDTc69uGCDdXez9QUlyk7cBcd+qKHtk4lz+fH2Nk=
Subject key identifier: E1:48:85:0E:03:BA:EC:73:9E:F2:49:99:E2:0B:9C:BC:EA:C0:F6:34
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0AC6
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa
Signing time: Wed 06 Nov 2024 19:38:22 +0000
ROA not before: Wed 06 Nov 2024 19:38:22 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 15412
IP address blocks: 45.125.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359
Validity
Not Before: Nov 6 19:38:22 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=672bc5ad-ca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:c5:59:a9:31:e9:b6:d9:37:88:13:01:cc:
9a:9b:f5:55:5e:38:0c:a1:d6:9a:0c:79:a2:5e:eb:
d7:ff:25:ea:69:7a:82:09:35:53:cb:ea:48:cb:05:
28:fc:fb:2c:b5:37:2b:cd:29:d0:dd:07:be:e3:7d:
d9:f2:13:14:7a:f9:14:2f:53:92:ca:1f:0e:b8:2b:
b1:49:10:05:ed:0c:81:89:10:b6:41:24:83:78:87:
1e:a2:75:bf:27:88:ab:eb:d3:a1:c4:d5:33:4c:e1:
aa:76:6e:0e:43:1e:12:51:2d:c0:e6:e2:65:3d:5c:
e0:e0:0d:dd:1c:5b:99:ee:d8:38:d4:0a:b9:61:e2:
a5:30:9a:01:d3:0e:ac:02:ab:1d:15:8c:5e:f9:bc:
74:60:43:51:25:05:a1:dc:00:37:74:3a:3d:8f:07:
23:ac:98:68:b5:9e:eb:df:d2:4c:55:ae:8d:bb:64:
12:d0:e2:4e:f2:fb:03:09:cf:49:96:d6:75:92:31:
b0:88:ae:a0:ed:72:57:e1:ee:f8:27:4c:45:4e:e6:
10:21:59:e8:bb:81:ab:90:19:f2:db:6b:25:ea:72:
1b:94:41:d7:84:9e:c7:1e:ea:c0:82:29:73:ea:6f:
17:c3:f9:62:8e:12:e0:00:41:62:29:f4:14:b0:b1:
81:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:48:85:0E:03:BA:EC:73:9E:F2:49:99:E2:0B:9C:BC:EA:C0:F6:34
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.188.0/22
Signature Algorithm: sha256WithRSAEncryption
97:89:c0:90:d3:ef:22:c9:57:aa:23:ec:a0:b5:72:b9:ba:40:
18:37:48:ab:2b:c7:30:32:9b:91:14:6e:ef:9e:ff:f5:33:2e:
59:48:cd:5f:05:36:e6:8c:3b:a0:f4:b2:df:5a:c8:91:a4:d7:
dc:0e:cc:ab:57:3c:87:c7:bd:15:24:33:7f:be:61:61:e9:e0:
1f:c3:0b:81:2f:10:a7:f6:71:ce:c4:c0:fc:97:b6:fa:03:fd:
5a:0c:70:24:c2:0e:0f:0a:bf:dc:9d:53:29:e1:b8:12:7f:cd:
bd:c4:d9:80:ab:48:f4:81:e0:fa:99:fc:0e:23:6a:4e:f4:f6:
20:0c:b7:71:65:8d:5f:73:8f:b3:e3:5b:4b:44:cf:a4:74:ea:
c9:a0:b3:ed:df:85:a5:24:9d:50:57:15:9f:19:6b:e4:15:c7:
7c:54:98:d4:28:15:98:17:a1:40:26:45:29:c3:af:57:75:cd:
e6:8f:3f:ca:f1:bf:fa:f8:9c:bb:3e:b0:d5:e7:18:ca:cf:7f:
31:ef:50:19:75:24:c4:db:69:bc:21:24:b3:ae:e3:ce:09:47:
2c:8c:8a:8a:15:db:42:7e:e1:e1:3c:34:23:0d:ae:af:38:3f:
f6:09:d5:f9:59:54:8d:65:e3:93:8b:d6:29:68:81:17:f3:04:
23:da:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:40:00 2025 by rpki-client