Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa
File: 82003A8A5FA911EFA257682FC4F9AE02.roa (raw, json)
Hash identifier: W7UUOTitRmV7VatTbNa4y5kz9GWBQ2qifJrsz47tjOs=
Subject key identifier: EE:D4:85:E3:00:FE:51:FC:E3:D3:2F:55:76:5D:9A:80:22:24:35:01
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4656
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:35:58 +0000
ROA not before: Thu 05 Sep 2024 03:35:58 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45542
IP address blocks: 112.137.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18006 (0x4656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:35:58 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9271e-be07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:27:11:da:f7:f5:fb:ec:dc:8d:78:01:af:
eb:24:2a:8b:77:93:c9:ee:f4:8c:b6:07:77:5c:03:
ba:68:9f:f6:01:23:5e:40:9a:d1:52:72:4f:b8:d3:
8f:76:f3:ed:32:a0:d3:18:47:9f:fc:6c:98:af:8a:
9e:14:b9:9e:d6:3f:22:89:27:90:98:93:3d:ad:b9:
28:2a:fb:6b:ba:06:04:5c:4a:c0:cb:15:d4:cf:04:
2a:0e:2f:fc:5c:9a:fb:4c:1b:e9:95:4f:a0:22:13:
26:7f:12:b6:fc:b0:0e:04:0d:80:bd:d8:a8:2b:c5:
46:dc:7a:81:6a:6e:29:53:fb:94:4e:4a:22:fb:5d:
3d:55:03:d7:a0:89:f4:e2:23:2c:48:c6:f5:70:c3:
ea:c9:f3:2d:15:c6:d9:f7:88:78:c4:73:a3:6b:72:
13:16:b1:7a:ab:d0:76:90:71:19:18:5a:f5:72:e0:
dd:f7:76:8d:cd:f5:fc:46:0f:bf:2f:93:0d:da:7b:
bc:0e:7c:93:e4:46:e1:3e:2e:51:d2:23:c8:16:9c:
02:05:79:0a:ff:3d:6a:0d:af:7d:cc:c1:7b:56:16:
cc:a2:54:a7:8b:a1:71:32:53:8f:74:92:38:d3:79:
9a:7e:c9:de:a5:b3:6b:d6:a6:f8:7a:30:1c:ca:e7:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:85:E3:00:FE:51:FC:E3:D3:2F:55:76:5D:9A:80:22:24:35:01
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.137.128.0/20
Signature Algorithm: sha256WithRSAEncryption
33:9b:93:82:da:48:b3:40:fc:9e:23:f4:36:af:fc:6b:fa:91:
4b:0e:10:29:a7:7e:f3:9c:3e:ee:f3:ba:6f:89:c7:f5:05:6f:
b3:eb:34:03:3a:8f:19:e0:69:fb:e9:4d:c5:71:67:33:06:6f:
4b:46:53:95:22:bb:3e:f0:30:c7:c9:01:46:94:ca:ca:33:fc:
c0:fb:c9:9d:2d:2a:0c:9e:c8:ee:63:05:c9:1a:c2:97:55:1b:
30:b3:18:c5:c2:1b:79:5e:7c:af:68:73:b3:0a:5e:6f:76:26:
33:3c:89:67:aa:57:cb:c6:72:e9:14:c3:99:1c:e0:df:1a:be:
72:9d:39:32:b6:0e:a6:96:8b:da:4c:16:1a:40:9c:03:7a:51:
de:a2:2d:8a:24:8b:a3:1f:f3:8c:37:52:34:09:e4:72:07:2f:
e8:29:a1:77:23:ca:3a:07:fe:04:35:6c:de:9f:50:31:b2:84:
bd:d1:fb:3d:2a:75:35:04:e8:0c:71:a5:4e:ac:a5:e9:a3:02:
05:8f:11:fe:ba:f3:9c:bc:0f:02:52:a3:36:e4:a5:b5:bb:e2:
9b:9d:6f:37:dd:2c:02:d0:3d:4c:ca:95:79:94:c4:a8:28:87:
b9:36:cd:fe:48:14:96:16:c2:70:58:b0:8d:fc:1f:43:bd:3d:
49:66:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:14 2025 by rpki-client