Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
File: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (raw, json)
Hash identifier: pLbQqr89P4AkmvOvi7BDliGKTzDAbmdTOjVTjIAl6bU=
Subject key identifier: AB:E4:C0:54:88:90:98:36:54:80:39:41:81:8E:E0:48:F1:30:64:70
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 34EB
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
Signing time: Thu 06 Jun 2024 15:11:14 +0000
ROA not before: Thu 06 Jun 2024 15:11:14 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 58732
IP address blocks: 114.130.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13547 (0x34eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1
Validity
Not Before: Jun 6 15:11:14 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6661d192-ff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:39:0a:04:9e:50:b8:f7:2e:cc:9a:35:d1:
a0:ee:90:90:41:66:24:df:0b:72:02:4a:8b:47:10:
c2:fe:c3:31:d1:fc:14:e6:3c:0b:5a:2c:1a:7b:4e:
13:33:86:57:90:8d:57:81:fb:c1:b1:2e:1b:a3:37:
92:2c:64:1c:54:6a:05:66:98:3a:37:dd:e0:5c:3b:
fd:af:3c:6e:86:a3:9e:e5:27:e6:ff:df:62:d8:1c:
8d:61:2d:69:d2:80:7e:40:03:15:c0:bb:96:77:b9:
11:fc:c0:99:7e:89:f8:0f:c6:2a:bc:f6:27:61:36:
29:6a:6d:f6:50:4d:9c:e1:fb:b6:0b:38:a1:a9:d8:
a9:c9:20:be:de:43:b3:90:6d:30:4e:ad:a8:71:2a:
c9:44:c6:0a:97:51:90:11:ba:5b:09:fb:d4:ce:48:
7b:fe:76:1e:75:91:4f:75:05:0f:47:88:fd:e7:ae:
a7:9b:ef:c4:67:f0:e8:22:6c:31:cb:5d:c4:9e:e1:
38:b8:b3:f7:d0:eb:4d:1d:d7:de:e7:2c:6a:cf:00:
51:10:5f:bd:10:7b:39:33:6c:83:b9:19:9e:6c:27:
ee:7a:4b:c8:2e:2a:3d:7f:7d:b3:7b:93:01:e9:82:
d0:c5:f1:9f:3c:a7:a0:c5:47:1d:80:84:ed:24:8a:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E4:C0:54:88:90:98:36:54:80:39:41:81:8E:E0:48:F1:30:64:70
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.130.248.0/22
Signature Algorithm: sha256WithRSAEncryption
94:08:36:d8:33:b8:61:d5:01:fe:5e:d0:2f:a2:ee:6d:76:98:
4b:f7:ac:8c:a8:b3:ce:47:58:1d:fd:ba:8c:9f:34:e6:8a:c5:
7e:72:cd:f5:9a:e1:1c:8b:b9:ca:59:73:47:75:5d:bd:d1:51:
72:be:7c:db:ee:99:6f:d4:a0:01:51:4d:d7:e4:b0:42:1e:76:
e5:c3:42:13:75:a0:04:ab:46:8e:21:a6:0a:f1:da:f9:b9:b5:
c4:d2:2a:6b:92:e5:c0:7c:75:b9:0d:50:af:a4:f0:ba:22:e9:
49:d7:5c:39:5d:21:80:2f:ac:20:6f:54:38:40:4b:b4:32:7d:
0a:1e:47:3c:26:63:84:cf:08:bb:1d:8d:c7:e7:9e:bc:19:8a:
6a:db:90:91:aa:3e:80:ed:49:91:15:52:ca:c5:c2:6a:f7:35:
0c:5e:53:b9:5f:e1:26:43:50:e7:33:b3:86:d4:df:58:fc:3f:
69:b9:85:1b:cf:38:dd:9a:8a:04:3b:cc:e2:60:a1:66:a5:ea:
bf:9a:76:39:2b:22:29:e3:e6:e1:09:00:bf:34:b0:2b:27:88:
85:1a:d1:e2:23:6f:ee:bd:76:bd:3c:4d:47:02:df:bd:6d:40:
f4:31:15:99:1d:bb:65:16:e3:5b:65:a7:a7:4d:f7:5d:e1:4e:
3a:0f:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:57 2025 by rpki-client