Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa
File: B57678E8D73711EEAECFA720C4F9AE02.roa (raw, json)
Hash identifier: 1mdRwvV5n8x0UgBPlIBjHnwgQhIGSx8VQkbewDudiQM=
Subject key identifier: 43:DB:F1:C2:84:DB:2D:9F:45:C8:F5:91:D4:06:0B:37:85:E0:0D:E9
Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
Certificate serial: 99
Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa
Signing time: Tue 03 Dec 2024 05:09:23 +0000
ROA not before: Tue 03 Dec 2024 05:09:23 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152129
IP address blocks: 210.79.128.0/23 maxlen: 23
210.79.128.0/24 maxlen: 24
210.79.129.0/24 maxlen: 24
2401:5420::/32 maxlen: 32
2401:5420::/48 maxlen: 48
2401:5420:1::/48 maxlen: 48
2401:5420:2::/48 maxlen: 48
2401:5420:3::/48 maxlen: 48
2401:5420:4::/48 maxlen: 48
2401:5420:5::/48 maxlen: 48
2401:5420:6::/48 maxlen: 48
2401:5420:7::/48 maxlen: 48
2401:5420:8::/48 maxlen: 48
2401:5420:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC415
Validity
Not Before: Dec 3 05:09:23 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674e9283-93ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:a5:eb:4f:0c:44:ee:cb:36:22:fd:ca:3b:
a5:a0:c7:cd:c7:e0:43:91:1c:01:49:61:ea:62:0a:
c9:78:76:00:ac:79:b8:dc:76:a8:01:29:8f:d0:c5:
ae:ab:81:f8:d4:bb:3e:03:0c:ba:3f:8d:1a:da:74:
98:44:e4:2d:0a:0c:c6:f8:ad:ae:c3:cc:6a:b4:e7:
1e:7a:fc:64:b0:f3:91:bc:b0:0a:fa:4d:5d:54:01:
64:26:df:d7:c1:bd:37:96:39:a1:35:12:22:5e:9b:
7f:18:e5:fe:29:d5:92:be:00:7c:01:84:5d:9c:2c:
38:8f:df:00:63:91:df:c0:fc:56:11:bc:b5:7c:97:
16:e7:ae:82:b9:45:8b:f7:1c:9f:7c:70:4a:24:3e:
15:a4:b3:36:97:e7:ea:fe:31:c2:48:a0:c6:91:7f:
b8:0f:3e:47:4d:37:b1:bc:79:9e:4b:f3:a8:fa:60:
d6:f3:aa:0b:ae:85:7b:4c:c1:d2:17:83:9c:73:13:
4b:76:48:d2:af:45:52:f1:d0:f8:69:8c:b2:40:06:
1e:c7:a3:cf:16:17:e5:bb:3e:bb:d0:7d:11:ff:94:
88:a6:9e:e1:3e:1a:bf:59:c9:b4:9f:2b:45:ca:2d:
fe:1d:86:c5:75:83:bf:a7:21:7f:e5:bc:e0:b1:45:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:F1:C2:84:DB:2D:9F:45:C8:F5:91:D4:06:0B:37:85:E0:0D:E9
X509v3 Authority Key Identifier:
keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.128.0/23
IPv6:
2401:5420::/32
Signature Algorithm: sha256WithRSAEncryption
ab:50:99:7d:35:ad:7b:10:a3:53:73:cf:97:b7:9d:b1:54:d0:
46:17:7b:cb:ea:05:db:1e:9d:95:6d:32:15:6b:94:16:23:65:
79:f4:52:68:61:52:43:22:64:a9:46:c1:b2:d5:40:60:70:69:
1d:af:d9:ad:4e:ad:56:20:4c:0b:20:b5:7d:6a:77:eb:6b:7d:
6e:3c:77:4f:8f:27:4a:f9:04:9a:3b:b1:8f:ab:cd:c6:90:ec:
fa:cb:5c:56:f7:3b:5e:85:7b:8d:8a:8b:b1:ae:bd:73:1d:41:
b3:cd:99:62:29:b8:a3:87:88:ff:e3:5a:d3:1a:fb:05:33:eb:
b0:ef:ae:55:c1:88:ac:58:f2:81:2e:f5:a0:73:41:cc:d1:43:
89:9d:ee:c2:56:4a:c1:c1:82:36:50:a9:e8:ae:92:97:e9:eb:
18:48:86:6d:62:54:a2:59:42:b3:39:db:3c:b9:0d:47:49:5b:
c2:d6:2e:12:17:02:07:17:ad:cd:ea:66:84:58:da:b9:ef:61:
51:fa:7d:e1:80:d3:92:e2:6f:cb:2c:d4:ee:ae:30:6d:4f:fb:
b1:93:87:84:94:10:d7:bc:12:fb:f7:f3:1b:05:21:b6:7f:bb:
19:21:20:e5:39:08:46:91:c4:f4:03:6f:2b:63:75:f7:99:b6:
ba:a7:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:44 2025 by rpki-client