Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9EEE3C44D94F11EF916BCF23C4F9AE02.roa
File: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (raw, json)
Hash identifier: JTgCQ/a/n5QlsjMCTHDArlAgGVjedlWxdAR2U4v5LnA=
Subject key identifier: DB:F7:8C:AC:C6:5F:AA:93:67:5D:08:20:95:5E:5B:DE:D1:EA:62:51
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 0182
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9EEE3C44D94F11EF916BCF23C4F9AE02.roa
Signing time: Thu 23 Jan 2025 06:02:26 +0000
ROA not before: Thu 23 Jan 2025 06:02:26 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 133320
IP address blocks: 45.118.9.0/24 maxlen: 24
2001:df6:a900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5
Validity
Not Before: Jan 23 06:02:26 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6791db72-1bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:ba:1a:e8:06:4a:90:bf:18:8a:92:e3:4a:
a5:d7:bd:8e:e8:6f:c8:81:d5:4d:45:12:e0:90:16:
b5:7b:57:87:2c:10:2a:2a:43:c5:39:c1:7b:18:ee:
82:5e:e9:c5:9c:8f:be:cd:69:96:94:9e:b0:2e:86:
2b:54:00:e5:18:3c:b0:af:07:01:16:de:f2:79:a9:
38:8b:c8:18:9c:09:60:30:5f:c0:73:97:b3:91:84:
f3:e8:20:17:09:fc:c0:d9:2f:55:d9:b0:aa:63:a6:
da:d3:a7:b5:41:90:32:04:5c:f2:03:f8:36:1d:7d:
0c:a3:e8:42:44:6b:3d:30:a8:dd:b2:9b:5c:c0:4b:
fa:d7:5b:8e:84:8d:f3:60:cc:e0:17:7a:f3:36:2a:
a6:94:4b:31:20:ec:55:1c:f2:46:26:35:2e:32:e9:
f5:43:eb:ee:8b:2e:5d:25:5c:07:5b:41:09:76:42:
a4:ea:96:da:67:bc:29:4b:3b:a1:fd:c8:58:df:fe:
61:c5:6f:59:4b:15:85:10:87:60:b6:80:8c:ab:00:
49:7f:b1:84:41:b7:bf:a4:06:1e:68:5e:a1:10:56:
75:a0:c4:f7:12:fb:05:80:07:e2:ea:cf:7b:f5:90:
54:1a:b9:e5:39:9f:4b:5a:c5:cd:7f:c4:85:74:5d:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:8C:AC:C6:5F:AA:93:67:5D:08:20:95:5E:5B:DE:D1:EA:62:51
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9EEE3C44D94F11EF916BCF23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.9.0/24
IPv6:
2001:df6:a900::/48
Signature Algorithm: sha256WithRSAEncryption
07:ae:bc:37:d8:c1:65:dc:ca:68:e5:ab:b3:5a:bd:d5:82:03:
27:60:5f:76:19:61:13:52:46:cf:e4:43:74:07:a5:24:86:a6:
1e:ae:86:b9:59:d5:fc:ee:30:44:81:6f:f9:5c:02:ca:bd:a2:
4e:80:ac:17:f3:61:ce:56:2b:71:3a:ab:f8:ac:ad:c7:7a:83:
09:8f:69:86:43:be:86:19:ac:29:d7:4c:a8:95:c6:9a:f4:2a:
48:d0:58:4b:a3:b3:4b:79:58:81:49:bc:52:59:0e:38:82:ce:
1a:68:47:3d:c9:0f:69:f9:e4:93:a3:ac:96:af:f0:7b:b1:f9:
47:e4:64:32:4a:8b:86:72:f5:aa:b6:e3:75:1d:fa:82:37:3c:
f3:68:85:e0:72:7e:12:ca:08:61:0a:37:9c:4b:0d:51:12:e2:
ab:bf:13:31:4e:cc:fa:c5:9a:dc:0d:81:dd:82:bc:45:a6:6f:
24:1f:d3:9c:61:fa:0f:82:53:db:7a:e5:3b:df:21:12:a8:e2:
b4:34:d7:bf:47:2e:64:77:9a:4e:88:2c:d8:a0:65:c0:10:8f:
82:48:bc:bb:54:53:01:dd:1e:9a:00:d0:42:91:25:21:46:28:
e0:b0:93:da:41:5f:76:0d:7e:95:c8:c5:53:8f:bf:01:f6:d0:
0c:49:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:51 2025 by rpki-client