Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa
File: 49FAAD72591211EDA743880DC4F9AE02.roa (raw, json)
Hash identifier: krevIMI6IUNw/+chMIBio+O1qxsYHBvCeuqJ7cXD7Gc=
Subject key identifier: A6:24:4D:87:7D:22:C4:03:BB:AE:4B:B7:09:F3:14:84:F2:4E:77:3D
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 0566
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa
Signing time: Mon 16 Sep 2024 23:22:12 +0000
ROA not before: Mon 16 Sep 2024 23:22:12 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 19809
IP address blocks: 119.31.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146
Validity
Not Before: Sep 16 23:22:12 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e8bda4-5e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:23:de:25:c1:1b:4c:ae:2b:b3:fa:00:61:
23:93:a6:62:f0:0f:42:c4:bf:22:08:97:91:96:e1:
38:a8:e7:b0:ec:6b:02:0c:b4:a3:78:06:ad:c0:cb:
a7:c3:cf:8e:6e:96:04:c3:08:c6:f1:67:76:fc:87:
cf:f8:58:3b:85:62:02:2a:17:72:7f:24:46:1a:4b:
df:1f:21:a0:8b:46:d6:1a:8d:e5:af:96:42:18:03:
2f:c3:d7:23:c7:93:16:38:77:36:3f:0e:8b:ac:44:
27:75:ab:65:0f:ad:06:19:7a:c6:f7:65:e8:ba:72:
95:86:3d:a8:e7:8e:cb:bb:7d:d1:24:b4:0b:0d:16:
79:d6:62:da:5e:bd:46:79:c0:ad:44:da:1a:de:70:
09:27:42:f4:98:e4:32:1b:99:98:2d:e9:c6:ae:24:
7a:d9:67:68:b5:d3:6c:69:d6:ac:4a:46:49:d4:b2:
d0:f8:89:79:53:d2:df:af:fe:a4:48:6b:8e:b4:34:
b1:1a:53:12:bb:b7:96:a9:ff:08:24:51:4a:cc:48:
8a:e8:6e:07:c4:78:ac:2b:9c:a8:ae:25:c1:9d:87:
af:f7:95:d5:8e:6d:94:7d:39:af:86:87:15:14:d9:
08:b2:8a:81:ac:19:3e:d6:65:fd:c4:2f:1b:ee:df:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:24:4D:87:7D:22:C4:03:BB:AE:4B:B7:09:F3:14:84:F2:4E:77:3D
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3f:74:b7:fc:ca:f9:3b:5e:a5:9b:21:08:bb:47:1b:e5:ad:
37:99:51:eb:46:32:c4:0e:0c:a3:16:e7:65:cb:ba:bd:e9:5b:
1c:bc:5f:b7:82:6e:88:5f:94:05:d8:56:2c:de:4a:d6:1a:34:
de:7a:0e:7f:ba:14:69:e1:22:79:6c:16:f4:e3:9b:ef:3c:f5:
bf:39:a8:3a:aa:b7:ff:de:92:60:07:cf:46:06:9a:68:51:97:
e6:05:63:11:62:6e:84:71:c3:47:29:13:e1:ab:a3:25:17:07:
79:a0:d2:73:bb:1a:4c:58:98:95:36:7d:ac:17:e0:1e:a2:54:
11:25:aa:b1:62:81:e8:3e:18:7f:b8:aa:7f:84:db:06:6e:a8:
18:bf:5e:dc:2c:06:37:0c:f3:1a:be:df:36:6e:85:25:a3:91:
fe:29:f1:28:67:33:d4:5c:46:60:7a:90:e3:6a:4d:52:35:7a:
9c:fa:06:c4:f6:68:a8:83:94:5c:2c:5d:19:b6:de:06:0a:a9:
5f:c9:51:7a:29:01:7e:26:26:10:14:0d:91:d7:de:b7:7c:24:
97:a1:66:12:39:28:0d:55:12:a5:77:c5:00:91:ac:85:8b:d6:
3f:5d:c9:81:1e:11:71:e6:44:d1:e4:62:f5:f3:cd:4b:b5:66:
b7:5c:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:47:20 2025 by rpki-client