Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A4857438FC7C11EF9988DB39C4F9AE02.roa
File: A4857438FC7C11EF9988DB39C4F9AE02.roa (raw, json)
Hash identifier: fLhJTsLW5yYu/Aa31sSLrVJ3pE+udcYpxIvEspAz0Mw=
Subject key identifier: 55:5C:4D:94:4F:0F:39:01:A7:13:12:2A:AF:97:AF:34:DB:A5:B5:72
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 5FBC
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A4857438FC7C11EF9988DB39C4F9AE02.roa
Signing time: Sun 09 Mar 2025 00:22:54 +0000
ROA not before: Sun 09 Mar 2025 00:22:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152136
IP address blocks: 210.0.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24508 (0x5fbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323
Validity
Not Before: Mar 9 00:22:54 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67ccdf5e-2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:9c:1c:e2:31:d1:fd:f5:44:5f:f5:fd:dc:
91:60:f1:18:f2:0c:9d:e9:a6:31:d2:f7:62:e4:7f:
64:74:48:e9:e6:4e:e1:f2:db:41:67:c5:08:e3:d5:
d6:2e:e0:68:e1:36:4f:1a:c2:3b:0f:9f:ca:a9:3f:
4b:bf:bf:f4:1b:c1:e6:4e:1e:13:f8:17:49:15:ca:
75:39:d6:ed:ad:eb:c5:8a:58:ea:84:4f:51:e5:fa:
92:29:80:ae:36:e8:2d:12:0a:bd:35:68:6a:43:e9:
21:5d:d8:26:a7:a7:98:94:ed:a0:db:a5:81:d5:f6:
13:be:6e:2a:ef:f6:ab:5b:09:27:07:e2:b7:39:fc:
78:1b:1c:48:42:b8:98:86:9d:57:b9:8c:d6:3d:3d:
c9:7f:a8:a1:cb:6a:b6:f0:49:45:dd:7b:89:25:e2:
73:27:fa:54:03:7e:49:fa:8c:1a:a3:8f:d3:b8:62:
e4:fd:44:9d:57:a2:d9:bf:23:18:3f:9e:50:3c:78:
05:12:e7:e3:d0:8f:2f:1b:10:fc:12:c7:26:b4:9f:
a2:c2:77:58:c4:2e:3e:ca:0f:8d:12:4a:a5:6f:e8:
e2:bc:0d:44:48:7d:ab:94:f3:9a:4d:7f:b7:64:30:
dd:1d:eb:b1:b6:51:b3:fe:93:73:26:ee:44:ed:45:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:4D:94:4F:0F:39:01:A7:13:12:2A:AF:97:AF:34:DB:A5:B5:72
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A4857438FC7C11EF9988DB39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.0.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b8:59:3c:c4:5c:80:8d:48:c7:e7:dd:98:97:74:3e:d4:9c:
08:5c:c9:fd:52:a4:19:b1:89:f9:5c:71:ab:34:92:0e:bb:f0:
54:fc:9b:be:ff:c2:2c:ce:00:d1:85:2a:51:f3:f5:13:0f:f3:
6e:4a:14:4b:aa:48:ba:74:17:46:c9:63:f5:ec:f9:36:eb:fc:
7a:c6:51:ae:52:46:27:6f:43:c4:a7:22:e4:b1:6b:71:16:25:
55:6f:0e:55:93:f3:f1:a4:1c:15:0b:e4:a4:a1:45:43:ab:c4:
59:b5:5c:0e:f5:db:5c:74:87:8a:2c:b1:9f:7b:b9:da:77:59:
5c:5d:05:3f:a5:5e:81:d1:44:1b:82:80:eb:94:a5:8e:ea:72:
b9:ee:c0:4c:b5:08:c0:a6:04:1c:8f:22:c7:bb:1b:eb:66:68:
37:26:6a:97:0e:12:57:d3:6f:c5:e3:09:63:55:c4:14:94:75:
65:d1:04:7d:15:bd:53:52:35:98:1c:24:82:2d:f3:08:17:c9:
6a:1f:46:4d:86:60:d9:fd:81:10:5b:2b:f1:d2:fd:97:11:ef:
ea:c1:2b:fa:ff:6c:a5:b6:f6:ae:af:41:4c:ee:71:14:86:c0:
1c:af:6b:0a:80:aa:22:54:b8:50:e4:c4:e1:89:e6:9f:f8:4d:
d5:81:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:10 2025 by rpki-client