Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E2E360EEF3EE11ECBAE10054C4F9AE02.roa
File: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (raw, json)
Hash identifier: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=
Subject key identifier: 1B:B6:44:27:09:40:0D:7F:AD:5E:D2:05:41:B3:59:B0:86:2A:D9:06
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 25B5
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E2E360EEF3EE11ECBAE10054C4F9AE02.roa
Signing time: Wed 12 Mar 2025 15:42:54 +0000
ROA not before: Wed 12 Mar 2025 15:42:54 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 6453
IP address blocks: 123.136.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9653 (0x25b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46
Validity
Not Before: Mar 12 15:42:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67d1ab7e-917c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:54:c5:4d:17:6e:39:7c:fb:88:3a:ef:67:
7c:d0:72:bb:a6:91:c5:62:76:6f:58:55:61:a8:69:
9b:51:28:da:7e:63:09:95:d4:38:e6:fa:bc:bd:15:
be:66:21:06:ba:69:e8:85:ca:4c:7b:49:2b:b8:ce:
d7:79:3f:22:be:eb:70:6b:9e:e7:41:39:ce:da:c9:
07:f4:c4:10:3c:5a:aa:07:58:9b:75:d0:4b:22:42:
1c:13:89:6d:0b:77:ea:33:f3:81:4e:5d:b7:95:ee:
9d:6f:4d:8b:05:52:e7:26:f8:27:f0:0f:c5:ea:81:
9e:5f:19:fa:e3:ff:74:35:f1:6d:df:b2:c2:4c:b0:
1e:81:20:36:59:9b:9e:34:59:e1:05:38:71:60:f2:
e5:cf:e8:10:ce:ae:23:1a:14:47:42:49:37:43:8b:
bf:20:64:fb:69:40:7b:2f:27:a0:aa:02:94:a9:97:
da:4b:00:9a:84:47:0d:71:de:c1:49:ca:ef:33:c3:
0c:60:ac:06:27:db:b2:f2:93:55:3a:db:b7:f5:ae:
18:44:a2:f0:ac:bc:56:fa:8f:9c:4c:a5:ac:36:1a:
fb:34:ff:b0:8c:77:e9:91:db:a8:1a:8a:2f:68:a9:
30:a1:f6:f1:be:d9:8c:4c:9c:ba:aa:ad:8b:80:24:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:44:27:09:40:0D:7F:AD:5E:D2:05:41:B3:59:B0:86:2A:D9:06
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E2E360EEF3EE11ECBAE10054C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.136.16.0/21
Signature Algorithm: sha256WithRSAEncryption
56:a1:e5:9c:9b:8c:d7:ae:a7:6b:f7:63:ae:e6:24:d8:93:43:
4e:1f:72:bc:31:8b:11:0c:07:e3:18:e0:fd:3d:04:3d:4b:af:
21:45:ac:7f:3f:14:3f:20:17:4d:81:34:0a:30:6a:2e:5d:47:
f9:4c:68:6f:1c:b8:58:c4:05:37:f2:df:bf:2b:3a:6b:12:3b:
88:b6:f3:fe:02:db:7e:e2:5d:5c:4f:5f:2c:fd:76:b2:aa:5c:
80:ec:a4:74:3b:1e:9b:ba:f2:64:ab:74:12:a5:a4:e6:2d:2f:
1a:9e:03:8e:53:bc:29:d6:dd:ab:72:81:c7:01:f2:3c:08:08:
b2:77:d7:6c:22:b9:74:4c:3b:99:50:8f:1a:30:2b:52:ec:72:
f3:29:57:5d:16:57:1c:eb:06:61:68:04:33:d7:b6:fc:fb:ff:
2e:3d:47:f3:d1:ff:79:8b:8e:25:be:88:89:b0:ec:c7:fb:d0:
59:aa:8b:32:8a:39:3d:f8:79:42:30:57:36:a6:0a:a0:67:6d:
0e:d5:0f:e0:44:eb:d6:c8:b7:e5:95:2b:6d:ef:36:ac:6f:0c:
98:80:9d:51:34:13:79:46:33:ed:c7:eb:61:8b:c0:d8:d8:2f:
a4:12:e5:ef:9f:49:dc:aa:58:1f:e1:d0:41:c0:68:fd:ca:f2:
bd:49:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:22 2025 by rpki-client