Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/8DEEDC96E6B511EF9FEF6436C4F9AE02.roa
File: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (raw, json)
Hash identifier: 0Wp24a54v+z2yZzn7ZdVr/HDi0WffJnb8k/Q3oLm6hg=
Subject key identifier: 9C:E4:04:E8:3A:12:D6:3F:BE:23:15:43:FF:43:6D:CB:B2:02:86:7D
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 053E
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/8DEEDC96E6B511EF9FEF6436C4F9AE02.roa
Signing time: Sun 09 Feb 2025 07:14:52 +0000
ROA not before: Sun 09 Feb 2025 07:14:52 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 45271
IP address blocks: 1.38.209.0/24 maxlen: 24
1.38.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D
Validity
Not Before: Feb 9 07:14:52 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67a855eb-c509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:4c:5f:cb:36:ea:db:2e:5c:99:41:eb:bc:
a4:4a:af:72:71:83:8b:fe:0a:48:b8:d5:73:0c:d4:
63:f0:a4:f5:5d:4f:32:6e:4a:61:a7:3a:1a:82:e6:
cf:2e:35:1c:62:ad:35:ba:93:d9:f2:7b:76:d1:5e:
bb:0e:52:e1:0c:48:77:54:8e:e2:c6:9c:3a:1b:dc:
ac:78:b6:1d:40:d1:0d:f1:a3:0f:00:41:d6:24:f5:
13:a0:ac:77:d8:f4:86:ca:0c:cc:99:f3:20:d1:b8:
72:fb:1a:a9:a5:ac:5b:56:0f:9e:fe:f1:9c:b7:d9:
4e:ba:a6:69:81:17:79:b4:1a:34:2e:df:4f:8c:8a:
b7:f4:4f:f1:8d:e6:71:31:f7:77:17:04:df:5c:d9:
1b:76:8f:7f:3f:34:bb:b8:1b:c7:b6:35:d7:47:f7:
b9:55:58:bb:92:d4:de:d7:6d:5f:42:51:27:48:f3:
6a:16:f5:0f:19:bd:92:25:5b:d7:c3:5b:f5:40:76:
6f:13:7c:6f:e7:52:21:4a:50:8d:99:59:a9:f5:17:
bc:32:3c:2a:b6:75:df:10:ce:30:33:58:28:8f:ad:
fa:18:3c:04:97:97:23:36:a7:2b:cb:b3:00:00:07:
c4:a6:83:aa:2d:eb:b8:4f:05:22:70:60:2e:cf:56:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:04:E8:3A:12:D6:3F:BE:23:15:43:FF:43:6D:CB:B2:02:86:7D
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/8DEEDC96E6B511EF9FEF6436C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.38.209.0-1.38.210.255
Signature Algorithm: sha256WithRSAEncryption
30:b7:4a:2c:80:d7:97:eb:1d:26:ad:c4:88:49:d6:b2:c9:2a:
b3:1a:a7:ab:22:86:f5:2f:c9:b1:bb:69:fb:cc:9c:40:09:08:
23:0b:fe:e1:4d:5f:5e:2a:92:2d:81:03:b5:3f:a5:fb:ea:9b:
5e:a9:22:bf:0a:e2:9d:f7:09:fb:d3:95:98:6c:65:bd:8a:06:
ad:36:43:11:0c:bf:b0:68:7e:18:e1:cd:e6:01:00:19:e6:97:
d3:6a:1d:7a:ab:a5:2b:f8:f1:f7:3a:b5:53:a3:be:3a:c8:03:
2a:6a:f9:a7:22:1e:26:90:23:4a:15:64:da:a8:9b:3f:5f:43:
89:67:45:3a:40:d2:bb:1f:0e:32:ef:fc:10:6c:c0:b5:ca:9f:
88:ae:c2:75:51:3a:60:d9:f6:0e:d3:3c:19:17:37:dd:36:ba:
a7:df:1d:fd:6e:ba:e1:ad:8a:0e:a5:af:6a:fe:a0:3d:46:e3:
24:93:03:72:26:bb:79:e3:56:87:f5:7b:e8:c0:59:79:d8:a5:
a3:93:00:17:60:c8:18:c3:f3:34:bc:60:9c:69:ca:79:42:8d:
f8:5b:16:d2:1f:62:9e:08:c7:90:29:8c:46:b5:b0:f1:1d:ce:
04:d3:07:f8:f4:90:bf:80:97:e1:b7:d3:5c:6b:24:90:ff:06:
2a:0b:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:29:16 2025 by rpki-client