Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
File: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (raw, json)
Hash identifier: /+hXj2B+GgaDbKZ5BK9B4X/m6qkH66B+b+D/QNmlbQE=
Subject key identifier: 0C:9B:90:AC:5F:90:D5:E6:0C:FD:C1:F6:28:52:8B:3F:BF:31:41:6C
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 08D8
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
Signing time: Thu 06 Feb 2025 20:19:01 +0000
ROA not before: Thu 06 Feb 2025 20:19:00 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 45593
IP address blocks: 112.78.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F
Validity
Not Before: Feb 6 20:19:00 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a51934-dc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:1f:8e:6b:21:57:01:36:66:9a:94:03:0f:
ed:bd:25:7b:9a:c9:43:55:6a:51:95:ca:5c:61:1c:
65:74:a5:9d:0d:a4:50:05:d2:12:9e:3f:1c:20:1c:
ab:b7:1b:ec:b3:b5:f2:9d:95:2b:35:dd:d8:57:45:
28:c1:8d:48:d9:4e:aa:dd:a3:b2:44:f9:3b:3b:fd:
64:3e:0f:61:51:61:67:b1:1c:65:78:95:76:b6:5d:
ec:4b:92:b3:af:bb:96:28:b6:1e:6e:83:07:ac:54:
df:30:b6:45:e5:72:6c:2e:04:62:b4:75:86:ae:9b:
22:3a:2a:0f:c3:47:7e:7b:43:9e:f1:39:58:34:34:
f3:03:b0:df:37:39:f2:20:77:c4:03:2f:df:4e:42:
f4:d2:39:5a:7d:56:10:f7:11:99:2b:94:62:fd:18:
4c:44:d0:b0:50:39:6d:11:ff:72:13:78:49:d9:89:
7f:1c:a0:33:0d:d0:24:10:a2:8a:4a:29:21:2f:84:
ba:ff:c7:e0:e4:f1:c0:bf:eb:50:8b:67:96:8c:37:
e7:57:3a:91:3e:ce:3e:b5:05:91:69:e3:9f:04:8c:
01:ba:5a:5d:1a:84:34:d7:d3:fb:5a:00:51:d8:ed:
92:93:dc:ae:30:49:33:97:71:84:48:7c:8e:1e:e1:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9B:90:AC:5F:90:D5:E6:0C:FD:C1:F6:28:52:8B:3F:BF:31:41:6C
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:35:cc:aa:3e:88:2d:88:b2:0c:03:7b:28:d3:3d:51:0f:e6:
12:a1:f0:93:5c:66:8d:4b:06:d4:d8:63:00:4a:77:b9:73:5c:
df:f3:dc:7c:48:0e:fc:bc:0f:e9:fa:b5:bb:f0:36:e2:11:bc:
24:2b:aa:8c:a6:50:73:0c:23:84:a2:dd:9c:27:41:5e:42:17:
fc:b6:48:76:c8:a5:6d:1b:16:18:d1:2f:09:6f:3e:9a:8f:5e:
c6:d4:88:79:8c:9c:30:23:57:ea:9c:91:81:2f:f7:8f:94:49:
5f:82:fa:95:69:c2:af:73:63:6b:d1:f2:a4:ac:00:f3:52:3a:
f1:79:72:7c:38:1e:12:9a:72:4e:a5:4d:e0:d2:fd:99:3a:d6:
aa:28:e2:42:eb:9b:77:22:74:a1:6a:eb:d4:f2:00:0b:a1:70:
6b:3e:f8:cb:06:56:7f:32:c9:4f:fe:83:fa:75:6b:ad:f3:0b:
4d:b9:4d:0e:12:ad:33:04:1f:77:43:e4:f5:c2:52:5f:5b:4b:
00:25:c3:6a:29:bb:2e:04:cf:78:68:2d:ba:7d:e6:13:5e:bb:
48:84:a2:97:3c:3d:e3:c5:67:98:fb:4b:44:8d:e5:c4:1f:78:
6a:1b:bc:77:eb:5f:1d:0e:9a:13:2c:4c:20:f9:ee:6d:c1:8b:
d3:20:96:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:30:09 2025 by rpki-client