Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B61774A4D9DF11EFB722C742C4F9AE02.roa
File: B61774A4D9DF11EFB722C742C4F9AE02.roa (raw, json)
Hash identifier: 0FMxIxopYuksNPEORva1KZEsgmfrP5pSEoctnQh0rm0=
Subject key identifier: 52:DD:FB:FF:0C:51:2B:22:D2:39:BC:A3:D6:87:E0:CF:6D:25:D3:59
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 274D
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B61774A4D9DF11EFB722C742C4F9AE02.roa
Signing time: Thu 23 Jan 2025 23:13:53 +0000
ROA not before: Thu 23 Jan 2025 23:13:53 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 10141
IP address blocks: 210.14.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10061 (0x274d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70
Validity
Not Before: Jan 23 23:13:53 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6792cd31-455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:83:96:a7:3f:07:48:0a:67:4f:d8:61:aa:
42:fb:ad:f7:35:fc:48:b8:07:68:6c:eb:8c:dd:63:
64:44:e6:82:22:9d:c8:c5:38:96:cf:0e:16:13:dc:
b1:3a:49:4c:4f:10:1e:ae:0e:dc:d0:35:7a:e1:17:
ae:4d:c0:c2:d1:15:e7:6d:2b:c3:3c:4b:0d:e3:ed:
22:8c:db:0b:1d:90:65:a7:b1:bb:1a:39:cd:80:08:
da:26:d2:73:a5:9a:5f:b1:cf:b0:97:60:fb:63:26:
15:34:b8:a1:3b:9a:8d:da:5f:d4:72:eb:7c:de:9e:
33:05:b6:33:a3:a7:8b:0a:79:59:e0:87:73:3d:1d:
5a:65:02:47:88:a2:d7:61:9a:d5:1e:0b:75:50:21:
3f:47:1f:6e:cf:0a:ce:50:ab:d3:2e:63:60:ea:2a:
1b:d8:91:35:10:b3:8f:19:71:c8:9b:09:2a:24:67:
74:40:a3:bf:ac:88:ed:9f:fb:bf:7a:bb:a8:1e:2e:
af:66:28:a1:71:12:66:f6:50:41:c4:d5:92:62:00:
e0:1d:f0:ba:e9:eb:55:46:07:41:d1:40:bf:aa:74:
b6:a5:e5:e5:3b:a6:7e:f3:d1:03:6e:93:d3:59:4a:
fe:4f:70:54:3a:01:05:50:28:e6:2e:4c:d6:dc:bd:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DD:FB:FF:0C:51:2B:22:D2:39:BC:A3:D6:87:E0:CF:6D:25:D3:59
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B61774A4D9DF11EFB722C742C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.14.26.0/24
Signature Algorithm: sha256WithRSAEncryption
56:36:aa:ee:69:97:2a:cd:a8:fe:30:45:a5:d1:b6:4a:45:cc:
49:24:5a:be:08:f9:de:20:1e:53:88:a8:0c:a0:cf:63:bb:3a:
b1:93:4c:ab:2e:46:4e:d3:71:ab:ce:b3:5a:2e:dd:0b:4c:fc:
58:fe:05:12:19:91:37:88:1f:88:f0:9d:1a:ce:a2:9c:28:5b:
06:4f:24:77:42:29:b2:17:37:db:0e:61:8b:aa:77:c1:73:ff:
3a:f5:cd:36:e9:fb:d8:d0:69:ed:e7:d9:8a:f1:27:ae:1e:78:
7d:40:49:6f:be:de:3a:bc:86:2d:36:fa:d4:bd:e4:06:87:15:
24:48:e7:51:e5:f1:fd:73:9b:97:92:f9:98:2b:24:fa:8f:47:
08:7c:d0:cf:c1:8e:87:d9:4e:7b:4a:46:0e:d3:91:f6:d7:71:
63:79:90:9e:d4:47:b9:45:9d:19:f5:5a:e9:f9:aa:37:9c:2d:
5d:69:70:9b:c1:4c:a4:10:bc:ca:02:4d:b6:f3:34:72:2a:11:
72:f2:29:c9:2d:d5:7d:e3:cb:03:21:84:2e:e5:6e:1b:4a:20:
95:75:79:5c:88:53:5f:61:8d:18:f9:3e:08:da:e2:a7:32:6f:
2c:71:3b:12:2c:d9:d3:9b:dc:90:5a:1f:c6:2c:4f:76:9d:64:
bd:3c:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:18:12 2025 by rpki-client