Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C608133C226F11EF8D24AD63C4F9AE02.roa
File: C608133C226F11EF8D24AD63C4F9AE02.roa (raw, json)
Hash identifier: GATUqbNDhKaVb/i1ZjCIO1rgwevFVCyWk8Ts83izVL4=
Subject key identifier: 52:78:D9:53:30:17:AA:94:42:28:D8:2F:51:4B:9E:3A:9E:76:92:96
Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial: D1
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C608133C226F11EF8D24AD63C4F9AE02.roa
Signing time: Mon 09 Dec 2024 04:07:57 +0000
ROA not before: Mon 09 Dec 2024 04:07:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 56264
IP address blocks: 210.79.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4468
Validity
Not Before: Dec 9 04:07:57 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67566d1d-54e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:20:89:76:13:fa:fe:b5:55:74:21:59:5d:
a8:ef:6f:d7:d6:a1:1d:05:9d:fa:3e:18:c5:8d:fc:
0e:84:52:71:3c:47:c7:32:eb:49:ff:95:24:45:f5:
f3:c0:07:0e:85:aa:cf:99:eb:85:f8:42:c5:dc:97:
86:0c:52:b6:3f:4b:f4:fe:4b:9c:db:94:6b:28:8d:
ea:e5:1e:fc:67:41:0f:5d:22:42:8c:c0:83:46:20:
d5:56:aa:31:63:51:48:f6:ab:f3:ee:ac:e2:01:ad:
e1:20:5e:be:f0:28:6f:eb:10:e8:b4:5e:6f:27:6f:
aa:c1:57:0e:8c:bc:3a:e9:ee:05:a2:d1:6a:15:96:
ee:9d:e3:c5:4c:3a:71:20:47:26:89:5c:12:23:5f:
03:6a:98:98:7a:71:d5:ce:4c:d8:ee:05:cd:f7:61:
7d:bd:07:0d:51:42:92:f5:d2:9d:8d:8c:7e:0f:14:
4f:d2:41:e5:46:5a:48:01:97:d4:82:cc:30:47:69:
89:1d:a6:08:30:35:96:cb:5c:bb:e3:4a:ed:0e:a6:
42:c4:98:29:93:27:57:53:55:64:8e:ef:55:0d:78:
43:c0:e6:62:a9:71:e9:a0:b6:8b:a2:cc:a2:67:85:
0c:34:eb:ff:1d:7e:47:a1:6e:3b:21:67:a8:20:6f:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:D9:53:30:17:AA:94:42:28:D8:2F:51:4B:9E:3A:9E:76:92:96
X509v3 Authority Key Identifier:
keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C608133C226F11EF8D24AD63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.181.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:25:41:56:c2:b6:7a:75:3e:11:0f:5a:a6:66:44:05:b1:fd:
65:c9:64:b7:c6:e3:ed:7b:bb:7c:1b:6b:5e:ab:74:95:72:4e:
70:c2:cc:e3:92:c9:f1:dd:82:25:c7:53:6d:45:ab:3e:3e:67:
52:db:cf:2f:87:44:0c:7a:b3:66:52:5f:27:33:fe:ca:a0:97:
3b:30:80:2e:be:53:55:e6:39:28:21:52:d9:e8:f3:cb:c5:aa:
8c:2d:8a:0d:2c:02:ff:65:66:fd:18:9b:c0:94:29:27:44:54:
b3:73:a8:1a:00:fd:33:89:dd:bf:f7:8d:1e:78:55:d3:e8:fb:
1c:b2:87:46:a2:1a:49:8b:f8:ed:4b:43:26:fc:29:a0:2f:e9:
07:7b:2c:71:4b:5c:f3:c9:d7:94:68:82:7d:75:23:dc:77:a5:
fa:79:24:c5:70:e3:d9:1a:58:91:4d:c9:14:f0:b3:0e:52:c6:
2d:99:11:c4:f6:2b:9a:d2:6d:78:6f:e1:99:3a:fd:37:5e:ae:
d7:bb:36:ba:9e:ef:a3:88:f4:bf:41:62:ba:ec:3f:4c:8d:7c:
5a:af:e3:f0:bf:18:59:3b:b4:92:55:93:39:57:6f:8d:be:a6:
62:7d:75:fc:7f:06:32:a9:d2:30:2c:02:c0:1b:31:91:cc:bd:
48:15:d4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:09:15 2025 by rpki-client