Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa
File: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (raw, json)
Hash identifier: 68iXhMXoCKzkvFm4ZJIC/ibhTxkbyNkKn12MmIsJUjc=
Subject key identifier: F5:2B:B7:B1:C5:FA:52:F9:18:C5:B0:0C:7A:AB:89:86:58:D4:CF:A5
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1AB1
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa
Signing time: Mon 24 Mar 2025 14:50:31 +0000
ROA not before: Mon 24 Mar 2025 14:50:31 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 12008
IP address blocks: 116.51.28.192/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6833 (0x1ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D
Validity
Not Before: Mar 24 14:50:31 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e17137-328a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:3e:6f:83:b3:89:ff:e0:67:0c:3e:ec:39:
c8:04:18:a4:0a:e2:95:a0:8d:3e:37:fc:c8:4a:da:
70:7c:80:b4:26:67:14:0c:02:f0:60:7f:44:35:8d:
c2:2d:32:b1:b0:54:1f:3c:10:55:fe:15:4a:2d:da:
b5:24:4d:1d:00:16:7f:71:6b:59:96:f9:54:b6:89:
25:41:cd:f9:17:cb:c3:d0:92:70:b5:e0:57:19:cf:
df:a4:fd:d1:85:d6:d2:10:21:4e:6e:41:45:e0:1f:
63:06:42:3c:b2:4a:23:e9:cf:4c:36:11:7a:64:12:
88:c6:7a:b7:85:8c:d8:dc:e1:2d:12:0c:f5:ce:7d:
2c:82:12:81:97:dc:eb:1c:7c:3b:9c:1a:43:45:26:
9f:6d:a0:f2:c0:18:3f:1d:05:9c:74:9d:c7:de:7e:
62:90:7c:8d:ba:4d:89:8b:71:94:f1:1f:26:fe:be:
9b:9a:38:52:0e:0e:43:65:43:54:0a:76:db:af:12:
14:52:76:a2:18:d2:14:3f:aa:85:67:c3:69:32:4f:
54:30:bc:f3:57:a0:8e:27:b4:37:d8:db:8b:44:27:
9b:9d:ec:52:87:d4:f5:28:f3:da:9d:15:a3:05:9c:
f9:b6:92:df:0a:bb:ba:fb:79:d8:ea:9b:ec:67:08:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:B7:B1:C5:FA:52:F9:18:C5:B0:0C:7A:AB:89:86:58:D4:CF:A5
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.51.28.192/26
Signature Algorithm: sha256WithRSAEncryption
2f:88:e2:13:d7:91:cb:93:ff:69:33:34:46:52:4e:7a:81:a9:
e1:ef:05:7b:fe:53:95:c0:74:e8:cb:cf:ce:3e:20:d2:86:ac:
54:13:17:b3:3c:ab:37:15:38:6f:72:a5:4c:04:8b:e4:ac:4e:
6f:5f:15:de:74:8e:cc:fe:33:82:87:3e:4d:f1:d0:0c:74:04:
60:fb:b2:35:b2:4b:ae:aa:7b:c5:55:0e:30:c1:34:f8:2b:d2:
39:81:3d:22:34:cb:22:7e:cb:b5:21:cf:1a:34:89:5a:e1:5a:
bd:14:80:ec:55:03:af:2f:7f:ee:95:ac:83:a7:52:45:43:22:
cd:d3:73:55:2d:83:46:1f:5d:e1:96:c8:43:6a:fa:19:1a:40:
73:11:35:69:bc:b8:81:7c:ee:43:43:95:5e:0d:ac:fb:ec:13:
3b:52:21:c0:a7:1a:13:55:ef:7e:db:70:81:ac:bb:44:f7:35:
7d:8d:fd:d2:d2:eb:af:13:fa:55:4e:af:1c:56:14:8e:23:19:
da:27:ba:45:07:7b:b5:ed:df:24:8e:33:d9:25:f3:23:dc:69:
3d:65:ab:ba:ea:40:6b:24:90:b6:81:82:52:59:76:d3:64:1e:
26:be:da:78:b2:10:92:92:ec:41:2d:5a:24:10:92:c3:d0:9d:
6e:8f:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:17 2025 by rpki-client