Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa
File: ACC8833824DE11EDAEC0E529C4F9AE02.roa (raw, json)
Hash identifier: SpN5g9M2rsSW+Cra37fKcK/lk5XqYbPAMh8S4vUS9qk=
Subject key identifier: 99:EF:A0:FE:EB:96:CF:F1:4F:0F:2A:CD:E0:35:F6:1D:6C:FB:AD:6B
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1AB4
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa
Signing time: Mon 24 Mar 2025 14:50:35 +0000
ROA not before: Mon 24 Mar 2025 14:50:35 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 2914
IP address blocks: 116.51.15.0/24 maxlen: 24
116.51.16.0/20 maxlen: 20
116.51.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6836 (0x1ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D
Validity
Not Before: Mar 24 14:50:35 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e1713a-4bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:d4:63:6f:96:b5:8a:23:a7:9b:3a:d3:a1:
eb:66:12:50:d3:c9:da:7c:64:ec:ce:c2:7d:e8:df:
4a:ee:23:02:f6:fa:1f:ce:0a:14:a5:58:5c:e1:db:
8b:78:8a:08:36:2b:e5:33:e9:64:31:14:dc:33:7e:
7d:76:c5:ed:b3:8b:98:a0:29:29:03:74:db:ef:f7:
4e:c0:54:a9:f8:58:c9:a0:03:b6:bc:99:23:1b:af:
87:3e:90:48:54:96:42:30:71:7d:44:11:74:57:8d:
3f:8e:49:31:88:de:19:8c:a8:e3:66:39:b6:d4:7c:
cd:f9:df:3b:e3:40:d0:aa:ee:e3:95:8e:89:33:63:
81:23:7a:80:58:07:bb:8d:b2:a5:2b:d9:8f:91:e7:
b4:f6:b1:8c:85:55:0e:4b:02:93:c3:b2:ae:c9:cf:
d7:5c:51:90:0e:bf:05:de:61:75:c0:ac:c4:36:9f:
04:3a:65:cf:fb:c6:83:18:47:9a:a9:30:a6:3a:af:
c4:65:9e:5f:77:4f:fb:7d:91:5c:e5:31:39:2e:ba:
f4:3e:ac:83:1f:b4:4f:99:a6:fe:f3:dc:a0:9d:da:
c1:50:09:ec:83:24:91:66:f3:fb:d1:e6:21:a4:d1:
85:4d:cf:39:d4:7c:7a:48:a6:3c:38:65:87:fd:d2:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:A0:FE:EB:96:CF:F1:4F:0F:2A:CD:E0:35:F6:1D:6C:FB:AD:6B
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.51.15.0-116.51.31.255
116.51.40.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:41:32:5d:00:36:94:99:6f:f0:0e:fd:1f:47:f6:81:dc:ae:
1d:a5:13:02:44:ab:17:b6:a8:b2:38:90:19:d4:18:b9:e8:49:
c2:b9:be:01:ec:93:48:cf:43:30:38:aa:a8:4f:16:f9:99:97:
4b:93:e9:c0:60:27:01:60:5e:02:f4:ea:ac:72:21:e8:20:1e:
59:40:fa:b0:3a:e5:3e:cf:d5:9a:9c:71:8f:e4:5e:b0:8e:24:
d1:8a:8e:37:ad:72:ea:40:c1:01:29:66:b4:87:ac:7e:f5:f0:
6c:35:5d:86:2b:4b:c2:11:d3:05:fe:82:cc:8c:e3:3f:3e:1f:
77:ff:b4:ed:c6:64:c9:8d:37:15:10:d1:c6:5f:01:61:76:ea:
c4:e8:e9:ad:6b:ef:bc:1f:fc:f0:e2:31:a1:0a:5a:e3:88:40:
8b:01:5b:d1:1e:17:3a:f3:c9:fc:2b:8c:fb:51:03:45:d9:28:
4f:40:d4:be:8d:31:91:96:b6:fc:52:57:72:71:83:45:a5:25:
88:d6:14:75:b9:69:c5:cd:97:40:87:e6:8b:bc:a6:07:c2:df:
7d:d4:d9:9c:78:47:87:21:7d:f0:17:db:f2:a2:06:e5:72:de:
e3:70:e5:77:f1:d5:fc:33:88:9f:b7:c1:fa:6c:c9:dc:52:38:
3b:75:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:03:25 2025 by rpki-client