Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa
File: D385E420314711EBA579873DC4F9AE02.roa (raw, json)
Hash identifier: o1Hw/spcKOOb0VVRRR+YO5Yydeov4PBZjAAS3/6uAVI=
Subject key identifier: A1:08:42:EC:28:16:31:BC:33:8A:3B:16:07:E9:38:4D:84:A6:FB:23
Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Certificate serial: 081D
Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa
Signing time: Sat 14 Dec 2024 18:07:12 +0000
ROA not before: Sat 14 Dec 2024 18:07:12 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138394
IP address blocks: 206.209.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6
Validity
Not Before: Dec 14 18:07:12 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675dc950-f296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c0:a6:46:b4:e6:97:c9:0d:7f:86:2b:ce:be:
c3:74:12:fe:54:b9:50:0f:8d:76:4c:85:85:5b:90:
a3:57:87:87:b3:f7:66:6b:2d:28:53:1b:5e:6a:29:
f2:8f:b0:c7:79:83:fc:a2:15:c2:14:2a:6c:46:50:
e7:26:60:0c:13:a3:4a:f9:9b:66:64:4d:d6:2e:ef:
84:3e:75:f4:8d:ed:86:bc:8b:87:2a:d4:64:3a:08:
7f:ef:20:b9:77:e8:0c:99:ba:bf:ad:ac:f9:33:5c:
08:9f:6b:a9:2a:04:6a:4a:0b:24:55:19:08:56:a1:
9e:70:0b:74:22:0b:a0:71:71:cc:87:ff:51:79:51:
ae:1d:fd:d6:de:7f:90:06:15:e6:a6:e2:27:f2:a6:
38:bc:4f:62:41:e2:cf:ea:4d:c8:d4:30:b0:3a:39:
96:5e:55:1a:03:7e:62:3c:56:d5:6c:bd:e1:ca:77:
0a:9f:23:07:f5:2e:a1:f1:f8:22:83:c6:1d:b4:4d:
82:1f:07:3d:e3:39:cf:86:3f:b5:a1:6c:ae:95:5b:
f5:9d:16:9d:3e:68:ba:02:f1:c2:7a:09:4d:56:00:
73:2f:fa:1f:37:46:16:9e:0f:df:0a:ef:1f:dd:f6:
d0:92:58:15:10:e3:fc:c4:88:b5:65:22:35:8b:ba:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:42:EC:28:16:31:BC:33:8A:3B:16:07:E9:38:4D:84:A6:FB:23
X509v3 Authority Key Identifier:
keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
206.209.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:14:eb:9f:bc:0d:85:01:6e:b7:8b:e5:28:d9:b1:82:ea:7a:
a8:20:21:f7:7b:f6:ed:55:68:2c:45:23:80:49:b0:51:87:9d:
7c:ce:10:1d:85:dd:ed:10:53:3c:cf:88:41:50:7c:ae:b5:47:
12:88:07:19:43:df:12:88:41:9e:48:24:62:3a:80:65:3c:53:
c3:90:11:68:2e:14:1d:f6:c1:13:a9:be:9c:d9:52:e9:a1:0d:
8b:10:f3:65:f0:84:10:eb:1a:a4:e2:79:7e:26:0f:04:68:9f:
f8:c0:41:68:3b:d4:db:54:2b:10:ab:e0:05:d3:f0:35:ba:9c:
4a:e2:12:77:15:df:1b:22:66:97:16:ec:6b:a4:35:1f:6b:d9:
65:cc:57:da:1b:e9:ad:23:5a:ce:18:2f:4c:6f:b6:57:78:95:
57:7c:4b:28:e2:10:09:ca:e4:b5:0c:53:6d:75:7c:88:8d:bd:
14:62:e8:35:28:a0:19:fb:cc:3b:28:db:7a:22:9f:af:de:7a:
46:e1:2a:d4:57:8e:6c:24:8a:aa:ed:10:f3:f1:c1:d1:52:71:
e8:3c:82:28:8b:e0:1b:01:51:1e:13:19:8d:47:70:8d:e0:72:
49:90:32:74:1b:d4:18:5a:52:c2:4c:85:7b:a4:50:bf:3d:55:
66:d6:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:17:14 2025 by rpki-client