Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/2DCCC0AEAECB11ED8E64471FC4F9AE02.roa
File: 2DCCC0AEAECB11ED8E64471FC4F9AE02.roa (raw, json)
Hash identifier: 8juKLrWcXtwdoUaOZfoc03cwvs5fL+X4/1XO365/o3k=
Subject key identifier: E6:A8:60:6E:A0:04:A7:79:EA:03:27:42:43:D4:20:55:B4:3F:EA:D4
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 097F
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/2DCCC0AEAECB11ED8E64471FC4F9AE02.roa
Signing time: Fri 17 Feb 2023 13:58:39 +0000
ROA not before: Fri 17 Feb 2023 13:58:39 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 131275
IP address blocks: 223.29.232.0/24 maxlen: 24
223.29.233.0/24 maxlen: 24
223.29.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Feb 17 13:58:39 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63ef880f-8af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:6c:c0:a0:ea:e8:dc:50:30:2c:e8:b0:ed:
f5:85:1e:1c:e5:c5:67:22:93:65:9b:d0:d5:fc:87:
b3:ed:31:ef:f3:ca:8b:3f:b1:26:e7:72:84:50:1a:
90:52:8b:52:5a:8f:77:f5:8b:c7:96:66:b3:aa:e1:
d5:da:8f:1e:0b:3c:5b:01:dd:ba:45:ec:4c:3e:50:
fd:53:85:c9:0d:ac:f4:c7:78:93:13:15:e1:2b:da:
53:f6:80:5c:30:27:10:eb:1b:54:c6:10:1d:ed:14:
43:5e:a9:1d:92:6a:51:3f:bd:e5:67:59:02:80:51:
92:88:e3:02:8c:0a:4c:3f:fe:26:f5:94:5d:1f:f3:
24:5c:90:f8:47:19:c3:d0:9e:b9:36:40:86:5a:04:
4f:45:06:4e:e6:6a:ff:ea:cb:1e:2b:5d:23:2f:8f:
c6:db:b8:0a:61:74:4c:9b:30:5e:bd:af:e2:b5:df:
2b:ac:db:a0:2a:e6:18:48:a8:14:d5:d9:08:3d:61:
46:bc:09:43:de:ef:80:1c:75:77:03:a3:5a:32:e4:
29:fd:b7:ea:d1:17:72:10:74:e6:e7:2f:0e:67:4c:
dd:5f:b7:e6:40:2d:64:91:ba:8b:96:1e:fc:7d:4d:
81:ae:fe:9c:4b:3f:c4:63:78:48:5e:d4:b7:78:af:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A8:60:6E:A0:04:A7:79:EA:03:27:42:43:D4:20:55:B4:3F:EA:D4
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/2DCCC0AEAECB11ED8E64471FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.232.0-223.29.234.255
Signature Algorithm: sha256WithRSAEncryption
8c:c1:87:31:7c:55:9c:46:89:c3:31:9d:9f:3d:66:d8:dc:96:
b9:ea:a3:c6:8f:36:85:73:a5:1a:39:91:3f:d9:b6:9b:dc:62:
72:2e:2f:19:8c:cd:d7:72:51:bf:ef:98:53:a3:cc:a2:e2:4b:
49:e8:dd:83:7d:0c:e4:1b:e6:91:e8:f5:5f:8d:99:e3:b7:58:
6d:6d:70:7a:3e:24:df:4d:34:2f:e3:82:05:50:f8:7d:57:8e:
77:ed:f1:6b:42:40:58:c6:5c:ef:bb:71:72:05:8b:1e:c0:40:
88:80:c8:18:f4:37:35:48:55:f9:11:fd:97:c2:92:66:99:11:
3e:a7:ca:37:69:a0:ce:36:40:bc:7f:1d:eb:ab:83:40:cb:69:
3e:2f:0f:05:bb:8e:e3:b8:7b:4e:ed:2d:d6:f1:50:a6:b0:49:
ee:29:b8:9c:8f:5f:37:8e:24:92:ca:ea:47:58:0c:ed:11:3e:
5f:47:31:23:ed:56:b4:ca:ce:70:87:3a:72:dc:b1:ff:1f:01:
06:e7:b2:96:a0:46:17:b3:8b:ec:53:78:54:0f:c1:79:84:38:
67:5a:a4:17:98:62:fa:9b:5e:33:94:2e:26:32:7b:d5:0f:e5:
8a:70:71:9d:ef:73:6a:85:a0:7a:b4:cb:9d:c7:bd:98:da:2a:
a7:e0:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:00:05 2025 by rpki-client