Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7F7B48E4335B11ED92E25960C4F9AE02.roa
File: 7F7B48E4335B11ED92E25960C4F9AE02.roa (raw, json)
Hash identifier: eugA46hujI6ONIaBfcs6zPprf2BKcrANG2ijTUPVKgk=
Subject key identifier: 4C:E6:C0:29:CB:48:78:BA:89:D9:F3:E7:D8:01:97:DC:56:55:63:68
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0893
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7F7B48E4335B11ED92E25960C4F9AE02.roa
Signing time: Thu 15 Sep 2022 10:00:27 +0000
ROA not before: Thu 15 Sep 2022 10:00:27 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 140499
IP address blocks: 223.29.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Sep 15 10:00:27 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6322f7bb-9b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:7e:9b:51:49:30:f7:b7:76:58:bb:56:5a:
73:c8:7f:5c:2d:19:35:45:72:17:8b:a1:0e:19:a4:
0b:85:e0:4b:14:bf:15:06:9b:82:13:9b:92:35:c1:
39:c6:f9:51:ee:49:9c:a1:f0:b1:6c:c7:d7:b8:1d:
7f:6b:02:9b:89:7e:14:b6:06:92:30:91:b3:af:66:
b4:a9:a8:cf:b2:9a:9c:a4:ce:ef:f1:1a:82:2f:66:
a2:c1:01:e0:4d:4f:81:11:98:9b:ca:f2:14:1d:78:
38:ae:4e:9e:0e:12:0f:b4:eb:75:ee:4a:6a:15:12:
76:11:50:73:64:0a:b1:c6:24:d5:79:80:be:22:e1:
8c:6b:b6:3e:f8:42:7b:31:ba:08:e8:4f:e7:cd:c0:
26:64:e9:e5:e9:f2:01:fe:eb:d7:43:e9:3a:fe:06:
97:51:39:0b:de:b5:13:a1:73:ea:bb:86:dd:15:1c:
a2:7e:b7:03:37:8b:ee:0a:6d:37:62:ad:0c:c8:31:
c5:03:9c:c0:c1:ac:55:5d:3a:0d:84:81:e9:99:50:
7c:af:65:a7:49:64:00:e6:c6:2a:b1:5f:18:27:b6:
60:06:0f:47:04:9d:3c:e6:e8:a4:86:a3:4c:42:d0:
11:3f:0c:f4:ed:22:c1:9e:5d:a3:75:0f:8e:e7:d2:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E6:C0:29:CB:48:78:BA:89:D9:F3:E7:D8:01:97:DC:56:55:63:68
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7F7B48E4335B11ED92E25960C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
26:15:0a:2b:8c:1f:cf:40:f8:d4:b0:b5:9d:5d:8f:72:b3:a9:
44:31:0c:36:d7:06:95:69:ab:10:de:3e:b1:b5:34:b7:20:f0:
16:7a:18:e3:d0:cc:2f:11:db:8d:0a:ec:9d:04:bd:c8:57:c6:
bb:55:91:47:5b:7e:91:8f:78:b8:bf:62:5f:a3:79:87:9e:d8:
b7:2d:80:fa:8c:66:8c:6a:03:de:84:ef:48:f6:87:67:00:c2:
40:eb:7c:7c:17:3e:22:86:58:f8:4a:93:b1:7c:d6:a3:a7:bd:
81:5c:4a:1d:40:c7:8f:f3:e0:37:57:22:cc:77:af:aa:ea:0c:
b8:66:c9:e4:b2:b5:26:12:b9:4d:93:a5:2b:46:b6:08:97:44:
63:00:84:d4:14:7b:b6:5a:2d:57:d1:3c:dd:e5:3b:b3:e5:4a:
4b:98:aa:7a:99:b6:5c:19:5b:0a:98:6e:fd:39:64:bd:f8:e0:
fb:51:18:65:69:6a:66:0b:a2:7c:5c:73:a0:01:27:3f:31:02:
04:20:50:86:78:c9:62:49:de:00:66:d1:22:2c:85:20:58:36:
53:d5:b5:2b:35:3a:45:bd:de:40:70:de:6e:08:50:8f:46:4a:
da:71:a1:bc:e9:65:42:bb:40:e2:40:cc:31:cc:3a:39:9b:ea:
0d:b5:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:04:25 2025 by rpki-client