Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/86A05FD2DF7811EDACC0BD77C4F9AE02.roa
File: 86A05FD2DF7811EDACC0BD77C4F9AE02.roa (raw, json)
Hash identifier: yY4MK3XkdoJL0RpVd4Rdz6S1mfmqMOOfglul5dS6UO8=
Subject key identifier: A2:CF:8A:DA:BE:8B:CE:12:FB:0D:79:E4:BC:77:E4:B9:1D:5E:9C:27
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A42
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/86A05FD2DF7811EDACC0BD77C4F9AE02.roa
Signing time: Thu 20 Apr 2023 12:40:27 +0000
ROA not before: Thu 20 Apr 2023 12:40:27 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136030
IP address blocks: 223.29.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Apr 20 12:40:27 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=644132ba-a26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:e5:f1:bb:67:d5:bf:66:9b:c2:e4:ce:53:
3b:02:38:90:92:23:a6:7f:62:dc:b5:4e:bf:88:80:
a5:09:cd:f5:1a:e5:ea:23:84:b4:a2:8f:bd:a9:e7:
a6:66:a4:5a:db:6b:ff:38:7e:0f:cb:b6:b8:3f:95:
48:a7:0d:4d:d1:52:3d:c5:e9:ae:5e:96:d1:33:9a:
43:b5:7d:8a:26:10:b0:b4:29:c6:7a:36:de:d9:44:
07:7f:9e:67:5a:dc:36:59:c8:df:64:82:9e:76:06:
37:8a:d3:c8:c0:a5:7a:bd:2e:a9:dd:3a:7f:d3:29:
99:96:f0:62:f2:de:02:b5:96:91:10:68:7f:66:08:
38:b8:39:0f:71:a9:aa:91:3d:04:dc:f5:33:e2:27:
1e:fe:2e:9e:64:95:00:20:51:54:f1:f0:53:5f:e0:
92:05:f8:1e:7f:e2:5a:4f:92:11:1b:91:de:65:f1:
ae:6b:39:45:ac:fb:ce:2c:36:b1:be:a9:7e:7e:3d:
20:b4:dc:0d:cb:3c:f0:b1:a5:0d:d1:fa:31:d4:e2:
a9:1f:8a:eb:0f:3d:cb:26:d1:5f:51:95:b7:26:57:
fb:f3:7e:3e:12:1c:72:c5:b9:13:6f:d2:63:95:2e:
41:91:be:2a:f9:34:22:b7:37:e3:56:97:d0:43:50:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:8A:DA:BE:8B:CE:12:FB:0D:79:E4:BC:77:E4:B9:1D:5E:9C:27
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/86A05FD2DF7811EDACC0BD77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.225.0/24
Signature Algorithm: sha256WithRSAEncryption
58:50:dd:7f:01:d3:ee:6f:ff:27:55:90:ae:6c:30:99:a5:ff:
db:1d:fe:33:8e:16:46:07:d1:07:ae:e2:08:cb:87:0c:22:19:
6e:45:d0:b5:eb:cd:4f:01:6a:8f:9d:c4:d1:9e:b7:f5:81:cb:
f9:fa:be:c6:6a:f0:2d:74:38:f7:06:8e:f2:43:b9:00:a2:11:
42:7f:cc:fa:7b:39:b1:92:1b:95:3b:01:6d:56:50:42:bb:02:
39:cb:f9:a5:7d:16:43:e9:ea:10:1b:ae:8b:10:a2:0d:1e:24:
63:40:23:e7:16:5e:cb:be:64:f5:4b:19:32:8b:6b:bc:8d:17:
a9:1a:d1:f2:89:51:2d:60:d1:74:19:d4:4f:eb:f2:6a:8a:11:
63:ed:aa:99:73:c9:72:a0:00:d9:13:7e:6a:96:60:26:72:14:
f7:c5:3b:b5:30:d8:e7:d5:f7:8b:44:83:4e:51:3b:b8:74:af:
7f:cd:87:e3:a6:b4:32:a5:b9:51:51:36:b7:1a:a5:67:72:10:
4d:76:b4:fc:b7:a4:d8:52:03:22:e7:35:2f:a1:2d:c7:e4:2a:
38:fd:b9:35:97:8f:50:95:94:9f:70:a2:5a:22:1c:33:03:f8:
3d:b6:2b:81:ba:13:5e:f2:ae:f5:06:da:2a:13:b3:6c:65:fc:
e8:10:ba:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:59:30 2025 by rpki-client