Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/C3ACDB568E9311E9AA8A2877C4F9AE02.roa
File: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (raw, json)
Hash identifier: u6rekZJ0jZc3ISHqsLCTcc0e5DQkPjPm3qL6iQKKzgs=
Subject key identifier: 53:DC:8A:24:54:B2:74:93:6F:64:C9:A9:F5:D6:03:BA:25:63:8E:D3
Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Certificate serial: 1BC0
Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/C3ACDB568E9311E9AA8A2877C4F9AE02.roa
Signing time: Thu 06 Mar 2025 16:34:20 +0000
ROA not before: Thu 06 Mar 2025 16:34:20 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 41179
IP address blocks: 45.112.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7104 (0x1bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAF20
Validity
Not Before: Mar 6 16:34:20 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c9ce8c-7043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:d0:6d:79:b6:f7:af:ab:15:24:5a:86:2c:
5b:0e:3f:4d:64:a7:7f:dd:62:6b:54:01:53:17:f8:
ec:81:34:f5:a9:82:22:f3:c4:39:96:b3:aa:55:0b:
ea:da:b2:5f:32:74:2a:68:b5:4d:b7:5d:78:e9:6e:
50:c8:6e:67:df:9e:6e:c7:e6:ab:9d:a5:dd:10:96:
cc:3a:d1:1b:57:f8:5a:62:0b:55:4b:6e:69:a2:66:
03:0d:0c:a2:f2:f4:a4:d1:9c:e3:52:30:5f:c0:34:
d5:31:f6:6e:49:f2:bc:6b:28:39:ef:69:fe:51:be:
bf:4e:af:4c:77:f6:c8:9e:0c:4d:6b:93:89:29:d2:
50:fb:b8:8b:98:b5:b2:c8:79:92:b3:b3:db:96:80:
cd:9c:00:0c:81:9c:de:0a:57:a2:2b:02:5f:67:2b:
a0:39:dd:fa:16:cf:4c:a7:db:c1:f0:23:87:f4:50:
68:6d:e5:4c:e1:ab:f5:89:02:4d:95:6f:0f:f5:bf:
73:34:eb:a0:05:6c:e4:fd:ec:db:52:48:0e:c1:85:
21:80:6b:39:ce:6a:2d:6b:8f:1c:7b:d9:4f:77:dd:
9c:fb:bf:a1:ee:f8:56:7a:b4:55:a0:ff:f2:60:5e:
44:a1:b1:19:f1:64:53:34:ea:e1:0b:cf:83:11:ce:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DC:8A:24:54:B2:74:93:6F:64:C9:A9:F5:D6:03:BA:25:63:8E:D3
X509v3 Authority Key Identifier:
keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/C3ACDB568E9311E9AA8A2877C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.86.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7a:3c:32:88:6c:a4:32:13:98:81:87:c8:06:cf:dc:90:24:
66:ed:1b:e1:08:f7:65:91:7b:08:2f:5c:38:df:d3:aa:70:13:
24:2c:da:d0:96:72:7b:a7:96:ab:c4:05:e4:fb:d5:f0:1a:2f:
03:68:a5:3c:09:14:52:c1:47:82:97:4b:83:14:74:72:f6:ce:
5c:54:5d:7a:bd:41:63:e4:14:23:fd:21:cb:ac:c0:37:98:a5:
e8:e0:06:5b:60:53:4b:33:a1:ff:59:ab:b2:45:24:a5:2d:16:
59:e8:4d:54:7a:ac:bb:09:03:54:79:84:1b:f2:3b:f0:81:5a:
42:a2:37:53:c4:80:01:75:cf:05:b2:0b:a0:3d:71:d9:51:34:
e4:7a:4b:cd:2a:7c:f1:13:6a:e3:4f:c2:0d:f9:a1:0b:63:80:
e6:96:07:c5:21:ff:8d:b2:26:82:1e:ab:8e:a1:21:d1:50:2b:
78:5e:20:76:4e:44:ab:f1:16:e8:ab:9a:89:0d:02:53:21:02:
f3:f6:b9:73:96:42:7c:5d:3b:b6:ce:c5:99:25:a4:ad:dd:64:
24:13:6e:ea:9e:28:3e:6d:51:8d:25:cc:02:72:6a:e2:97:a3:
2a:f9:04:0d:9c:d9:5c:7d:1b:bd:e4:31:36:37:39:4f:93:2b:
1a:2f:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:28 2025 by rpki-client