Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa
File: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (raw, json)
Hash identifier: Ain3qdd9woinL4inH/8nG99VHakyMNpv4v8rmQWJ1Bs=
Subject key identifier: C1:1B:61:53:F6:3C:23:F1:73:09:0E:17:32:65:F5:E6:48:D8:E3:7D
Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial: EB
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa
Signing time: Wed 29 Jan 2025 04:17:40 +0000
ROA not before: Wed 29 Jan 2025 04:17:40 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 63969
IP address blocks: 210.87.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB103
Validity
Not Before: Jan 29 04:17:40 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6799abe4-a2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1f:78:65:a7:f0:41:eb:3e:d2:31:cd:8e:19:
2f:42:6d:db:6e:9d:41:14:03:b4:79:d7:37:07:d9:
e0:c7:3d:cf:84:c0:fe:e8:fd:79:bd:d8:69:3c:1f:
e6:8d:2c:98:8d:0d:75:85:14:58:58:40:ed:70:b1:
e0:c6:c7:ff:3d:a6:d4:8c:67:1a:08:c8:b0:87:ba:
53:bc:db:6d:98:40:3e:9b:7f:77:37:ce:08:8b:94:
1d:f0:15:c2:1d:27:2c:7f:5f:a7:64:0a:ac:64:03:
13:ab:5e:89:2d:ad:22:18:57:7f:7a:72:6e:cd:8b:
d8:86:87:74:e1:03:ce:2a:42:49:9d:f4:49:a8:86:
84:65:cc:ff:bb:71:b5:1e:7d:29:fd:9f:15:66:bd:
3f:42:7a:f1:6f:62:85:30:57:70:74:8d:b8:33:96:
30:22:7d:c7:c8:ed:4b:a5:9f:c3:e6:d7:12:0c:21:
07:18:f3:23:c5:4d:03:7f:4f:9a:0d:69:b4:b0:02:
12:08:40:62:37:4b:0e:3a:fe:19:82:c6:82:c1:22:
d3:9c:35:77:af:c6:d6:44:6d:27:78:eb:9a:be:76:
fe:5f:e9:71:44:9e:bf:d4:e9:d6:52:3c:59:bc:ae:
36:c2:3b:54:7d:78:c5:0d:a5:a9:d2:c4:e8:7d:d0:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1B:61:53:F6:3C:23:F1:73:09:0E:17:32:65:F5:E6:48:D8:E3:7D
X509v3 Authority Key Identifier:
keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.69.0/24
Signature Algorithm: sha256WithRSAEncryption
25:69:c6:b7:1b:ab:f5:64:ec:d5:25:31:98:8b:26:a8:79:e0:
e6:72:ea:cb:e0:82:37:f3:d1:fc:f2:d9:8c:3a:09:15:04:c7:
39:d3:4a:cc:d7:55:c4:65:dc:bc:e9:14:c3:52:8d:8d:bd:47:
ea:5c:6d:8a:9e:38:1a:44:e4:f8:ac:14:61:f1:e6:5a:40:65:
bb:09:13:3e:4f:da:aa:1c:d7:82:95:0e:fe:65:d2:c5:95:3d:
e8:cd:44:a1:45:26:eb:e0:ba:99:91:a7:f8:64:91:1b:3b:88:
9f:15:f8:90:86:f3:6a:eb:d3:c5:cb:4a:99:f2:95:63:6e:ab:
a0:e5:9d:ba:44:1b:ff:d8:d1:60:a1:95:12:76:6d:db:e5:6b:
d8:9e:81:e4:26:c5:45:56:c0:da:a6:75:18:84:da:62:b3:76:
04:1f:e3:bd:ce:9f:e9:d5:f9:b2:5b:aa:d7:b8:88:ac:08:1e:
52:74:ab:f7:0d:af:4a:29:71:c4:77:d2:1e:82:9f:54:84:dc:
d6:f5:b2:07:b3:91:4d:07:56:67:26:92:c7:c5:84:06:a7:ba:
2d:4f:7d:a6:ea:14:0e:7f:f1:5d:4c:b2:2d:be:46:58:db:60:
87:73:67:a1:e9:00:af:69:1b:37:6c:dc:c4:a2:23:48:56:c8:
f3:7b:bf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:16 2025 by rpki-client