Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/396955AA902C11EA898EFD7FC4F9AE02.roa
File: 396955AA902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=
Subject key identifier: 62:CB:15:43:C3:3C:5F:D4:CC:05:17:72:9C:6E:8D:D0:15:00:56:0A
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 3641
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/396955AA902C11EA898EFD7FC4F9AE02.roa
Signing time: Mon 02 Dec 2024 14:30:37 +0000
ROA not before: Mon 02 Dec 2024 14:30:37 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 18252
IP address blocks: 61.19.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13889 (0x3641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475
Validity
Not Before: Dec 2 14:30:37 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674dc48c-79b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:77:5f:74:bf:de:2f:0e:7d:56:04:26:32:
2d:b8:5f:c9:50:a0:9d:f2:d6:e7:82:f9:65:b7:9b:
07:0f:69:4a:11:9c:3e:dc:ee:e1:97:f4:2a:00:81:
45:fa:3d:82:77:85:7b:6d:bd:f1:93:6a:ae:ee:ae:
a7:4d:92:43:5b:03:8e:6e:cd:df:41:fe:44:66:7c:
ed:c7:b0:27:e7:62:2a:01:ec:ea:24:3a:ab:24:71:
25:40:ed:30:f2:9b:03:49:a6:1f:2a:f7:f1:a4:fa:
d6:8b:45:67:5a:3b:4c:d1:de:c4:8b:3e:1d:7f:9f:
a1:12:bc:02:ef:35:9f:2b:87:10:61:f0:73:d7:81:
d7:52:57:4e:37:e3:d9:08:5d:3c:1a:0a:46:50:51:
4b:41:f4:00:83:3d:f1:14:dd:ee:8e:83:e7:d0:a6:
09:d6:64:e3:50:ba:63:58:35:43:37:53:d7:7a:4a:
ec:dd:80:ae:d1:31:52:bb:76:30:8b:26:e2:10:c5:
54:2b:8b:7e:4d:8b:5d:19:88:52:f3:03:7e:ec:96:
06:18:4a:b6:b8:0c:c3:07:6d:1f:13:49:1b:8b:2f:
9e:46:f2:ff:47:85:2f:4a:22:db:e6:86:c7:8d:a1:
02:cd:1f:a1:b4:3b:73:b6:b9:37:cc:b3:9b:5f:04:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:15:43:C3:3C:5F:D4:CC:05:17:72:9C:6E:8D:D0:15:00:56:0A
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/396955AA902C11EA898EFD7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.19.128.0/20
Signature Algorithm: sha256WithRSAEncryption
52:95:1e:a6:a8:08:be:8a:04:67:b4:2c:9d:72:51:f3:79:d2:
8d:11:a1:21:4f:93:f6:c0:fb:21:b0:13:46:26:8b:e0:f2:f4:
45:f2:a0:a3:ae:85:6b:2c:34:da:6a:c9:73:ba:45:15:7a:5a:
a7:3b:00:06:f8:7a:6c:51:da:34:64:cc:6a:1d:e5:75:88:55:
6c:79:51:d9:ee:62:64:54:70:34:3b:66:e4:36:71:b1:26:7c:
65:cb:1f:3c:26:b4:58:1f:95:9b:cd:fa:9f:6a:3e:6a:6f:c8:
20:3c:32:d5:17:35:bf:59:61:b5:0c:c2:19:d2:20:04:1f:2f:
37:d1:12:ef:ac:4b:08:46:04:5d:94:72:c3:9a:16:66:98:ae:
7b:4a:36:7e:87:8f:d7:27:02:84:60:5f:e7:aa:e7:3c:80:b9:
56:f9:f0:2b:87:80:35:53:f5:5b:d0:3a:01:cd:1e:b9:28:20:
c4:a3:6d:3d:85:79:09:ba:fa:4d:10:19:5c:4b:3a:6a:32:1c:
48:67:4b:1d:f2:3a:94:9d:cf:85:4c:70:14:97:c3:89:a2:1e:
bd:61:a3:d0:c4:a8:6b:c3:76:b6:06:6a:9c:fa:ec:ff:74:f1:
f4:cc:3b:c0:80:98:bb:66:db:1b:20:7e:be:b6:00:e8:bc:8a:
b5:1b:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:36:00 2025 by rpki-client