Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3AC61D98902C11EA898EFD7FC4F9AE02.roa
File: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=
Subject key identifier: 46:DF:7E:E9:16:15:10:75:C8:31:44:28:C9:73:03:FF:41:76:19:03
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 3644
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3AC61D98902C11EA898EFD7FC4F9AE02.roa
Signing time: Mon 02 Dec 2024 14:30:39 +0000
ROA not before: Mon 02 Dec 2024 14:30:39 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 24328
IP address blocks: 122.154.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13892 (0x3644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475
Validity
Not Before: Dec 2 14:30:39 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674dc48f-23bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:a4:c9:95:13:f3:7c:20:a0:e4:4c:b8:a5:
a2:d7:74:9d:d4:89:55:e0:ff:43:a4:f7:6d:1e:ae:
28:be:a7:eb:23:d3:c3:d3:35:48:79:de:70:f8:f1:
4e:ea:21:fa:65:d3:b1:5d:3b:bd:b9:ff:06:d5:a1:
92:e8:24:22:ec:92:72:bd:f2:3a:67:b0:65:43:ea:
7a:b7:da:5d:96:9a:95:63:12:25:dd:6d:81:ec:83:
cf:14:37:b9:f1:2b:b4:e1:14:a2:ba:23:3f:da:b7:
f0:6b:44:52:14:a3:4a:b4:49:1c:e7:13:f8:1f:62:
b7:0b:c9:20:4f:b6:47:52:24:a6:24:0e:7f:bc:27:
60:a5:df:a7:66:dd:f0:2b:2b:a4:57:72:57:16:3c:
15:88:d1:3f:5e:13:ee:f2:25:25:7e:54:b2:54:70:
cb:00:4b:48:31:51:67:28:42:2b:a2:bb:c9:d9:93:
08:de:0f:8a:de:82:86:85:0b:16:14:25:9a:dc:39:
67:dc:93:38:aa:a5:f8:cd:0d:83:c2:8a:30:b6:a8:
d7:23:4f:39:a9:2f:c1:cc:fc:c0:ce:aa:b4:47:00:
a2:eb:75:f4:99:0f:c6:25:84:1a:b4:00:65:1d:19:
15:5a:22:27:45:7a:a6:0a:96:81:e1:04:ad:c5:82:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:7E:E9:16:15:10:75:C8:31:44:28:C9:73:03:FF:41:76:19:03
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3AC61D98902C11EA898EFD7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.154.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:1e:cd:4e:91:17:20:7a:66:67:77:1e:91:79:01:a9:06:
de:9f:39:2e:03:69:34:78:92:f6:27:3c:43:f5:e3:0e:25:77:
37:23:6b:95:21:de:12:4f:15:f6:3c:cc:34:a5:75:9e:7e:5e:
b8:22:3f:36:c1:f3:5b:98:d5:4c:94:22:ce:0b:bb:35:31:a5:
ca:99:2f:be:a6:e4:73:e9:a8:0b:8a:1e:63:7f:da:aa:d6:3c:
7a:0f:10:dc:d6:e0:cc:f4:57:e3:be:67:5c:03:f2:da:60:52:
ab:93:e4:cd:1c:c2:1b:8c:00:42:5b:66:e4:e6:5a:fa:e2:45:
88:3a:12:3b:5a:b5:4f:17:67:2c:6d:92:5f:f0:bc:ea:53:46:
32:3a:be:33:d1:fa:a1:e5:d4:99:04:0c:ef:69:f3:29:d7:57:
7c:8b:b8:c8:a6:2d:10:e8:23:50:f4:87:d8:4c:e7:7b:9b:31:
94:5f:f5:74:35:94:8a:a2:f7:6b:cd:97:a5:31:63:67:b5:2e:
87:49:e2:da:98:27:ec:b4:e7:6d:8e:66:1c:81:ef:01:69:9b:
dd:98:90:c4:2c:8e:e3:c9:04:09:0a:65:1f:3f:60:05:12:44:
11:9f:5d:fc:2d:e6:9b:76:19:f3:00:f5:b9:fb:c0:8e:55:8a:
64:bf:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:31:32 2025 by rpki-client