Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/A7AD52CE961811EDB002DB30C4F9AE02.roa
File: A7AD52CE961811EDB002DB30C4F9AE02.roa (raw, json)
Hash identifier: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=
Subject key identifier: C1:4C:3D:11:7E:D4:54:DD:8B:65:3C:E3:9E:A9:DA:74:7B:9B:A3:93
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 364A
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/A7AD52CE961811EDB002DB30C4F9AE02.roa
Signing time: Mon 02 Dec 2024 14:30:44 +0000
ROA not before: Mon 02 Dec 2024 14:30:44 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 4652
IP address blocks: 122.155.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13898 (0x364a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475
Validity
Not Before: Dec 2 14:30:44 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674dc493-da07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:7f:15:d4:ac:19:53:04:e4:55:06:3c:46:
23:3b:3a:fc:8a:dc:92:54:00:2b:29:91:47:54:fc:
c1:92:e3:2f:c9:4a:25:83:eb:1a:a2:5d:37:35:b0:
f9:49:fa:2f:0e:63:c8:98:84:b8:32:8b:5b:d5:ce:
06:52:e3:5c:69:4f:d8:41:68:75:da:9a:5b:72:fb:
5a:b4:3a:d6:34:3a:e2:cc:99:c8:58:73:32:8a:7f:
b3:95:73:70:12:99:63:2d:67:2f:b0:55:d1:7e:44:
86:20:05:77:41:a2:44:f3:02:2c:a5:a9:06:35:39:
dd:73:22:94:e8:36:40:b3:97:40:37:56:2f:dc:d2:
4f:62:6c:5b:1f:e0:dd:3f:b6:8d:7b:42:bc:78:85:
a6:34:7e:99:68:dd:2c:bd:ea:a2:a1:b1:37:70:fe:
d8:7d:fc:86:4e:c9:db:f7:af:b8:e9:32:f4:9f:5f:
d2:2d:16:d5:7b:57:ff:b0:d4:d2:2d:73:35:ae:63:
9b:16:b7:8f:05:85:3c:ef:ec:c4:73:3a:03:22:2d:
ea:4a:99:9e:ad:25:5e:57:1d:f4:cd:24:36:d1:e8:
ae:e1:aa:10:ee:1f:82:ff:7d:c5:ef:fe:71:28:46:
0b:de:88:02:87:30:0c:c2:04:a5:95:2e:4e:96:a3:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4C:3D:11:7E:D4:54:DD:8B:65:3C:E3:9E:A9:DA:74:7B:9B:A3:93
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/A7AD52CE961811EDB002DB30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.155.252.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:00:13:f4:d6:fe:f4:75:d4:02:19:29:f4:ac:81:a9:15:9d:
55:bc:41:d2:2f:ba:45:f2:a4:94:3a:19:06:48:33:43:9e:f9:
f0:f2:fd:86:8f:bc:e8:31:9c:b7:85:f0:5d:6c:0e:0a:89:7f:
e3:91:f0:c8:ba:2e:c8:23:3a:31:66:67:4e:82:e0:03:8a:92:
7e:c4:13:26:68:5c:37:e2:b5:38:8c:d3:09:38:24:1c:2d:ef:
bc:ff:f5:ee:73:1b:c7:7a:73:d7:80:c7:32:67:f9:a2:d4:32:
c7:8d:0c:dd:08:52:77:7a:3d:b1:b0:f8:82:cb:31:72:13:cf:
75:00:5a:b0:3b:af:4e:86:49:77:b9:00:0c:07:f1:60:41:79:
ba:d3:cd:33:ee:35:81:9b:43:ff:81:f7:ed:45:2b:e5:4a:43:
6d:ea:25:c0:fa:71:87:f1:5d:5a:16:d7:f4:d9:1a:5d:09:8b:
f4:16:74:2a:25:78:7e:f1:ea:5c:08:6f:38:59:ca:35:0e:db:
19:ba:9e:3e:62:db:6e:aa:66:53:24:02:83:89:4d:ea:cb:f4:
24:6c:ac:4c:22:5d:86:fa:9d:b7:4e:ef:2b:04:7f:e8:7d:18:
15:d6:b5:18:4c:15:b7:54:84:2e:23:89:5c:79:1b:a2:d1:01:
90:55:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:31:47 2025 by rpki-client