Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa
File: B86FBE4A2E3611EB84E66039C4F9AE02.roa (raw, json)
Hash identifier: sLEtAwDgKICVdyB7EW9vv5iaJ4c0aSu+tPvZcmtVPKg=
Subject key identifier: E9:BE:A9:E0:D6:EE:28:BF:83:C5:EA:F3:F8:B3:98:DB:AC:5A:A0:16
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0EB6
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa
Signing time: Tue 14 Jan 2025 18:16:18 +0000
ROA not before: Tue 14 Jan 2025 18:16:18 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 19905
IP address blocks: 210.57.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3766 (0xeb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0
Validity
Not Before: Jan 14 18:16:18 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6786a9f2-e3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:cb:74:b4:6c:da:1c:e3:b2:51:32:32:ee:
bf:01:25:38:52:3b:38:d3:cc:20:d9:19:c2:b9:c5:
8b:74:3f:40:00:26:42:bf:68:b1:c1:52:cd:ff:5d:
89:62:be:09:69:62:11:bf:21:72:e1:6a:13:f8:d6:
dc:ca:e1:b7:df:23:9b:93:58:36:9a:fe:d8:76:83:
ff:33:90:af:6f:76:1f:29:28:2f:64:ad:c2:8e:8d:
34:d5:7d:2e:6f:1c:a5:e4:69:9d:80:71:01:45:f1:
62:e0:a9:63:7a:6d:9e:05:07:6a:2f:42:29:f8:d2:
42:2a:bd:5b:d0:9d:9d:1a:2b:c8:51:2f:f0:13:f1:
b1:ab:0a:e7:60:f9:68:62:8d:c6:59:15:98:5f:11:
3e:0b:00:86:10:62:d8:2d:19:99:79:6e:4c:2b:af:
9d:f4:e5:03:de:1f:3f:90:01:e1:9b:ac:14:9c:d7:
06:9f:83:ec:1a:85:8e:e4:65:d5:4e:96:dd:49:06:
e2:0b:19:32:26:ae:ad:83:00:3f:97:36:4d:d3:5c:
2b:4a:f9:d5:33:ce:cb:1b:a2:bc:cf:8e:87:1d:1c:
e8:ff:07:79:5e:83:6b:03:64:ef:39:35:19:18:ad:
6a:b0:0e:90:f7:14:0f:31:91:a5:72:fc:53:46:62:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:A9:E0:D6:EE:28:BF:83:C5:EA:F3:F8:B3:98:DB:AC:5A:A0:16
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.57.42.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d1:a0:4b:82:04:a9:9e:ca:80:66:3c:93:20:ae:f2:fc:8a:
a5:d7:6b:da:fe:70:66:4f:bd:46:f1:4b:9f:f8:eb:56:37:9d:
1c:2b:6b:7c:f7:22:20:8e:02:58:a9:69:a4:e0:94:b2:90:e3:
d9:36:8f:ce:1c:ce:15:8e:40:a9:d1:3a:9e:3e:2a:8d:a4:99:
19:56:96:73:cb:64:a3:72:e1:62:8f:5e:bb:b0:73:9c:2f:d5:
63:aa:e6:38:83:d2:b5:d2:19:e0:75:0d:bf:e8:fc:fe:84:37:
28:9e:65:48:29:2a:8c:8f:75:40:f7:71:c0:ca:e3:dd:ca:33:
61:d4:fc:98:e8:35:f2:67:c4:9a:ae:f9:e3:ab:34:f9:62:db:
ee:ee:e8:18:0b:f8:7f:ef:9d:94:41:4c:11:53:c8:9f:4f:1f:
96:ac:43:47:aa:85:a7:a2:d4:9c:9a:d3:b6:a6:91:7e:50:4a:
3f:1e:c2:6a:72:42:5f:da:91:c1:56:fd:04:37:b5:1e:04:30:
a5:13:60:cb:9d:8a:8c:12:73:0d:e1:af:2a:41:df:ef:83:29:
17:2f:8a:d5:cc:6a:af:79:d4:ec:72:ae:89:f7:e2:f2:a0:d7:
4e:73:23:60:a3:b7:12:3b:3c:ef:75:62:c1:6b:2a:e4:13:db:
f2:d4:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:17:08 2025 by rpki-client