Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/87687334F8C411EFA06CFB39C4F9AE02.roa
File: 87687334F8C411EFA06CFB39C4F9AE02.roa (raw, json)
Hash identifier: sz2a5NDNx84RHOHmDlYojOak1z4o3k70Y/ubMlwMZD8=
Subject key identifier: 52:DE:7F:8D:31:E5:A5:62:E0:1E:F6:2E:82:F3:CA:FF:57:2D:39:8F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 246C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/87687334F8C411EFA06CFB39C4F9AE02.roa
Signing time: Tue 04 Mar 2025 06:47:24 +0000
ROA not before: Tue 04 Mar 2025 06:47:24 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 223.29.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9324 (0x246c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Mar 4 06:47:24 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67c6a1fc-6ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:8d:12:9c:8b:76:2c:9a:51:a5:5c:9d:89:
74:4b:f7:0e:4b:ed:b6:48:a5:c1:e9:e1:2b:13:ca:
32:7f:17:52:92:cf:d6:ff:9b:f0:7b:6f:37:57:ea:
57:e6:6b:54:b0:3c:78:f6:b6:a5:90:10:55:dc:09:
57:80:55:24:10:6b:7a:fa:60:a0:5f:41:6b:07:d6:
96:3b:c4:38:e2:4b:44:a3:2e:bb:5c:25:3d:1b:eb:
f8:d4:d7:35:b0:8f:e9:6f:c2:ba:63:04:54:64:e1:
e1:9e:15:b3:66:f3:3c:a3:56:b0:36:85:8b:65:dd:
50:0d:43:c4:12:cd:7f:9f:fe:71:4a:a2:f7:e5:37:
f7:e4:9b:34:4a:b1:de:9e:74:14:c4:1e:8d:20:9e:
06:1e:7d:ed:25:f3:ac:79:a0:55:d9:7a:75:66:4d:
02:ab:df:25:e6:54:e5:08:3a:20:aa:67:80:39:b7:
98:3e:8a:54:25:03:c7:50:9f:a6:09:11:37:78:ac:
28:f8:3d:1d:6e:aa:e3:95:f5:3d:94:b5:a5:90:3d:
eb:38:00:ec:f8:a8:ed:48:3a:a5:73:97:d8:1f:33:
2a:27:64:60:6e:71:2d:55:cd:57:9b:55:cf:57:91:
e7:f7:38:3b:39:3e:7b:c1:a1:c9:22:02:ad:43:4c:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DE:7F:8D:31:E5:A5:62:E0:1E:F6:2E:82:F3:CA:FF:57:2D:39:8F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/87687334F8C411EFA06CFB39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e9:4d:7a:59:95:26:51:fb:af:f1:a5:48:31:87:6a:8e:fe:
ac:dd:99:ee:fa:a6:bc:c8:a3:bb:2c:49:ab:33:89:b0:b4:90:
58:66:68:c7:5f:80:15:3f:86:ad:3b:be:64:8f:09:c5:48:80:
f0:66:7b:b5:bc:00:bc:93:59:8f:41:20:d8:27:a3:b2:7a:04:
41:6c:46:62:49:a8:89:49:b2:9f:20:16:22:a2:69:68:98:b8:
ba:7b:84:ba:a4:f3:3e:81:4f:9c:b7:62:41:ad:59:ef:43:bb:
2b:40:c5:53:04:38:68:d8:a0:a1:b7:7b:db:98:81:71:04:3e:
9b:74:79:6d:0c:f6:ad:86:ec:ba:8a:dd:5a:5a:a9:b6:3a:3c:
ac:5c:62:7c:df:cb:eb:74:5f:b3:ba:98:bb:a1:f1:a6:e5:58:
39:6f:96:c5:8f:21:e5:19:72:6e:b6:50:f0:50:b5:2c:31:3c:
ac:56:d9:a2:28:cc:d7:4f:08:24:bd:72:d1:22:f2:11:d7:99:
ce:ec:c1:3a:ae:03:13:0c:74:b7:e1:80:67:91:9b:3a:2f:3d:
d7:ae:fe:b9:7d:b2:a7:4b:35:60:fd:bf:18:9d:a3:e0:d0:8e:
35:24:98:70:61:da:38:da:3f:03:88:e1:c0:1c:a9:82:f4:17:
18:be:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:31:55 2025 by rpki-client