Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/0664C974FEF811EFB0C52572C4F9AE02.roa
File: 0664C974FEF811EFB0C52572C4F9AE02.roa (raw, json)
Hash identifier: LMQmjwLQrmdrjw5ITfcjjvXTHrCvldYng4+Bqh2xDu8=
Subject key identifier: 60:8C:4F:52:97:BD:38:D5:B2:80:FB:13:72:7E:BC:17:5D:F8:A1:53
Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial: 05
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/0664C974FEF811EFB0C52572C4F9AE02.roa
Signing time: Wed 12 Mar 2025 04:11:08 +0000
ROA not before: Wed 12 Mar 2025 04:11:08 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 7514
IP address blocks: 82.100.184.0/21 maxlen: 21
95.87.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8282
Validity
Not Before: Mar 12 04:11:08 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67d1095c-e6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:ae:64:df:4e:7e:a8:47:3b:fc:0a:87:08:
26:1e:e3:00:8c:ed:75:a6:0b:52:42:db:48:ce:64:
23:bc:99:94:31:9c:3c:85:e5:97:08:c5:c5:fd:81:
19:bf:51:57:36:c5:8e:ca:d8:8c:09:05:42:39:f5:
54:cd:3d:12:87:9d:de:51:76:bb:29:73:ae:ba:14:
f2:ff:65:ac:cd:ef:e7:f4:a5:16:eb:20:cd:3a:51:
2a:0f:3e:80:22:02:78:e6:76:1e:63:42:58:db:42:
e6:ef:e8:9a:d3:fc:ec:6b:d0:39:2c:ad:0a:17:09:
80:51:3c:7f:6f:bc:43:da:9a:1e:69:c7:69:92:01:
9b:94:91:43:e6:e6:4f:67:6e:3b:65:10:b1:4d:e3:
39:51:62:47:98:12:5e:ed:8c:60:55:fd:4c:6b:eb:
74:bd:1d:08:75:e6:d7:90:53:80:b2:7b:f9:93:61:
20:81:4b:25:71:68:cf:bb:36:a4:14:b2:e7:39:5f:
a2:bd:69:d3:b7:67:78:6e:67:45:de:ac:20:9b:78:
a5:03:3f:89:d1:20:d0:2d:84:b7:7f:6a:78:97:ed:
26:b0:9c:b1:b2:d9:ea:28:60:18:97:2b:85:b2:89:
8c:f1:4e:a4:3e:b3:25:84:d8:36:47:bd:ec:c7:27:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8C:4F:52:97:BD:38:D5:B2:80:FB:13:72:7E:BC:17:5D:F8:A1:53
X509v3 Authority Key Identifier:
keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/0664C974FEF811EFB0C52572C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
82.100.184.0/21
95.87.112.0/21
Signature Algorithm: sha256WithRSAEncryption
16:0f:4a:9c:06:6b:8a:cb:79:76:4d:ec:c6:b3:e0:a4:36:3d:
39:02:9a:cf:87:7f:da:60:54:74:61:82:3a:ad:1b:5e:86:26:
db:03:05:ae:52:05:13:25:b2:74:6f:9e:8d:dc:e1:7a:28:d8:
6d:f0:f9:b7:bf:35:b3:9a:97:ea:49:b4:f6:9e:a6:58:35:e5:
ac:f6:f9:02:26:83:37:be:1b:1b:f8:6e:fc:14:a0:4c:c0:6a:
af:62:96:1b:25:a8:df:e2:77:3b:a4:e7:7a:c1:7f:30:d5:95:
0d:e7:fd:20:2c:5d:fb:aa:c3:0b:4e:2b:cd:7c:b5:8d:12:b2:
5f:94:6a:e5:6a:3d:c3:b9:eb:58:62:68:0c:1f:ae:f3:a9:dd:
93:e2:cd:4f:cc:82:d9:c7:c7:bb:ab:3c:d9:65:d8:37:c6:91:
0a:7a:8c:39:8b:77:6f:63:80:11:d8:08:4e:56:e2:4c:c6:40:
7b:13:dc:4d:9b:a7:4a:0b:07:de:13:a5:35:0e:b6:43:a1:dd:
8c:1e:e9:62:47:eb:ca:02:bf:e5:78:37:7a:6e:f2:0c:d0:6e:
12:f5:b2:93:41:2b:1f:0e:d6:52:c8:e9:16:bd:50:0b:4e:15:
64:20:02:ae:90:f7:4a:84:40:c2:9f:3c:70:b9:06:10:31:80:
db:8e:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:19 2025 by rpki-client