Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa
File: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (raw, json)
Hash identifier: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=
Subject key identifier: 42:26:CF:83:BE:A9:97:DA:01:BE:3A:FF:00:2D:72:12:C4:93:92:C9
Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial: 05
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa
Signing time: Tue 28 Jan 2025 09:47:54 +0000
ROA not before: Tue 28 Jan 2025 09:47:54 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 200195
IP address blocks: 45.123.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC4FB
Validity
Not Before: Jan 28 09:47:54 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6798a7ca-08ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:a4:96:32:b0:d3:4e:52:1d:d8:fd:ba:40:
17:d5:41:5a:d3:9a:8a:a7:2a:ef:12:88:1e:0c:aa:
93:6c:86:70:3a:8a:14:cb:0d:94:22:88:b5:a6:6c:
1b:0d:c1:67:07:b7:4b:9f:08:84:8a:d7:4e:8a:00:
82:76:71:a8:29:e0:f0:1c:10:e8:73:24:6d:32:08:
b4:64:9a:76:97:ad:d6:d4:e3:7e:16:7e:44:12:10:
1b:2e:c7:62:85:5f:1e:3a:6e:e3:52:56:84:cf:2c:
fc:a9:e2:d9:b4:de:a8:db:20:01:6a:23:71:39:3f:
ee:9b:68:e5:76:ee:2c:84:3f:66:54:10:59:3b:26:
ad:2f:be:c2:a9:c0:8d:a3:2b:44:98:f8:80:3e:93:
64:78:b8:d6:42:85:eb:0b:38:cc:a2:7d:04:60:e2:
ad:e2:6d:f8:02:9c:cb:88:e0:e1:5c:2f:aa:38:b6:
22:69:4c:22:c5:fd:ae:e5:71:ec:4f:92:1b:0e:61:
41:5e:ee:68:7d:17:e8:01:f7:9f:23:3e:6e:4b:52:
f9:2e:f8:25:a2:ec:60:f5:e9:82:81:f2:f3:8b:21:
a8:82:eb:ad:91:fb:f1:6d:4b:ff:df:f0:a4:89:a5:
1c:29:78:94:55:a7:df:8e:5c:5e:fa:bf:8c:02:03:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:CF:83:BE:A9:97:DA:01:BE:3A:FF:00:2D:72:12:C4:93:92:C9
X509v3 Authority Key Identifier:
keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.190.0/24
Signature Algorithm: sha256WithRSAEncryption
22:83:e2:3d:de:3e:55:7d:02:af:f1:5c:07:0d:3e:c1:a3:89:
c1:e1:6d:20:f8:24:06:45:fa:8e:8d:e0:00:74:33:57:d4:4f:
ef:9f:3b:14:30:41:ce:99:eb:67:f0:e7:69:fe:28:d6:9c:53:
87:a7:e0:54:72:1e:35:08:c0:34:e0:56:89:c2:78:3a:2c:23:
b8:18:77:64:f8:ad:1c:09:ad:11:ca:13:0a:4a:9a:db:bd:fc:
98:1a:f7:61:a7:b2:4d:af:e2:5b:96:64:85:dc:03:8b:a0:4a:
41:df:0e:bb:86:39:10:f2:8c:8b:11:7d:f0:15:82:31:cd:e9:
16:23:eb:dc:a2:89:cd:5f:10:d4:66:d2:b9:75:20:6f:eb:73:
6b:fa:85:4b:a4:d4:72:98:7a:5a:87:99:ae:21:44:d5:6c:04:
30:0f:e7:83:a6:a4:45:97:a0:70:a7:c4:bd:6e:b9:62:60:38:
b9:54:97:bd:fb:62:75:67:90:f9:77:f8:61:79:d7:f7:5a:e2:
6e:08:41:a8:c5:55:0b:6f:e6:e4:6b:37:86:ea:85:29:6f:af:
59:ec:80:82:7f:e1:80:7e:61:f5:8a:1c:0d:6d:a6:35:ee:e8:
3b:4a:9d:7f:e0:91:ba:16:a0:88:bb:fe:ec:0e:67:eb:42:fa:
f4:67:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:42:08 2025 by rpki-client