Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa
File: 54B32544D84711EF81BD1E0BC4F9AE02.roa (raw, json)
Hash identifier: EbrYIZU65++7cnV2izreMJIedWGaOp2u+lx4wMYEp5I=
Subject key identifier: 20:45:95:81:6F:EE:1C:2F:09:AD:61:9E:44:7D:E9:1B:3F:68:F8:7C
Certificate issuer: /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Certificate serial: 0B83
Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa
Signing time: Tue 21 Jan 2025 22:30:35 +0000
ROA not before: Tue 21 Jan 2025 22:30:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 38442
IP address blocks: 27.123.128.0/18 maxlen: 24
103.244.228.0/22 maxlen: 24
183.81.128.0/20 maxlen: 24
2401:5100::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2947 (0xb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Validity
Not Before: Jan 21 22:30:35 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6790200a-4279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:e1:8c:b7:17:76:b4:68:54:6b:53:25:51:
63:68:ee:32:83:a8:39:d4:c8:1f:dc:16:11:f0:6f:
fc:5f:bb:40:38:b7:75:5a:21:d7:2f:19:bb:8f:d3:
80:cb:ed:67:8f:b5:52:f5:37:ee:af:d1:24:5c:57:
f5:bc:21:ea:cf:d4:ab:b7:7c:3e:60:b9:27:ce:89:
88:e1:4d:9b:a6:5d:bf:af:4f:53:0d:e3:fc:8e:a1:
00:65:ee:d5:aa:6e:3c:45:87:0f:72:d6:9b:35:86:
26:ae:59:e5:bf:82:9c:81:82:82:68:0b:4a:23:57:
c8:3a:af:bf:eb:7b:dd:23:7e:33:5a:9c:e8:9d:ad:
72:b0:0c:7f:c6:e6:fc:6b:8f:30:22:97:19:20:d5:
de:6f:41:4c:99:20:a9:e5:52:56:45:0e:53:ce:1e:
08:12:ab:55:a6:85:32:5e:d6:1d:c8:e0:46:86:de:
f9:75:d8:2d:fb:42:49:71:8a:7f:a2:99:dd:4a:13:
ca:d3:dc:58:17:b2:8a:db:2f:04:84:15:fc:f7:35:
da:f1:6c:99:cc:5a:4e:30:ea:ae:3d:5f:60:54:a2:
94:fb:8c:23:de:bf:1b:77:76:e1:d0:49:89:ec:65:
1a:0f:9d:54:83:9c:4f:88:57:c4:cd:66:7d:04:6e:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:45:95:81:6F:EE:1C:2F:09:AD:61:9E:44:7D:E9:1B:3F:68:F8:7C
X509v3 Authority Key Identifier:
keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.128.0/18
103.244.228.0/22
183.81.128.0/20
IPv6:
2401:5100::/32
Signature Algorithm: sha256WithRSAEncryption
58:a1:2a:0e:b4:a8:dc:53:ef:97:f9:6f:ab:12:2d:0f:bb:6d:
2e:dd:33:21:92:a3:aa:df:9c:4e:d7:c1:8a:b8:c7:87:db:15:
00:9d:f0:92:98:4c:33:dc:3c:34:3b:8b:72:4b:27:a5:61:d5:
a2:42:10:5b:a4:a6:80:60:bd:f0:7a:54:20:11:fd:66:2b:30:
b3:07:2f:7e:e3:73:f4:32:9c:34:a7:3a:63:2a:e6:cf:7b:08:
21:a1:07:8d:bd:ad:ed:86:fb:9e:d8:cc:76:0c:74:06:8a:8c:
ea:8d:33:ab:40:82:52:94:b5:2a:9c:fb:e3:6c:c2:34:3c:d2:
75:d2:8a:a2:fd:e1:81:63:38:8f:5b:9a:18:4f:99:7f:25:a8:
15:c8:1e:6b:e9:65:43:35:0a:d2:b5:54:da:a5:36:09:ca:40:
72:7d:ee:6c:42:3e:4e:5e:9c:22:59:5a:06:31:1e:1f:f4:0a:
f2:da:27:ed:24:8c:8f:08:ed:67:3f:0f:55:cf:22:ad:dd:d6:
91:35:ef:2f:cc:7b:9e:89:c0:bf:8c:38:98:87:99:1b:df:e7:
c6:11:4d:4d:4c:0c:60:dc:24:ba:e2:fb:47:d4:5b:d7:b0:5d:
0d:87:42:56:39:0b:28:fb:6c:e3:81:a7:b9:15:ad:b5:8b:de:
e4:82:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:38 2025 by rpki-client