Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67F68132535F11EE9BC85F83C4F9AE02.roa
File: 67F68132535F11EE9BC85F83C4F9AE02.roa (raw, json)
Hash identifier: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=
Subject key identifier: D2:04:8A:0E:CD:0D:63:FD:9B:A1:C5:EA:DA:CC:3C:DC:9B:7C:86:73
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0C17
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67F68132535F11EE9BC85F83C4F9AE02.roa
Signing time: Wed 06 Nov 2024 19:08:51 +0000
ROA not before: Wed 06 Nov 2024 19:08:51 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 4202202331
IP address blocks: 112.137.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3095 (0xc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Nov 6 19:08:51 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=672bbec3-c9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:89:24:1e:37:32:3f:3d:a8:2f:8b:32:27:
21:61:00:df:a0:47:a2:46:05:87:55:8c:43:be:65:
3a:cc:8a:11:10:85:12:cb:4a:5f:83:c6:98:de:c8:
32:6e:b7:8c:3b:4d:44:be:da:c7:5e:b0:b6:3e:9a:
c3:5d:a5:57:a7:9b:ec:26:4e:2a:00:74:e2:43:94:
a8:fe:39:12:63:9f:92:05:63:8f:fe:5e:08:58:28:
0e:a9:58:9b:6e:95:77:3c:72:10:07:60:cb:e3:43:
86:ca:72:e6:bc:d0:51:a1:74:84:64:16:82:ba:d6:
50:80:b0:9b:16:d0:68:12:71:aa:7f:ae:52:05:f5:
ed:91:73:34:93:24:cf:08:e5:01:37:3c:cb:e3:7d:
11:89:f1:77:96:3d:ee:e4:9a:54:e3:e0:f4:a9:93:
c1:cc:8f:71:b6:bf:84:63:27:d9:12:ed:8a:1e:3c:
5b:94:e7:22:92:a5:f3:a9:43:79:40:c3:a9:84:c6:
4c:7f:d2:7a:9e:34:39:5b:30:33:93:cd:9c:91:89:
b3:52:2a:2f:b5:ac:82:79:e7:9e:83:5c:ea:92:c1:
b1:7c:1f:a4:24:38:38:52:b2:24:49:9f:1a:9b:7d:
11:e2:f8:73:1e:a8:7b:6d:58:e7:1f:9a:17:a8:59:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:8A:0E:CD:0D:63:FD:9B:A1:C5:EA:DA:CC:3C:DC:9B:7C:86:73
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67F68132535F11EE9BC85F83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.137.166.0/24
Signature Algorithm: sha256WithRSAEncryption
74:69:e1:51:c9:91:d5:e4:4e:36:a2:05:27:26:90:65:d5:90:
af:4a:ba:66:9d:7d:b9:be:5d:90:b8:03:d8:dc:2b:f2:19:b5:
cf:e1:b5:30:bc:15:95:4d:c9:64:92:e7:33:d7:d8:c0:b3:94:
a4:a9:b8:11:29:cd:33:11:a5:80:c3:e1:a8:12:b7:54:0f:62:
ae:85:ff:60:02:27:3f:5d:a7:37:08:a4:71:70:9b:18:f4:4c:
ac:6c:75:3d:4f:0f:05:cb:6a:5a:36:84:f9:c1:f3:af:b9:fa:
de:91:2e:66:31:41:a0:dd:72:63:3c:bc:cf:ef:43:de:cd:ff:
60:31:bd:2c:34:77:b6:66:45:8f:4f:3b:08:08:47:23:0d:8b:
83:47:4c:85:f5:27:6d:b7:7c:9e:8d:53:a7:6c:e1:42:26:c0:
eb:a7:6e:63:60:43:30:10:86:1e:67:cb:cf:31:54:ee:1c:5a:
14:7a:f5:d8:7d:c7:be:d6:0e:fc:1a:e3:f9:0d:67:27:19:b9:
fc:87:2c:fe:92:41:89:c6:9d:28:f2:8c:9a:ec:8f:4a:41:8b:
77:cc:5d:08:f7:68:2e:cb:be:ed:56:7e:e0:a1:8b:0c:12:6a:
d5:43:b5:70:9d:44:c4:4a:16:7a:39:8f:5e:52:15:42:25:38:
69:23:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:32:41 2025 by rpki-client