Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa
File: C2D9F4BCD24311EF92066413C4F9AE02.roa (raw, json)
Hash identifier: 5iS11kL+9pqleb9zxECVMM1xJvDR+Jn2NVybTvOLDAM=
Subject key identifier: B2:ED:C4:97:A2:66:FC:33:F2:31:3B:6F:F0:95:10:DF:7C:76:78:95
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 07A5
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa
Signing time: Tue 14 Jan 2025 06:49:55 +0000
ROA not before: Tue 14 Jan 2025 06:49:55 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 147040
IP address blocks: 61.4.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Jan 14 06:49:55 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67860912-cfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:4b:7a:45:0c:6e:8c:c2:56:88:59:ab:78:
63:67:b9:5b:01:65:63:a3:2a:12:91:04:d7:db:24:
85:3d:02:b5:16:cc:07:38:44:a0:a3:44:24:d5:df:
78:f8:a8:36:d3:d0:b8:77:d1:3b:4d:b6:31:4e:0b:
a0:f5:6a:f2:02:cf:98:e4:53:a0:4c:b0:a6:54:f8:
16:e3:e8:3d:22:10:74:c4:77:89:ae:52:16:9b:ee:
66:15:39:9e:a5:3c:60:bc:26:5e:51:64:3f:0f:c2:
48:8b:1e:bf:12:36:13:11:47:56:6c:01:78:1f:04:
b9:eb:fd:df:86:06:b5:b0:2d:b0:4c:cb:82:83:30:
eb:9c:ab:f3:f3:40:e6:af:9a:d2:99:65:e5:8d:7c:
01:4f:84:67:2f:e9:b3:58:66:a1:68:2d:c3:c2:b0:
be:e3:f2:bc:61:3d:4a:77:4d:99:65:f7:fa:a1:eb:
ab:26:83:22:4d:b5:b4:b9:b8:72:6a:cd:73:77:b3:
57:65:5f:c6:18:65:47:ca:dd:d1:c3:09:6e:24:dd:
40:c3:e7:5c:8f:00:09:53:3b:dd:ca:43:c0:41:4e:
be:09:66:de:59:83:3a:4e:07:99:c5:99:68:91:af:
77:89:c7:de:df:fc:af:60:95:ef:8c:63:ad:3f:38:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:C4:97:A2:66:FC:33:F2:31:3B:6F:F0:95:10:DF:7C:76:78:95
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.4.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:78:34:77:01:1f:11:fc:74:8e:5f:67:fb:7b:ce:51:0f:d4:
e8:04:a0:cd:ac:44:ae:6c:d0:8a:38:73:5f:c2:4d:93:b8:cf:
14:cc:89:3e:43:e5:d1:b6:5b:a0:22:d4:84:d3:82:3c:a0:e1:
fc:31:b9:bb:c4:34:9a:b6:ce:01:fd:0a:76:42:7f:74:a1:a5:
0b:01:d1:b1:dd:7c:66:c4:73:24:8d:e5:33:d9:55:ef:92:a8:
8f:d6:88:1d:06:f2:f4:93:40:45:85:3e:e2:5c:0e:bb:39:21:
cb:2b:33:18:a1:ad:86:9d:a8:10:e4:12:2e:c0:cf:e4:c3:1b:
4f:69:3f:20:fe:2a:47:cc:19:02:4b:11:6a:28:53:76:5a:f4:
1e:d2:3c:8c:f6:dd:0f:95:05:34:92:29:29:6f:63:28:03:9b:
4a:01:2b:6f:16:13:98:52:92:2c:c0:12:18:3b:43:78:93:4b:
74:d4:62:30:24:00:7c:9a:80:c8:d6:90:26:b0:c6:85:23:e3:
03:b4:d9:3e:b1:a1:15:4f:a0:d6:76:c6:fa:fa:a2:7c:76:e5:
ee:77:cc:a2:7c:d4:cc:46:fb:e5:17:ce:3f:37:2f:8b:26:68:
2d:3b:f6:41:dc:1b:aa:12:28:41:03:72:fb:56:a4:c8:ed:86:
40:86:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:23 2025 by rpki-client