Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
File: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=
Subject key identifier: 63:3C:9E:3D:AB:17:CF:4B:39:D2:58:38:9C:B0:C4:2F:4F:9A:32:45
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 364B
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
Signing time: Mon 02 Dec 2024 14:30:45 +0000
ROA not before: Mon 02 Dec 2024 14:30:45 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 7715
IP address blocks: 61.19.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13899 (0x364b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Validity
Not Before: Dec 2 14:30:45 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674dc494-6322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:a0:c0:22:03:e8:e2:98:b7:78:7e:00:31:
b6:98:be:91:cc:37:9d:81:54:91:19:5d:d3:9d:76:
a8:ea:2a:59:e3:d2:50:22:87:89:f6:3a:19:33:c3:
cd:a4:60:3b:f4:5e:aa:1c:cc:c6:93:c9:d4:72:20:
e7:c0:6d:21:28:df:61:c3:60:bd:17:4f:f3:ac:ac:
bd:df:ca:41:19:0e:c3:00:aa:c8:0d:75:70:c6:16:
ca:08:be:92:f7:ff:ae:ca:31:a4:ea:e3:0f:93:42:
dd:ed:72:0d:c9:c6:62:ca:e3:53:14:dd:a6:1e:80:
7a:8e:eb:dc:62:0d:8a:05:6e:47:b5:67:89:01:38:
bb:1d:ba:93:c9:3d:7f:97:9f:98:3a:f3:6d:fe:69:
53:2c:97:79:d9:b9:22:bf:15:d3:62:e7:0a:38:b6:
50:e2:e9:0b:2e:ac:24:49:f0:7c:58:f2:5d:7b:10:
10:b9:30:d4:f7:5b:25:e2:d5:ee:d8:33:ce:31:57:
61:36:7b:d9:df:fc:3b:ed:41:99:ae:c1:75:e3:c1:
fb:5f:cd:b9:4d:5e:88:5e:a8:cb:19:36:be:a7:f3:
26:4f:0d:01:1f:5b:a8:76:76:f2:4c:e7:00:ca:8e:
f7:20:7e:17:58:7e:27:e5:4b:f6:43:f8:92:75:7e:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3C:9E:3D:AB:17:CF:4B:39:D2:58:38:9C:B0:C4:2F:4F:9A:32:45
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.19.222.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:9a:76:4b:e9:ae:b3:f7:a5:c9:4e:8d:bf:1d:1b:6c:11:71:
12:7b:3f:50:88:5b:39:1a:bd:48:15:1f:c1:0f:70:f2:8a:d4:
29:8f:1d:b1:5e:1c:26:ca:6b:c7:e6:b3:b4:fd:46:8e:2d:6f:
f2:c1:5f:f6:04:70:ef:63:ca:09:b1:f9:26:9a:40:31:89:66:
4e:03:9e:ec:86:a5:ac:ed:fd:6a:43:fe:9c:93:70:6b:d9:02:
d1:97:46:dd:a5:7e:39:e3:3c:0a:c3:9f:4c:89:b4:94:7c:7d:
0b:27:37:b2:53:b5:45:e8:66:df:e9:8b:81:63:25:2e:27:f0:
0f:f1:48:72:4e:e3:64:e2:b8:0d:dc:82:5c:cd:72:ed:ec:fe:
69:4f:55:04:a9:90:d5:8b:7e:f6:51:f7:c3:a2:d1:06:34:e5:
fb:ce:40:24:36:76:95:2f:e2:ee:30:7c:fb:64:70:04:78:fd:
3c:a8:03:68:08:a5:9d:36:e6:93:d5:53:08:c5:d9:9a:f5:4b:
56:ad:08:3c:aa:4a:91:b4:a6:b1:77:75:a0:d0:51:91:b4:64:
f8:43:3f:74:e4:4e:84:0e:9a:5a:f1:e5:fa:4b:61:a2:fc:97:
81:54:05:f7:4e:51:ac:58:ca:62:dd:78:03:e8:7c:d9:7a:b6:
fd:bf:18:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:31 2025 by rpki-client