Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/DFA79FA2EFD811EE87F4440AC4F9AE02.roa
File: DFA79FA2EFD811EE87F4440AC4F9AE02.roa (raw, json)
Hash identifier: hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=
Subject key identifier: 94:AE:4D:1E:4A:CC:2B:D4:62:51:C6:00:EE:FF:2A:82:06:AA:58:E2
Certificate issuer: /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Certificate serial: 01EB
Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/DFA79FA2EFD811EE87F4440AC4F9AE02.roa
Signing time: Mon 02 Dec 2024 14:30:52 +0000
ROA not before: Mon 02 Dec 2024 14:30:52 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9931
IP address blocks: 193.36.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Validity
Not Before: Dec 2 14:30:52 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674dc49c-89a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:f9:c4:e4:cc:e7:6f:05:2d:fd:71:18:7a:
59:5d:c7:a5:64:a9:14:b8:f7:c1:0e:f6:f7:21:bb:
98:f0:56:91:8e:6b:db:2c:fb:32:93:22:c1:35:41:
05:cf:62:e6:fa:db:fe:74:ed:62:85:53:07:9e:3e:
b5:6f:aa:5c:94:ac:03:da:85:f4:48:8b:56:65:41:
68:ba:9f:3b:d8:21:5e:79:04:ae:eb:a4:41:93:70:
96:d8:38:0c:85:7a:a9:58:28:73:ae:c3:e7:5d:4c:
bf:aa:77:88:dd:d3:e0:b7:40:61:d1:22:76:6f:8f:
2d:cf:a4:2e:62:ff:7d:ec:32:78:eb:de:fd:68:78:
43:d6:74:9b:15:bb:2a:a7:3d:1b:4e:e2:9a:bb:7d:
32:6e:76:19:d8:76:e6:a1:34:01:c5:93:71:a8:b1:
48:7b:ff:8a:43:73:66:a0:d4:67:4d:56:fb:52:20:
4b:1a:05:db:c6:59:eb:57:c3:50:e5:0a:b2:07:2f:
cb:a3:97:be:05:3e:3d:af:13:fb:cd:d2:29:bb:cc:
4d:5f:86:e7:be:3c:3f:29:aa:1c:b5:ba:9e:f1:84:
06:9e:b8:34:40:7c:d0:44:ee:c8:fc:fd:4a:e3:10:
7a:91:04:42:dd:f7:08:3e:dd:2e:cd:8b:2a:f1:5c:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:4D:1E:4A:CC:2B:D4:62:51:C6:00:EE:FF:2A:82:06:AA:58:E2
X509v3 Authority Key Identifier:
keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/DFA79FA2EFD811EE87F4440AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.36.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:39:40:51:63:a0:7a:5d:6b:37:6f:4f:45:0d:01:57:44:ba:
31:02:4c:2c:5b:7a:8d:d3:73:9b:83:ca:4a:aa:5c:69:d7:d7:
7f:79:5e:42:4a:01:f5:54:a6:f9:40:4c:e6:13:cb:09:9c:4f:
d5:90:b8:bf:09:5c:2b:dd:31:4d:16:e6:4b:85:cc:08:30:2b:
e0:9a:6d:6e:15:87:e8:c7:77:70:23:a9:d4:6a:04:64:97:5b:
b8:3b:dc:f8:0a:41:e5:c6:d9:21:ce:d8:82:70:5a:2c:4b:30:
c3:68:98:42:94:62:8f:e1:1b:0a:b4:6f:e0:24:07:2d:eb:07:
83:75:05:46:78:5d:cf:9a:37:26:25:82:f4:12:af:65:1c:5e:
f0:14:64:ca:3e:3e:1d:59:63:34:0e:f8:0d:5b:52:f6:fe:78:
0a:d9:0a:3f:cc:6b:a3:b2:34:80:76:fd:75:63:dc:ef:09:4b:
12:57:e6:b4:ed:36:44:d4:70:fa:ff:b4:e0:ca:56:d6:e1:99:
5e:8b:b5:40:49:9e:43:c8:73:ab:a2:da:b3:2b:d2:b7:d5:5d:
df:64:98:89:e9:ae:77:60:3e:19:b6:9f:43:1b:7b:64:a5:5b:
f7:d1:c8:83:e9:01:7b:fa:2a:16:25:5f:03:de:fa:c3:97:be:
4f:25:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:00:56 2025 by rpki-client