Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/F120EB84C6D911EFA447E849C4F9AE02.roa
File: F120EB84C6D911EFA447E849C4F9AE02.roa (raw, json)
Hash identifier: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=
Subject key identifier: EE:E3:94:43:E4:23:99:F5:D9:97:C9:DE:AB:D8:9C:BE:68:B7:04:84
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: 06
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/F120EB84C6D911EFA447E849C4F9AE02.roa
Signing time: Mon 30 Dec 2024 18:14:43 +0000
ROA not before: Mon 30 Dec 2024 18:14:43 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 215355
IP address blocks: 161.248.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: Dec 30 18:14:43 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6772e312-fc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:97:53:38:95:86:34:05:4b:48:e5:d1:a2:
7d:37:18:2e:05:7c:29:a9:11:67:7d:79:dd:e9:68:
2d:f6:4e:0a:62:b3:3f:ff:f9:fb:44:ed:30:fd:80:
6c:4c:a4:59:b3:61:67:db:78:51:9f:fa:21:1c:00:
5b:1c:25:4a:f0:db:c1:74:f7:a2:c3:d3:91:16:08:
14:3c:5b:56:ff:46:73:e2:97:74:34:b5:49:9b:d9:
74:3e:83:1a:5a:e0:60:b5:12:f1:95:86:ac:2b:f4:
f5:af:5b:5a:c3:9d:14:cd:05:fd:6b:a6:25:23:47:
af:de:07:0a:9f:4e:92:90:c0:4d:c5:98:e3:d2:ad:
90:02:ad:6d:fc:42:9d:63:c0:45:db:ad:77:cd:c8:
8b:e7:4f:c8:d4:76:f1:b1:c3:a1:98:a1:21:d9:ae:
8a:69:75:7d:50:85:0f:2f:7b:32:4f:e0:36:c8:b2:
28:4c:0b:1c:97:50:be:a2:39:44:0c:1b:69:18:87:
27:6b:66:f1:76:97:40:0a:b4:8f:12:71:6a:5a:04:
b4:fb:54:92:30:58:56:4f:77:7d:13:d9:0e:4d:fd:
9e:1e:5f:aa:76:f5:cb:2a:77:33:80:03:f3:f0:2b:
06:f5:ec:c1:c6:85:9c:06:4d:51:e6:83:33:03:a6:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E3:94:43:E4:23:99:F5:D9:97:C9:DE:AB:D8:9C:BE:68:B7:04:84
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/F120EB84C6D911EFA447E849C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.62.0/23
Signature Algorithm: sha256WithRSAEncryption
30:5b:78:98:c8:30:32:c5:89:f4:45:9c:42:20:6e:37:5f:4b:
92:cf:bf:bf:4e:00:61:d3:96:e3:fc:35:d5:78:54:fe:33:1c:
ac:eb:c5:96:66:57:de:ac:36:68:69:2f:cb:7c:71:8c:44:5f:
8a:15:44:40:b7:34:93:68:1e:c4:23:f2:d1:42:fc:9a:9e:13:
0f:4a:e4:d7:9f:c1:81:7b:8a:2f:21:37:ad:ac:04:a8:2e:20:
e9:c5:9e:4f:cc:56:0c:dc:c6:fe:02:f1:28:55:b1:3b:15:82:
13:05:32:c0:93:40:f7:30:a8:58:7a:2e:ab:d9:6e:12:79:8a:
4e:9e:34:5e:c9:7e:8e:fc:b7:9d:87:d4:ac:ac:98:51:11:9f:
e4:4e:74:a9:a4:71:e5:e4:64:64:14:0d:75:17:7a:7f:05:ab:
66:68:df:59:ff:bb:28:36:4d:c1:4e:c9:91:f4:c1:56:7a:ec:
85:c0:c3:e2:da:5e:c4:60:f3:ff:e3:ec:34:11:b4:05:ca:1a:
af:38:5e:13:9c:5d:4c:56:ca:31:61:da:91:66:bc:80:93:5b:
6c:3a:52:4d:7e:e9:e4:65:3b:44:75:cc:71:be:68:94:d2:c5:
29:1e:1a:07:b7:4e:b7:a6:dd:ff:db:41:c7:d1:ae:8e:39:10:
ab:ff:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:43:48 2025 by rpki-client