Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa
File: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (raw, json)
Hash identifier: JjNvo6+sKFXJO5jB79ObwXmzISqdgMEQqhlFwLrXnJs=
Subject key identifier: C5:8F:33:63:A9:D3:46:D4:CF:91:54:03:AC:E3:90:CF:69:D9:92:EB
Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial: 0534
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa
Signing time: Mon 02 Dec 2024 23:32:39 +0000
ROA not before: Mon 02 Dec 2024 23:32:39 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 4759
IP address blocks: 210.16.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Validity
Not Before: Dec 2 23:32:39 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e4397-8a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:da:c9:82:1c:75:28:86:df:a0:f7:1a:87:
4f:b3:76:03:f8:0f:3d:e9:22:60:2c:ed:23:27:6a:
81:e3:01:f2:23:8a:b1:09:ed:30:34:3c:65:34:c1:
06:ce:be:ed:3c:91:ec:bc:a2:3a:2a:d7:01:6f:b2:
5a:98:7b:90:8a:13:80:b1:e4:d1:39:ce:e4:91:b8:
fa:27:7c:fc:07:35:a5:df:a0:4a:13:4a:48:44:25:
ec:d0:1c:f9:be:d4:34:0e:9b:38:59:bf:c1:ef:4a:
a8:ee:6a:3c:04:5b:79:90:31:36:ab:ca:77:c2:30:
fd:c7:08:e1:1e:13:3d:11:50:b9:44:18:6f:f6:4e:
09:6f:e8:66:96:41:dd:11:b5:48:da:c1:64:8c:d6:
39:62:60:04:63:32:ed:a6:42:36:7e:c1:a3:54:c6:
62:e9:a3:01:ae:e5:e1:0a:e5:23:46:15:92:c2:6d:
10:52:57:b9:ce:d8:60:c8:fe:be:4d:73:68:93:34:
85:c2:07:82:88:4e:11:bf:33:92:8b:37:00:69:52:
bf:fa:bf:b4:02:38:15:05:f1:49:86:45:8a:07:1b:
ec:b0:37:49:c0:07:b8:08:df:eb:11:83:f0:d9:46:
57:9b:58:cd:12:ca:3c:ea:88:f4:57:98:fb:3a:e0:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:33:63:A9:D3:46:D4:CF:91:54:03:AC:E3:90:CF:69:D9:92:EB
X509v3 Authority Key Identifier:
keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.16.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:7a:75:0c:13:5f:ed:e3:4d:6d:98:6f:da:f5:33:8f:8e:44:
41:4f:9d:0a:fd:1f:34:a7:c9:0e:06:cb:a2:7a:25:03:58:0d:
af:fe:51:6f:9c:ea:fe:3c:fb:65:c0:ec:24:2b:f4:8b:85:c7:
fb:12:5e:03:53:1d:87:e3:33:03:ba:37:9c:80:6a:2a:70:51:
88:e0:a2:f9:78:52:90:a5:78:0a:1f:93:32:9d:86:7a:87:17:
88:50:eb:fe:fe:64:10:bc:44:53:de:61:b8:72:7f:16:97:af:
c3:bf:fd:71:c5:ab:6e:5b:98:ca:f2:07:4a:51:23:6f:c6:a1:
63:fb:fc:f3:c8:6c:d8:5b:f2:70:62:7b:d0:a5:a0:a7:b8:7e:
07:fe:fe:33:95:91:42:fa:5c:20:05:b1:6f:f4:f9:1e:2c:28:
da:dd:6b:dd:8c:ef:1f:17:d1:29:b8:3b:25:17:94:47:ff:ab:
39:9f:ae:73:9a:57:4e:b4:9d:cc:e2:50:f4:9a:4e:b8:83:69:
d7:7e:b2:48:ed:df:8c:de:09:c2:7c:d4:0c:07:f1:19:a2:79:
34:15:06:0c:6c:9a:a6:9f:2c:26:0b:22:61:5f:2d:9b:12:ee:
01:70:b4:2d:33:57:b9:ad:14:39:39:5f:c8:8a:30:d2:74:d0:
ae:f5:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:47 2025 by rpki-client