Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
File: 27C8A978636311EEB35FEF77C4F9AE02.roa (raw, json)
Hash identifier: 5Q1zL9Y6ea7qsYPVO2/XeHTbNIbA5GYv7YB91BxjxsM=
Subject key identifier: 08:46:6D:49:EF:FA:EF:D4:5E:95:22:24:82:04:93:66:70:11:8F:E3
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3897
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
Signing time: Tue 16 Jul 2024 14:30:48 +0000
ROA not before: Tue 16 Jul 2024 14:30:48 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151825
IP address blocks: 171.102.216.0/24 maxlen: 24
171.102.217.0/24 maxlen: 24
2001:fb0:10bb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14487 (0x3897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 16 14:30:48 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66968418-eed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:15:15:1b:9a:bc:00:21:22:a9:53:ba:25:
19:57:72:d1:92:f0:9e:7d:f1:07:c0:cc:51:50:9c:
5c:ad:d6:17:9b:af:6a:0a:c9:e5:ea:73:cd:25:ce:
28:56:7f:5b:be:61:f4:2c:5e:65:1f:71:3b:48:9d:
a5:7c:37:93:9a:f7:22:8a:8c:00:5d:2e:ba:3e:48:
13:59:0e:12:ae:4f:74:73:90:92:aa:1c:44:72:2f:
70:9a:1e:d5:72:1b:61:86:94:3c:f2:30:d2:a5:57:
ba:d4:73:6b:1d:ec:5d:32:4d:03:fe:18:c3:a2:77:
af:a3:8f:b4:6b:07:b3:78:97:b2:c5:42:66:c5:cd:
2e:9f:ea:b5:2e:dc:c8:79:d1:0f:c5:5c:59:df:3d:
09:11:e7:d9:23:96:29:1d:5f:a5:a0:9d:ef:00:75:
17:d2:79:df:32:c9:83:4c:34:63:32:46:20:72:50:
0c:95:33:e1:61:b4:0a:e4:84:5c:df:c8:19:6c:21:
26:7d:86:12:bd:71:3c:b0:5c:92:85:72:af:e6:04:
4d:f4:e9:02:8f:5a:73:06:15:94:06:3b:83:b3:07:
c9:0f:1a:f4:8a:88:65:b6:5b:e4:7f:5e:2e:7f:0d:
fe:cf:37:3f:4a:dc:13:2e:7e:10:de:b4:7c:c0:dd:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:6D:49:EF:FA:EF:D4:5E:95:22:24:82:04:93:66:70:11:8F:E3
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
171.102.216.0/23
IPv6:
2001:fb0:10bb::/48
Signature Algorithm: sha256WithRSAEncryption
7c:ea:25:f7:97:f0:c9:b4:25:fd:f6:a1:92:83:e0:bd:4b:fd:
d0:44:0b:a4:82:c2:1b:0e:e4:d4:80:94:23:11:7a:ee:a0:90:
8a:6d:88:31:a4:40:54:e3:fa:62:e6:3d:3d:33:4f:9d:57:a0:
f9:42:ca:d1:c0:ed:51:a0:71:31:bd:55:05:c6:a5:0c:e9:56:
0b:4c:24:7a:84:87:af:98:d4:be:f6:18:8c:e7:3d:bd:5d:3e:
be:10:90:c7:97:bc:54:58:e9:f3:74:b6:ee:4d:4b:f8:aa:f1:
85:eb:08:96:9f:26:cc:87:45:db:f9:9a:c0:ec:0c:d3:93:10:
e3:4e:ee:5f:5f:92:89:9d:76:17:a1:34:f0:08:7e:13:ad:cb:
aa:49:98:7a:a1:0d:eb:a6:85:a3:04:94:6b:27:54:30:37:df:
45:18:f2:7d:d8:64:64:fe:34:72:fc:8f:b1:b3:5b:c7:59:dc:
ea:b6:cd:e2:5e:5d:84:4e:7b:f0:39:35:7c:8c:72:ec:08:5a:
92:d0:67:92:44:aa:e4:17:f9:02:17:df:5f:ca:71:be:e7:15:
85:17:ae:d8:8a:80:39:23:e8:e5:14:95:d5:19:94:4c:2a:60:
1a:63:0a:b3:38:9d:19:20:17:62:1b:e5:0d:35:6d:94:5f:b5:
77:43:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:45 2025 by rpki-client