Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
File: 9EEDB94662C111EE8F200F60C4F9AE02.roa (raw, json)
Hash identifier: W15tb+7+a4VOZZM16otpW1viHRyC/Bw3dBhXfgeUMMM=
Subject key identifier: 17:4D:96:C9:F0:5E:AA:F5:93:8B:54:60:C1:37:E6:B7:D9:D1:97:E1
Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
Certificate serial: 46
Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
Signing time: Thu 01 Feb 2024 07:49:50 +0000
ROA not before: Thu 01 Feb 2024 07:49:50 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 17903
IP address blocks: 27.118.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
Validity
Not Before: Feb 1 07:49:50 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65bb4d1e-cbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:e0:35:e0:a0:97:82:ec:cb:17:e3:b0:d3:
ff:01:cb:c8:1d:f8:be:bf:bf:e0:92:e8:83:bf:5f:
7e:f4:0a:61:eb:02:31:9f:7c:42:6d:77:37:44:3d:
d9:64:4e:25:e6:f7:08:48:82:19:66:93:25:be:69:
4b:ba:7a:49:7d:79:cd:eb:4e:09:4a:6b:f7:41:c1:
4b:91:9f:14:1b:07:92:88:08:fd:1d:03:70:6e:33:
be:c2:20:f0:d2:01:9e:75:23:53:a7:cf:bb:b9:c2:
d5:57:af:c2:6c:89:a8:2b:d4:b1:8a:76:54:79:64:
40:32:e1:ce:71:57:c8:10:02:6c:9e:a4:7e:69:4e:
8e:7b:07:e3:c9:a7:b7:7f:78:63:86:ad:cb:84:57:
3b:2b:78:01:d3:0a:c7:70:25:dc:92:a4:5a:6c:bf:
4a:10:19:9d:db:79:15:48:31:a4:f1:4c:e1:93:14:
9c:e7:66:11:53:d5:d4:88:1d:8a:55:b2:8c:27:14:
85:4b:58:4e:ec:ec:32:4a:9a:80:50:71:fe:53:1e:
6b:fc:ca:3f:4d:db:25:16:75:0b:8a:35:3c:29:c1:
72:39:61:63:82:c8:42:55:ed:72:a0:bd:68:ae:cd:
3b:2a:fa:e3:5f:05:6b:9a:0e:5c:55:dc:84:6a:9a:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:96:C9:F0:5E:AA:F5:93:8B:54:60:C1:37:E6:B7:D9:D1:97:E1
X509v3 Authority Key Identifier:
keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.118.56.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c3:29:61:af:33:27:9a:0a:2c:cb:ed:c9:a4:87:b0:94:ef:
19:f3:dd:33:24:30:af:4b:b2:1d:f9:07:83:2d:bd:e1:6c:9d:
0f:3f:e3:11:82:20:95:68:5e:9b:51:85:c7:08:b9:38:1e:75:
a2:24:91:09:b5:e6:c4:b6:37:b2:04:9e:ef:ce:cd:ee:0b:ff:
ab:5c:4a:26:af:c4:ee:b5:92:d1:34:a7:c9:9b:b9:e9:25:4a:
6a:87:eb:66:de:68:f7:6c:58:c2:b6:1c:d9:b1:bd:f2:21:71:
ea:f7:d6:03:2a:3d:02:80:3c:9d:07:4e:82:56:f2:93:4d:06:
df:99:6e:f1:c2:4c:eb:35:14:a1:97:a3:50:eb:cf:fa:57:6b:
14:66:59:b8:1a:f0:c8:c1:0c:da:c3:51:44:45:b7:a3:13:2f:
4f:88:4b:c1:f3:50:3e:08:8b:3f:33:93:82:f6:04:b5:8d:6c:
f3:3c:52:07:55:f2:ea:9b:0f:d5:4a:de:26:02:8f:40:9b:69:
74:41:59:de:eb:12:9c:0b:0a:3b:46:fd:76:d6:dc:db:90:96:
bf:ca:39:40:07:4a:23:50:15:5e:1b:81:1c:91:0e:c8:63:ef:
d2:cf:0f:5f:1f:ac:d3:02:6a:29:85:3e:38:e7:c4:93:2b:35:
d0:d4:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:57:54 2025 by rpki-client