Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/06166DF4DC6D11EFBD34F40EC4F9AE02.roa
File: 06166DF4DC6D11EFBD34F40EC4F9AE02.roa (raw, json)
Hash identifier: zAVhFCx+Y0sm2rtgFn1OnJdCE1tYjDSThjKJO14bltw=
Subject key identifier: 6D:12:7B:DE:C2:0D:E8:0A:46:B9:EE:2C:C6:5F:CC:21:6D:E1:1E:BC
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0790
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/06166DF4DC6D11EFBD34F40EC4F9AE02.roa
Signing time: Mon 27 Jan 2025 05:10:28 +0000
ROA not before: Mon 27 Jan 2025 05:10:28 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 142424
IP address blocks: 126.209.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Jan 27 05:10:28 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67971544-ad5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:74:37:7d:d5:b7:de:d0:96:cb:b8:dd:b5:
bb:c5:1c:44:54:5b:af:7c:b3:3c:1c:ab:2d:42:eb:
f3:6c:b4:15:9d:86:62:3b:09:d3:d0:5f:19:fe:f9:
1a:61:08:cf:e3:c0:61:1b:e8:9e:ed:de:e3:70:bc:
9d:2d:6a:0b:a5:3a:e3:09:4e:e2:bb:76:70:0f:e6:
ed:41:62:3e:59:af:5f:45:04:e9:0b:19:89:e9:fe:
0f:a0:19:21:90:1a:2d:52:fb:99:a5:50:bc:11:69:
04:4f:91:78:ac:ec:a0:a2:48:66:b9:da:63:39:b4:
13:c7:72:3b:82:51:06:e2:a4:e9:32:6c:13:5b:da:
32:14:7a:d0:b5:06:d2:1c:d7:ea:fd:cb:71:2d:a8:
8f:f5:48:15:68:1f:e3:fd:05:05:ec:b4:b7:21:8c:
e2:f5:3f:a1:0e:c1:fa:39:76:a0:ed:44:89:4c:c1:
06:5f:e5:e5:bc:ab:d0:f9:75:55:ff:60:7d:fe:b6:
0b:fc:22:b7:c5:e8:65:97:99:79:ad:35:98:38:3c:
f3:6d:51:44:1f:08:a8:a9:0c:a4:b8:20:33:72:32:
fb:2e:65:bb:72:9e:4e:7f:26:ec:83:fe:51:b3:67:
ce:e4:a1:22:13:6d:68:39:48:4d:cd:39:aa:b0:c3:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:12:7B:DE:C2:0D:E8:0A:46:B9:EE:2C:C6:5F:CC:21:6D:E1:1E:BC
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/06166DF4DC6D11EFBD34F40EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
126.209.51.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b9:9e:f8:63:bd:17:9a:a6:e1:13:ba:62:7f:63:14:e2:47:
ed:63:25:a5:ed:15:99:89:bd:7a:46:61:b2:3c:7b:eb:b5:4a:
4d:f2:f5:3f:d3:27:24:79:ce:3e:fc:d7:52:93:9a:4c:0b:25:
b3:17:da:14:02:d6:20:48:87:be:bb:00:2d:5b:9f:94:77:58:
e4:0f:f6:c5:50:2a:cc:ae:3c:1d:82:16:7b:3b:be:9d:8d:ef:
73:26:14:30:7e:ce:33:a5:b6:b5:ea:61:ff:dd:a1:a0:ac:30:
da:59:82:7a:dd:3d:a5:70:72:0a:bb:fc:32:d2:15:06:05:89:
8a:ca:7f:5f:68:56:da:91:d4:5f:e4:b1:25:6b:d5:09:ca:0c:
9b:32:8c:a0:69:2e:7d:49:84:eb:12:b3:df:22:84:f1:38:66:
71:de:3d:e4:8e:96:6f:79:e2:21:66:db:61:58:87:3c:59:6a:
26:ca:a5:84:94:85:64:a6:50:a5:09:ca:32:ed:d3:3c:1b:8b:
40:4a:60:67:b4:ec:ec:36:94:01:dc:68:30:0a:b4:d3:fc:1e:
aa:6d:cb:3e:15:94:5c:22:62:90:c3:5c:4c:77:5b:4e:6e:86:
70:4e:c9:16:0e:7f:ec:72:63:df:b2:d9:e9:9f:2a:5b:bc:13:
c0:df:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:14 2025 by rpki-client