Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa
File: 0897E314434811EF8E76757AC4F9AE02.roa (raw, json)
Hash identifier: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=
Subject key identifier: B6:4A:EC:C9:98:AC:2D:5E:E3:F9:70:D5:00:F3:DE:89:D5:AB:FD:72
Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial: 1684
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa
Signing time: Wed 04 Dec 2024 16:54:29 +0000
ROA not before: Wed 04 Dec 2024 16:54:29 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 152891
IP address blocks: 110.235.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5764 (0x1684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Validity
Not Before: Dec 4 16:54:29 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67508945-b88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:a7:29:2e:20:b1:46:e2:61:7c:95:d6:d2:
e1:94:1b:42:51:1d:53:b7:77:a4:5d:fb:c0:07:fe:
56:c1:56:b7:6e:d0:7e:21:cc:03:d2:c4:91:70:09:
ee:c6:17:37:a9:39:6e:6a:6e:06:ce:0f:ca:03:21:
d9:37:2c:58:41:3f:80:fc:b9:45:2d:af:a7:35:03:
15:6a:55:56:3b:81:84:01:75:de:f3:4c:6f:c4:13:
91:2f:01:b7:68:51:dc:37:0b:b8:6b:a3:69:6b:4b:
e3:33:04:41:88:ac:6e:3e:d9:91:90:e6:d9:af:31:
0b:5a:7c:b4:1d:03:d4:26:3d:48:d8:f2:38:c1:6b:
bf:db:36:03:e9:14:73:2c:c9:e8:fc:63:5c:2b:f7:
b1:81:4c:ba:51:d3:0c:22:0b:52:b4:dc:59:c7:63:
29:0f:47:0c:1f:1a:a9:e2:73:c6:29:5d:34:25:e6:
72:66:1b:3f:9c:ee:78:75:bb:d8:b4:be:d6:ea:c3:
16:20:2f:29:c3:38:c3:a9:dc:97:41:e4:d9:e6:da:
e1:37:1f:c5:50:44:a0:11:48:7a:4b:79:fd:ce:71:
49:f4:cf:bb:99:fb:84:81:7e:26:0d:01:d3:29:7c:
de:0b:47:13:39:d1:1b:bf:0b:c1:7c:7e:bc:3e:91:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:EC:C9:98:AC:2D:5E:E3:F9:70:D5:00:F3:DE:89:D5:AB:FD:72
X509v3 Authority Key Identifier:
keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.235.157.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d5:d8:e2:64:e7:be:0e:2c:f6:b2:d1:b2:41:ca:2b:ef:45:
52:c1:cd:eb:55:09:f2:32:7e:e7:3b:fa:bc:82:2f:30:ff:d4:
97:a4:20:0e:a9:76:40:e3:3d:70:be:11:fc:8f:a6:62:6f:53:
86:12:34:73:49:db:0b:ee:88:97:d1:0d:c1:a7:a4:3d:da:fa:
f8:32:4a:96:90:56:c1:fa:12:11:2a:56:d8:99:1d:69:79:80:
d4:80:e7:af:29:d0:37:b3:db:0a:8d:95:68:3d:e4:4e:ec:57:
63:ed:52:db:14:61:83:84:3c:92:5d:ec:4e:4c:a7:a5:20:7e:
6c:67:af:22:6d:10:99:6a:fd:3e:cd:4d:71:7a:08:30:b7:dc:
15:ad:6f:2d:f1:2b:97:8c:4e:0a:c8:3d:4b:33:d2:4a:9e:b6:
2c:c1:65:b8:85:97:9b:a9:90:93:31:f8:f7:df:36:dd:50:0d:
74:4e:ca:7a:6d:a8:c4:9a:5d:43:52:cf:ec:6f:4d:6b:cb:06:
14:9b:9f:75:2a:16:b9:3c:15:20:97:d4:71:94:db:e2:f5:64:
50:68:64:cd:04:42:80:9c:0c:e6:2b:dc:37:8e:2b:7c:c0:28:
fe:53:6b:c5:ce:15:a9:98:5c:a4:3f:f0:3d:20:0c:7c:89:0a:
91:23:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:43:49 2025 by rpki-client