Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa
File: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (raw, json)
Hash identifier: 8EbAPbXfSh68G52OBPln229w9SwdjrHKzeWsW0yhIOI=
Subject key identifier: 9E:06:0F:4B:E2:8F:34:16:E6:13:AD:5C:48:C8:40:25:B0:2D:17:7F
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 35FE
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa
Signing time: Fri 16 Aug 2024 14:40:36 +0000
ROA not before: Fri 16 Aug 2024 14:40:36 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 9286
IP address blocks: 121.78.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13822 (0x35fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 16 14:40:36 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66bf64e3-44c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e8:16:71:a3:ea:1f:9e:90:44:24:04:72:5c:
ef:a8:4b:51:b8:26:5f:bc:14:99:be:a4:c6:4d:1d:
4f:61:93:2e:fc:c5:23:53:a3:6f:9f:63:d1:c6:d4:
09:6b:04:94:91:75:2e:97:f1:79:a9:68:30:d8:b8:
18:ad:c6:9c:bb:54:23:71:ab:f7:c2:49:8f:73:92:
47:36:a4:5b:10:59:67:c1:9f:0d:64:03:2c:39:2c:
78:92:30:13:48:63:f9:ff:88:4f:cd:15:7e:b1:cd:
aa:03:fb:0c:3a:98:e3:85:65:90:21:6f:1c:65:92:
06:b2:33:75:85:d9:bb:33:46:1f:fd:75:38:d6:ec:
ce:75:c4:2c:5a:4e:57:bb:4c:a3:4f:45:30:8e:8f:
da:cf:e0:bc:b2:04:a8:9a:96:70:1e:9a:e1:ff:42:
ae:1f:08:f3:c8:29:5b:a1:80:4d:bb:54:49:f2:72:
5b:cf:13:79:c2:36:c5:da:c6:a0:7f:e0:e2:6f:23:
7f:66:53:fd:6b:16:ec:23:66:ec:28:4b:91:32:cf:
e1:8f:13:02:09:a9:1e:e3:1f:0c:05:e7:36:36:bd:
c3:15:ae:1a:a7:29:e5:7d:8c:a9:23:87:57:42:5d:
09:78:c8:91:ed:38:ff:f8:d9:e1:e9:f0:e9:8a:94:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:0F:4B:E2:8F:34:16:E6:13:AD:5C:48:C8:40:25:B0:2D:17:7F
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.78.35.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:0a:a5:9c:ec:fb:78:a2:56:a6:d1:f8:ab:9c:6b:07:52:81:
c4:98:aa:57:06:f1:3a:80:b9:63:9e:97:b9:a1:54:a0:e5:0a:
af:f9:17:25:ac:23:f1:48:89:9b:f0:e0:4a:21:72:45:d6:3e:
45:26:00:0a:87:48:cf:43:98:c0:c8:e7:4c:ed:84:23:a7:8a:
93:54:cf:c9:8b:61:0c:ab:0c:bd:43:f9:cb:58:af:ff:04:c3:
aa:88:c6:10:56:bf:e3:1d:80:dc:e4:e0:ed:ba:b8:36:36:d6:
1b:83:5a:cc:b4:78:94:bb:76:0e:be:c7:d6:db:25:02:c5:fd:
64:14:a9:06:b8:b0:bf:44:54:aa:1b:df:5f:62:9d:8e:3c:ac:
6a:81:ba:6f:6b:e5:f3:c3:e7:9e:62:ec:a7:64:0f:44:ae:eb:
e1:fd:16:34:ca:9b:f9:cd:c8:d9:1f:5c:32:6e:95:28:87:68:
ee:35:97:25:ff:7b:22:d9:3d:c0:4a:ea:d7:6f:5f:8b:0f:50:
08:2a:ef:36:fd:29:e6:37:54:74:71:62:28:65:c9:24:85:54:
89:ef:81:b7:95:c9:e6:5f:35:21:aa:78:ca:c6:39:26:db:25:
d8:a3:c3:b1:a8:f9:a1:c1:22:d6:4c:be:3b:4a:18:25:01:dc:
41:c2:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:46 2025 by rpki-client