Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
File: 2286A2E29C7611EF9FB2F666C4F9AE02.roa (raw, json)
Hash identifier: /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=
Subject key identifier: 16:5F:11:B7:9B:D6:62:D5:15:F4:5D:EC:93:C7:75:5A:A3:1D:B0:78
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 35B5
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
Signing time: Wed 06 Nov 2024 19:34:27 +0000
ROA not before: Wed 06 Nov 2024 19:34:27 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 134465
IP address blocks: 175.29.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13749 (0x35b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Nov 6 19:34:27 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672bc4c3-58db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:c2:37:d7:ee:1b:bd:ca:aa:4a:31:1a:7c:
ed:cc:4d:1a:cf:0d:28:ee:36:f8:11:6d:52:d7:d7:
e8:29:66:eb:90:f4:96:19:dd:9e:36:e4:48:9a:6c:
92:d8:dd:af:60:1a:79:21:c0:db:02:79:e2:3b:de:
79:c9:00:7d:29:69:5d:9e:32:38:57:15:06:24:6a:
68:04:5a:d2:57:d4:3c:42:84:b2:ff:6d:ea:6a:56:
5c:54:8f:a0:b0:f2:69:44:f7:65:20:4e:19:59:4b:
c3:18:fe:29:f3:6d:6b:9d:95:39:3f:04:b9:b8:19:
47:40:35:9e:88:9b:c9:d4:b8:c5:ca:fa:87:86:74:
61:50:b5:d9:21:7a:0e:5d:65:e5:18:ec:79:d6:87:
be:62:75:29:d5:d6:61:c3:5a:fb:81:b1:41:a6:45:
a9:ea:7c:49:ba:b0:8d:dd:0a:ff:c2:f2:1c:00:e3:
b8:a7:66:45:e2:27:92:e7:4d:f1:cf:4b:d0:ab:ef:
59:ce:af:c3:47:ca:b8:be:08:76:4b:f6:ad:17:1a:
7d:82:58:3c:0c:dc:a8:9c:df:e3:f9:0f:90:94:e8:
39:b8:82:16:73:67:18:aa:b2:c5:ba:a0:62:54:3b:
5c:1c:cf:0c:cb:32:32:dd:e6:bc:8d:e5:0e:de:cc:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:11:B7:9B:D6:62:D5:15:F4:5D:EC:93:C7:75:5A:A3:1D:B0:78
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:db:46:55:2c:ee:49:4b:3c:fb:44:22:00:db:39:15:b8:ea:
c8:d9:e3:31:ae:56:ca:0e:e5:67:ff:4e:cc:5c:d0:c2:c2:e9:
d9:46:97:c0:9e:0a:e3:a2:3e:80:7e:a3:3f:27:bf:8c:27:de:
87:57:64:2a:ba:f4:cb:ef:36:c6:2a:94:81:6c:72:6e:f8:e8:
f4:7b:bb:08:68:31:12:83:39:80:c4:aa:87:03:b2:66:e5:fb:
ab:57:95:8f:5e:7d:07:91:61:0c:60:24:eb:43:45:bd:f4:84:
4e:ac:a8:b6:fc:d1:df:6e:5c:93:93:4a:47:33:09:85:f6:7c:
15:18:85:e9:84:57:c9:19:d9:e3:3e:d1:c6:e7:f0:9e:d0:89:
07:39:04:cc:bd:13:de:ef:84:a0:2c:f9:b5:2f:ae:d2:a2:48:
40:f4:7b:f9:88:20:8b:d1:9c:9a:35:97:61:95:e0:74:9e:09:
24:75:0a:e4:a5:cb:5a:49:c7:0e:7b:5a:d3:1d:e0:a3:63:e1:
28:9e:b3:a2:0d:f6:0f:d5:54:5d:1f:a0:cf:46:9d:1e:1c:cd:
83:7a:8d:f7:a2:d5:62:8e:31:ed:07:6a:d2:41:4e:83:b5:d5:
b5:a8:d0:c0:a8:8e:cd:76:82:a5:ba:c8:d5:69:9a:81:b5:ab:
cb:bc:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:38 2025 by rpki-client