Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa
File: 84B94D56F83011EE8B26391DC4F9AE02.roa (raw, json)
Hash identifier: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc=
Subject key identifier: BE:60:41:5A:23:5A:98:B7:A8:0F:A5:D2:7A:EB:34:6F:1D:83:5F:7E
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3576
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa
Signing time: Thu 10 Oct 2024 14:50:56 +0000
ROA not before: Thu 10 Oct 2024 14:50:56 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 7029
IP address blocks: 175.29.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13686 (0x3576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 10 14:50:56 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6707e9d0-003f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:e9:9d:96:98:56:06:2c:26:97:39:32:40:
17:77:2c:db:48:26:a9:23:69:f8:74:ed:12:70:bf:
86:d5:e8:5b:9b:cb:ae:44:70:67:77:04:0b:ab:e1:
90:16:d2:8b:84:e5:11:9c:47:5a:1e:f7:88:a7:11:
0a:4f:6a:b3:7d:1d:7b:92:36:08:db:e5:7f:b7:a6:
c2:ad:6d:6c:36:9b:4a:f3:fa:6e:25:95:e8:cf:f2:
62:b7:0c:5c:5b:c7:c9:5b:23:a1:c4:c6:08:3f:f3:
85:f2:37:ca:be:62:a2:cb:15:58:68:e1:43:34:8a:
cb:e3:ba:38:58:6d:e6:1d:2a:15:ea:f3:34:6f:9c:
b1:7e:36:a8:0f:d3:36:ad:1f:bc:73:63:6d:a5:e6:
e1:16:cf:10:5f:6f:a4:31:6f:28:d1:03:01:42:a9:
07:76:3f:87:5e:04:41:b0:18:98:d7:9a:5e:bf:13:
2f:2a:a5:f3:12:ca:fa:a5:c5:86:e3:75:24:a4:91:
a0:3a:2a:d6:22:44:b8:05:26:49:6c:3e:84:52:af:
5e:22:f5:e2:f3:82:7b:49:7a:4c:37:1f:b7:66:b7:
b4:bb:87:18:84:8d:8e:7c:d2:59:54:37:40:1d:30:
c1:94:71:5f:0c:a0:d3:84:d0:6f:21:ba:13:fe:a6:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:60:41:5A:23:5A:98:B7:A8:0F:A5:D2:7A:EB:34:6F:1D:83:5F:7E
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.128.0/21
Signature Algorithm: sha256WithRSAEncryption
90:21:f9:4b:f7:69:b2:5c:58:07:ce:f4:b9:64:b4:a9:63:5b:
b9:23:f3:bb:33:52:f0:ad:6b:08:b4:20:03:59:a4:7b:ae:1d:
27:17:15:43:e2:90:84:c7:d2:49:63:8c:5a:fe:9b:a3:de:2d:
39:33:97:1c:de:c8:24:16:eb:75:28:22:e2:44:91:57:a5:d5:
7d:a5:52:e3:df:ba:18:68:d2:03:22:05:55:80:f6:83:f5:35:
a8:7e:42:b7:13:00:5e:a4:eb:f0:e4:50:7a:8a:78:78:cc:63:
84:62:a7:b2:3b:e7:fb:86:f4:33:0a:1b:41:67:0e:17:d2:86:
ea:35:fa:0a:ad:f5:d2:97:c7:f4:56:26:13:05:6a:d4:13:fa:
ef:e5:d1:b3:29:bd:ee:bc:8f:b3:70:de:e3:8c:c1:59:11:55:
c2:e6:05:b0:a2:13:4f:17:ad:de:6d:5d:a9:c5:0f:e3:43:f1:
c0:49:8c:ad:f0:5e:a7:9d:f6:4f:7d:46:58:0b:5b:a7:68:0a:
74:15:50:04:3c:9e:a3:79:07:55:72:32:02:b0:11:ec:c6:72:
22:ba:3b:40:3b:29:9b:5b:bc:fa:66:c1:83:b3:f4:32:3f:e0:
28:f7:e7:7e:e5:99:5a:b2:a5:b3:df:72:c0:b3:78:37:63:f7:
98:93:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:09 2025 by rpki-client