Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa
File: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (raw, json)
Hash identifier: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM=
Subject key identifier: 42:F6:4D:E5:0A:A4:E3:5F:95:0C:22:91:A4:C4:D0:2B:48:A0:DB:EB
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3565
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa
Signing time: Thu 10 Oct 2024 14:50:42 +0000
ROA not before: Thu 10 Oct 2024 14:50:42 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 139065
IP address blocks: 175.29.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13669 (0x3565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 10 14:50:42 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6707e9c1-ed59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:e5:11:a1:84:f8:38:de:07:6a:94:4a:24:
8c:7e:fb:b2:28:c1:e6:09:80:20:16:79:ad:09:89:
53:3b:9f:b0:ce:3b:05:57:07:bc:2f:95:75:81:66:
c2:cc:fe:49:51:ea:c3:6f:2c:c2:e9:a4:75:bf:0d:
ed:d1:98:08:2b:2d:23:83:98:0b:0b:9a:a0:a0:98:
5a:80:7c:20:9c:72:48:bd:60:34:1c:cd:45:9c:7e:
d1:4e:27:1c:a8:df:96:b4:b6:66:61:7d:77:39:db:
2d:25:11:74:e2:7f:3f:34:73:46:69:24:ba:88:4b:
66:e4:d7:37:f0:80:e2:80:0b:2d:14:db:97:d3:7a:
8b:75:05:47:e7:25:53:85:6b:f0:8f:6c:3e:e9:94:
11:ab:3e:32:1b:98:ec:62:10:9c:7f:d9:f3:66:21:
d6:3e:d8:16:dc:a5:fa:a2:69:05:0d:76:56:6e:a5:
a2:85:1b:92:df:90:a4:5c:65:4b:46:3f:f5:e8:53:
d3:34:f4:7a:e0:b0:ce:e1:9e:49:d4:40:8d:58:f2:
3b:69:89:6f:10:4f:b9:ea:6f:26:26:ef:b2:dc:08:
79:2a:b3:35:19:b4:79:26:ba:83:34:b4:d3:93:77:
59:7f:bf:d0:34:a6:1c:e9:13:82:0b:4c:b6:e7:cb:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:4D:E5:0A:A4:E3:5F:95:0C:22:91:A4:C4:D0:2B:48:A0:DB:EB
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.104.0/22
Signature Algorithm: sha256WithRSAEncryption
32:1b:0d:a8:f2:16:db:a3:25:7c:94:c6:3b:47:9e:e2:0e:9f:
f1:44:a6:71:f8:fc:b5:0c:30:62:1a:3e:0d:b8:8a:46:2a:2a:
70:7a:2d:18:89:0b:ab:2c:a6:14:37:29:9e:74:47:18:03:73:
c2:99:d6:5a:d1:28:84:39:f7:2a:6e:8c:10:0c:a2:47:8d:07:
03:b4:92:48:ec:9b:9f:eb:bc:2d:fa:09:98:54:0d:b0:bb:fc:
03:6a:6e:f0:9b:5a:21:1d:40:b1:d5:08:71:c8:61:fd:3a:80:
e5:18:be:3e:2c:e1:ba:d4:0e:8a:24:18:98:95:de:e6:eb:10:
27:2a:74:ab:84:1a:a6:1d:31:7e:07:85:4d:17:39:81:9e:c0:
d1:bb:b7:b7:72:a2:44:67:ce:cb:f2:5f:5d:1e:8d:e8:c9:4f:
b9:bb:2f:9e:09:d9:0e:0a:15:6a:fe:e2:68:6d:0c:33:2b:3a:
15:94:f2:27:e1:5b:2b:9e:c7:e7:49:41:ab:fc:9b:9f:62:13:
a0:aa:f8:ad:a0:5b:9f:05:c7:83:a5:6e:84:6b:be:77:09:80:
96:03:83:ff:ee:05:2b:e3:9a:67:b5:81:72:f0:27:0e:fa:a1:
45:8f:97:da:b9:ce:3b:c2:e3:d7:4e:b6:19:47:9a:66:9a:17:
c1:66:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:50 2025 by rpki-client