Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/00E33588AD6A11EFBAD17A59C4F9AE02.roa
File: 00E33588AD6A11EFBAD17A59C4F9AE02.roa (raw, json)
Hash identifier: 4GjLE8dVseK8r0H1xjELp7WmKd23AtVVBXABL/QUns4=
Subject key identifier: 4E:CB:26:81:90:79:D7:49:C0:E2:6E:F2:64:A9:C4:CB:D4:C8:00:E5
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 342A
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/00E33588AD6A11EFBAD17A59C4F9AE02.roa
Signing time: Thu 28 Nov 2024 09:20:27 +0000
ROA not before: Thu 28 Nov 2024 09:20:27 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 5511
IP address blocks: 122.8.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13354 (0x342a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Nov 28 09:20:27 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=674835da-1185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:cb:66:2d:bf:15:13:10:0e:19:40:df:77:
74:a5:ec:b3:cb:ec:94:8c:97:7f:41:ab:f4:34:87:
17:4d:62:96:21:42:55:79:2c:e6:6b:ef:d4:ea:49:
93:3e:91:77:7a:05:6a:eb:b1:37:51:13:46:28:e4:
c2:7d:82:8e:8e:fd:3e:56:ec:c3:2a:c1:2b:d6:0b:
08:0e:18:e8:5e:6c:05:6c:94:b4:2a:9d:ec:c2:c2:
da:7f:7c:2f:3f:db:95:e4:7f:76:28:2c:7e:0e:5c:
ca:20:04:b3:b8:6f:e5:43:6a:bc:48:9f:2a:07:cc:
56:30:da:13:ea:3e:a7:6c:7a:5d:b9:1b:65:63:24:
31:c3:0c:99:9b:54:09:fc:41:90:99:fa:5f:eb:3c:
bc:d0:b8:8a:23:e7:ab:8e:12:a2:0e:54:f8:20:50:
5d:23:a9:37:84:0c:8a:19:cb:13:33:25:5b:d1:63:
70:45:f7:f1:af:0a:12:02:02:2f:9a:0c:5a:81:90:
21:a1:b2:77:5b:10:80:62:ea:f7:6c:61:02:db:f7:
80:f0:2b:6f:d0:1f:5c:3a:0a:8e:f4:f7:57:5b:d9:
33:10:c3:93:f2:eb:6a:d0:ae:4e:19:e4:c1:44:7b:
f1:25:0e:2a:80:fe:0e:b3:56:fb:ee:a6:c4:8f:7a:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CB:26:81:90:79:D7:49:C0:E2:6E:F2:64:A9:C4:CB:D4:C8:00:E5
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/00E33588AD6A11EFBAD17A59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.44.0/22
Signature Algorithm: sha256WithRSAEncryption
10:11:a4:1e:50:91:70:62:08:c0:58:ae:c8:62:b5:78:df:c1:
23:a9:5a:e7:e3:73:67:fa:eb:3d:f4:94:5d:6b:b2:a8:e6:5e:
cd:3b:93:ae:5a:4d:40:d2:94:e5:99:b1:60:f7:99:92:1e:8a:
57:f8:e6:e1:b7:c6:bc:af:b8:fb:60:ce:1b:f8:65:55:2d:ab:
43:11:99:47:fe:80:c2:39:89:d0:95:66:92:a4:8d:13:a4:a4:
22:e7:1b:0a:74:f6:ac:0b:f4:a2:84:d0:9a:30:c9:d5:fe:d4:
1b:3b:e1:99:34:e3:0b:bd:28:d5:56:94:b4:47:50:8f:8d:7f:
a1:cc:da:fc:b5:50:be:c4:6f:ee:cc:4a:b4:e4:b3:a0:4f:8b:
c7:45:27:75:1e:e4:cd:6c:97:82:a1:8c:01:d4:df:e5:40:64:
62:b6:e0:71:d6:c6:18:cf:2e:48:cb:e0:f2:99:9c:b2:db:d8:
13:4b:ac:c9:c5:8b:99:dd:0c:b4:df:99:ec:cd:a7:95:88:33:
30:e6:f9:cf:67:a0:20:2b:df:c9:58:45:67:8b:5a:c1:a0:3a:
b6:70:6f:75:96:7b:c2:a8:52:7c:f1:61:f0:38:21:8f:07:36:
22:ef:65:38:a1:22:a1:e2:c7:d7:4a:89:c4:93:0e:64:76:07:
1f:eb:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:41 2025 by rpki-client