Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6B016F4EB6C911EF9370FA5AC4F9AE02.roa
File: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (raw, json)
Hash identifier: iTlF+uPGrIuaNuFVnIoH3tgyLnBFOM/eLVs+GcFq9rY=
Subject key identifier: 85:62:1D:54:35:BE:B6:10:CE:26:65:FD:DC:13:66:6D:5C:36:2C:75
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 344C
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6B016F4EB6C911EF9370FA5AC4F9AE02.roa
Signing time: Tue 10 Dec 2024 07:38:42 +0000
ROA not before: Tue 10 Dec 2024 07:38:42 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 62610
IP address blocks: 118.26.60.0/24 maxlen: 24
118.26.61.0/24 maxlen: 24
118.26.62.0/24 maxlen: 24
118.26.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13388 (0x344c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Dec 10 07:38:42 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6757f002-9293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:d5:6d:15:84:66:3c:bd:57:fb:b8:8d:dc:
05:96:45:6f:98:87:92:fd:88:48:db:24:1f:56:89:
a7:83:26:e0:ed:5e:ea:74:1f:8a:89:92:12:f8:63:
39:55:94:fd:b5:58:3c:b1:19:3f:d7:fc:4f:a4:f1:
40:02:60:1a:99:0f:8a:3c:11:34:ea:0d:88:67:c7:
37:cb:9a:62:0b:fc:9d:f6:20:76:64:8f:46:42:fc:
af:04:a3:42:db:2f:93:aa:6a:76:bf:29:68:db:b6:
73:4f:40:f4:02:d7:5a:1a:be:7f:c8:23:b3:30:38:
34:30:64:59:18:d8:2f:58:13:85:38:c7:84:1a:17:
06:45:14:75:0d:fc:15:d8:25:9b:7c:35:2e:48:5c:
65:b0:e0:4d:b4:ea:85:72:3a:de:dc:64:c9:fb:d7:
61:e9:76:06:7e:65:e5:85:f0:0c:50:6d:d3:7c:26:
25:f0:f0:19:d0:45:fd:d8:f8:6d:11:56:5d:53:42:
b6:63:f5:a8:e7:3b:f7:d8:22:1b:e1:94:dd:2e:60:
0f:d3:19:a7:aa:40:a0:9d:2c:c2:fa:7e:e7:38:f0:
e6:30:0f:31:cc:91:de:b1:72:97:63:23:b3:24:13:
f6:1f:24:dc:1a:71:93:3c:8d:50:b8:a5:d4:07:ed:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:62:1D:54:35:BE:B6:10:CE:26:65:FD:DC:13:66:6D:5C:36:2C:75
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6B016F4EB6C911EF9370FA5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.26.60.0/22
Signature Algorithm: sha256WithRSAEncryption
93:b1:49:31:12:cb:3e:06:7b:5d:33:36:21:d9:e8:e1:5c:af:
11:85:20:ac:aa:74:5e:10:da:c7:6f:45:21:a7:17:10:2d:fd:
09:3d:9a:52:20:2b:9c:a4:d7:46:0c:b5:4d:58:3b:96:e8:5c:
69:ab:b2:be:b7:b3:bc:06:de:d4:33:91:b7:69:c6:54:dc:e8:
bc:88:d1:6f:a7:50:04:bd:4b:aa:a8:0b:3f:d3:df:65:24:6b:
d9:f1:2d:a9:ab:a5:f1:4d:c4:1b:2d:2b:39:73:1b:ad:ab:69:
4d:0b:70:e1:47:a2:08:81:6c:23:e5:fa:40:8d:be:7b:09:0c:
59:ff:f4:a5:52:26:c4:b6:4a:f2:c5:32:65:dc:63:a7:2a:88:
38:1a:c7:32:18:1f:ba:5e:4d:3c:2c:3f:88:ae:24:98:e1:fb:
f1:12:39:05:61:26:c5:0d:55:aa:2f:77:f2:7d:bb:20:1a:a5:
4e:8b:33:2e:b3:e4:d0:fe:6b:72:b3:5e:37:38:b9:50:5c:43:
20:27:4a:08:49:3a:a1:17:ee:7f:58:60:d8:f0:dd:56:1c:78:
d0:d3:e5:39:17:f4:c2:4c:c8:76:ea:cc:f9:ad:52:98:98:7d:
43:1a:bb:0d:03:a7:66:7e:7d:b4:c5:63:2e:7e:3c:12:9f:fd:
ef:e0:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:54 2025 by rpki-client