Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E9E37A28AD6911EFB6E53159C4F9AE02.roa
File: E9E37A28AD6911EFB6E53159C4F9AE02.roa (raw, json)
Hash identifier: whnMzVqw/8Iomu4V/C68S/0TGADkSWRX0p00pR0VTxU=
Subject key identifier: B4:5C:2F:D3:C9:1A:65:18:5F:6D:03:64:DE:D7:CA:C7:E7:41:27:4A
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3428
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E9E37A28AD6911EFB6E53159C4F9AE02.roa
Signing time: Thu 28 Nov 2024 09:19:48 +0000
ROA not before: Thu 28 Nov 2024 09:19:48 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 4637
IP address blocks: 122.8.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13352 (0x3428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Nov 28 09:19:48 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=674835b4-8d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:f0:49:eb:0a:d5:0c:a7:d2:02:21:1f:72:
b0:15:56:1f:e8:ad:8c:8a:aa:db:15:55:ce:e8:58:
3c:8d:4f:c7:5d:97:cf:2f:82:c8:2e:82:a6:01:53:
ce:7b:e1:6e:7e:b2:ff:c4:50:84:ab:dc:d0:72:bf:
e2:4d:f6:3f:9c:30:eb:2a:4c:3e:cf:62:eb:74:81:
a8:06:16:db:3a:ec:3f:26:0c:9d:3f:35:f2:3c:b7:
bf:32:de:58:0d:8e:99:79:23:6e:fb:77:52:c8:bb:
ff:60:15:7a:c0:90:76:a6:01:69:db:19:ef:f6:ce:
85:ef:2e:ea:07:03:2c:9d:a6:f4:08:57:e0:83:67:
36:f3:30:e5:9f:3b:25:3c:33:41:5c:3f:db:37:95:
60:b1:fc:9e:54:b4:43:cd:08:11:4b:43:47:fc:2d:
86:f4:03:42:16:42:cd:ea:5b:bf:50:37:3c:c7:e0:
a7:dc:3a:19:63:2e:cd:52:34:0a:53:df:17:90:32:
13:ed:23:a2:f6:8f:1f:9a:ac:76:b9:dc:cb:b3:27:
ab:e9:73:77:19:71:2b:11:84:f8:ac:38:35:73:b3:
4c:fa:42:e5:18:ae:80:1f:38:d4:9e:0e:9d:02:d6:
7f:85:8e:b7:11:73:f4:a0:53:9a:03:a5:d1:e6:96:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:2F:D3:C9:1A:65:18:5F:6D:03:64:DE:D7:CA:C7:E7:41:27:4A
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E9E37A28AD6911EFB6E53159C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.40.0/22
Signature Algorithm: sha256WithRSAEncryption
26:c9:39:06:df:65:15:2d:33:68:ef:ad:da:94:6f:fb:6d:0b:
b1:b8:82:3b:05:24:ac:22:41:04:7d:97:aa:e4:fb:56:00:ce:
be:34:f9:d5:ea:a5:fb:fe:03:6c:0c:09:4d:97:d1:09:dc:14:
58:45:a2:6f:60:07:da:ac:ed:9c:52:3f:3d:2e:d0:42:9b:82:
e5:b1:70:29:05:cf:c6:ed:c2:e8:38:21:2a:9a:73:f0:2c:00:
9d:7f:6b:48:49:e8:d6:ca:91:d7:d0:98:4c:07:3b:74:67:11:
23:a5:31:8d:6f:11:fd:6f:30:4a:5d:28:6c:4e:ee:c4:87:10:
3c:f2:31:69:d1:bc:3d:25:25:52:80:bd:68:9c:97:39:0e:b0:
c0:09:2a:99:f7:ed:48:29:2a:d6:24:96:fc:dd:df:bb:86:07:
29:0b:17:7b:ef:0b:02:8c:5e:65:7c:c3:6b:49:44:40:70:ea:
36:eb:01:a1:18:09:8a:96:ed:4b:e3:07:3d:b0:e8:6f:17:09:
7b:bb:01:59:9e:1d:9a:48:37:4e:90:75:40:4c:8c:58:f5:2c:
d7:e1:c9:9b:33:0d:c5:0e:e5:55:7f:a7:43:92:2a:45:4f:14:
1b:06:23:36:bd:3a:e8:50:a0:d3:24:bf:26:b1:db:67:76:df:
7c:37:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:53:50 2025 by rpki-client