Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/0FB7DCDA321D11EF81C6FB83C4F9AE02.roa
File: 0FB7DCDA321D11EF81C6FB83C4F9AE02.roa (raw, json)
Hash identifier: 6pOmCOm+prY6qiBbbnf1zGCjzLIHPEX6FE5LXK37MGs=
Subject key identifier: 65:A0:3A:9D:6C:B6:48:2F:B3:8B:00:E3:9F:58:8D:20:8A:B5:7A:00
Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D
Certificate serial: 03F5
Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/0FB7DCDA321D11EF81C6FB83C4F9AE02.roa
Signing time: Mon 24 Jun 2024 11:29:47 +0000
ROA not before: Mon 24 Jun 2024 11:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400619
IP address blocks: 45.113.0.0/22 maxlen: 24
103.52.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1013 (0x3f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D
Validity
Not Before: Jun 24 11:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667958ab-80af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:6b:66:89:c5:87:47:8d:5e:15:b8:47:21:
0d:9a:ef:f2:41:3d:f7:9b:5a:97:13:a8:cf:99:5f:
ba:96:af:50:ec:e0:c3:d5:ac:2f:df:b3:2e:27:f6:
ab:dc:4a:f6:f3:19:3c:48:bd:5c:8d:48:da:cf:5c:
3f:e2:72:ad:7d:1f:8b:0a:8a:5a:8e:0f:e8:61:f9:
ab:87:e1:e9:37:b6:61:93:f4:f5:b2:52:78:ac:c5:
e4:4e:fd:ba:14:8c:97:65:27:e5:bd:1f:b2:d0:80:
de:b2:6e:34:8b:51:7a:40:52:fe:a4:81:e2:36:17:
4b:01:37:a8:b9:5b:35:5c:cb:a2:6e:7c:61:87:c9:
d2:33:e3:a0:dc:9c:7e:a1:a6:9c:07:59:60:95:64:
3b:a4:3b:28:51:38:d3:ef:ff:ca:42:d8:1d:81:a0:
58:27:76:95:d1:5b:99:a6:3d:22:53:3b:ab:f3:29:
d4:21:ff:9f:78:eb:52:7b:92:b4:d6:e7:a3:ab:43:
69:02:a6:27:5a:e7:64:c6:7d:b5:20:fe:a4:bd:33:
15:dd:42:da:1b:27:1a:02:e7:82:33:50:55:df:57:
c5:3f:e4:37:59:ca:bb:38:7f:93:4c:bf:63:84:27:
16:35:6a:46:43:64:64:17:c4:88:24:ce:71:69:75:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:3A:9D:6C:B6:48:2F:B3:8B:00:E3:9F:58:8D:20:8A:B5:7A:00
X509v3 Authority Key Identifier:
keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/0FB7DCDA321D11EF81C6FB83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.0.0/22
103.52.152.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:72:2d:e2:b1:d6:8a:98:89:35:22:87:86:53:91:f5:a5:7a:
52:f5:5c:11:14:e3:c5:fd:8b:77:0b:14:7b:52:11:a2:d3:74:
98:66:19:8d:4d:e1:7f:9d:fb:fa:bc:e2:aa:6a:f4:f7:74:9c:
97:c2:8c:ac:db:52:aa:c9:60:7b:f2:aa:cf:0d:35:c4:cf:4b:
11:cf:0c:49:77:59:e0:cd:35:75:e9:dd:a8:d8:f9:be:23:c1:
fb:ee:1a:ca:74:c6:70:b5:07:86:98:68:35:bf:2c:5e:72:3a:
e1:e7:d9:ce:68:b2:cc:c0:b8:5f:83:ec:74:5b:1f:5c:35:1e:
33:b8:db:78:ba:87:ac:ed:0f:9c:a5:1c:dc:46:60:11:74:30:
ef:0e:88:86:fd:fd:0e:a2:be:b3:50:59:de:2d:49:17:2d:8d:
5e:b2:e1:38:7b:19:f8:09:c8:44:5e:f4:c3:d9:0d:be:a7:0c:
63:42:9e:b4:cd:25:c3:9c:df:35:e2:fa:e5:e4:15:96:72:32:
03:31:84:e5:30:35:73:b6:2d:1a:e7:0a:d8:8d:3c:22:6e:fe:
ce:03:95:c0:2c:56:84:71:30:fd:04:0f:9e:83:a7:6c:ab:a4:
22:b2:07:44:48:10:43:91:69:59:2f:6c:0f:70:71:54:de:58:
80:b5:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:09 2025 by rpki-client