Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa
File: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (raw, json)
Hash identifier: mzAk5eL4IGUo+tvpwph+xkBOZwjkkBX0culygkem9JQ=
Subject key identifier: B6:AC:11:DD:7A:AF:36:4C:86:AA:25:F1:2A:9A:3B:87:03:39:66:21
Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Certificate serial: 0106
Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa
Signing time: Sun 18 Aug 2024 23:02:11 +0000
ROA not before: Sun 18 Aug 2024 23:02:11 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 38079
IP address blocks: 210.48.176.0/24 maxlen: 24
210.48.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Validity
Not Before: Aug 18 23:02:11 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66c27d73-6e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:bd:55:b2:43:b0:9f:39:ec:86:33:39:24:
16:66:41:e9:3c:81:79:69:e4:53:e8:12:76:36:20:
4b:b2:4d:25:82:32:99:cf:21:f8:8b:10:7f:2e:f3:
bb:57:48:7e:dc:a6:d0:92:2a:0b:f9:5c:cd:11:1f:
d2:13:33:4e:86:b0:62:03:f6:3f:73:10:72:05:cf:
9d:a5:d7:06:83:e5:97:f4:6d:85:6f:f6:b9:cd:7b:
b2:1a:90:bb:44:08:16:0d:f6:92:08:17:81:bb:1e:
29:5e:e2:44:63:1a:18:ae:97:8e:fd:fb:45:21:bd:
a7:ab:18:17:cc:c3:2e:68:fa:32:ef:49:fa:41:df:
64:13:64:4e:fb:9c:5e:e9:f8:b2:ce:da:61:c8:5e:
1d:f1:22:e4:ac:0d:7a:90:c5:d7:ff:b2:a1:d2:60:
de:b7:37:3b:12:f1:fd:f5:5e:83:b1:9a:b3:79:6a:
7b:c5:18:29:cf:d9:6c:d3:5f:8c:27:68:15:aa:1e:
86:b1:db:74:c0:b5:4f:ad:8e:a7:18:f0:c3:f1:b1:
22:88:a5:17:47:d3:eb:5c:7d:a3:4c:8d:f7:e7:a5:
7e:61:5a:9d:84:aa:f6:1d:bc:57:71:0f:48:2d:ad:
45:24:54:1d:7a:50:90:01:de:3f:d3:5f:be:ac:e8:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:11:DD:7A:AF:36:4C:86:AA:25:F1:2A:9A:3B:87:03:39:66:21
X509v3 Authority Key Identifier:
keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.48.176.0/24
210.48.178.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0d:3d:94:2f:5c:ff:3e:f4:cd:e4:05:09:fa:c3:1d:52:64:
a4:89:f9:d3:4b:3f:4c:aa:da:7f:bb:53:24:21:40:d2:80:af:
3c:a5:31:cb:9d:e3:4d:d3:1e:b0:c6:eb:26:3f:13:48:b3:8a:
b0:6c:f9:a8:35:c1:3b:bd:70:38:c5:52:a4:fe:2c:a8:07:da:
57:3f:25:83:9a:f7:c2:c4:64:6f:4f:ee:75:57:69:b0:f2:62:
0c:24:74:0f:27:22:af:26:8f:66:ac:84:e9:85:08:fb:e4:95:
80:f6:80:6f:b1:ac:a7:eb:7a:72:4d:1d:e5:b9:93:36:c7:2b:
08:a6:45:8c:76:f2:b4:0e:0c:b7:2e:f0:79:ec:ca:7e:e9:82:
ab:31:2a:bc:28:59:f9:57:86:1a:fc:40:a1:17:93:39:f4:d8:
b3:5e:00:ec:cd:3d:ea:bb:36:23:ff:5f:fc:63:55:f7:ed:43:
fe:49:bc:08:09:94:98:fb:b4:31:a2:97:38:b3:b6:84:ce:c6:
e5:43:77:0e:34:94:a5:fe:b1:5e:13:5c:6b:91:31:b6:50:08:
dc:db:af:ec:f9:f1:5f:2d:2d:17:c6:4a:4d:a0:c9:f2:7e:f5:
76:72:fe:9e:1f:3a:10:be:9c:f0:08:d0:10:3a:82:77:1a:78:
09:d5:4f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:18:18 2025 by rpki-client