Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/41623A12778111ED8F236A62C4F9AE02.roa
File: 41623A12778111ED8F236A62C4F9AE02.roa (raw, json)
Hash identifier: TaxImBm3ML6L93bSf7LgCo2dDuHN+GnT1SSfjdrYDbs=
Subject key identifier: A7:87:CD:7B:AA:8A:2C:8C:51:A0:37:79:55:79:96:DB:78:B9:8A:CE
Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial: 339B
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/41623A12778111ED8F236A62C4F9AE02.roa
Signing time: Fri 16 Feb 2024 15:41:09 +0000
ROA not before: Fri 16 Feb 2024 15:41:09 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 394695
IP address blocks: 45.113.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13211 (0x339b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Validity
Not Before: Feb 16 15:41:09 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65cf8215-1e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:ac:4c:d1:e3:81:e3:82:78:57:f9:1f:92:
f5:f4:77:9d:2f:64:ba:94:0d:ac:5e:f6:78:e2:ca:
16:09:a3:9b:73:ca:73:a9:da:62:45:9e:9d:a3:c5:
14:e2:e5:f1:af:0e:6f:42:bc:8b:e2:8f:ff:be:80:
af:ef:f6:95:8c:d8:f2:d4:2f:04:4b:bf:1f:f1:d1:
36:aa:1b:8a:32:6e:d6:50:36:4e:fc:b2:bf:e0:d3:
d1:ce:52:a9:01:15:cf:0c:75:de:4e:a2:73:9d:ed:
bc:f9:e7:3f:69:91:42:66:f0:92:fc:99:78:31:f8:
00:9f:ee:6c:f8:9f:f8:ef:24:88:8d:a6:8a:27:c0:
a1:d4:47:43:cf:ba:e0:e9:73:ed:b1:f6:ec:31:11:
88:34:40:f2:6f:ea:18:80:e0:a4:59:55:b0:af:d4:
88:7f:dd:aa:f1:ba:8e:60:ff:c0:66:63:61:64:96:
8a:3b:6b:d2:64:ea:96:2d:6f:b2:06:9f:d8:5d:b1:
23:bc:f1:a4:85:19:cc:21:b2:0c:da:b8:47:49:8f:
a9:53:9f:f9:6e:51:6e:1f:3d:4e:3b:40:c8:68:b2:
0e:fe:25:60:25:71:4b:93:f9:38:ac:b6:26:c6:18:
f6:c8:da:7d:3f:22:96:31:cd:39:7d:48:ad:b9:9d:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:CD:7B:AA:8A:2C:8C:51:A0:37:79:55:79:96:DB:78:B9:8A:CE
X509v3 Authority Key Identifier:
keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/41623A12778111ED8F236A62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c3:bb:83:f0:67:6c:6c:2c:47:f7:8a:b6:26:73:5d:27:63:
8e:21:37:59:23:f2:0a:84:1d:65:bd:e0:4d:e4:05:b8:55:ad:
72:89:a6:72:0e:eb:da:e0:b8:14:76:30:61:25:c4:30:08:16:
db:2a:57:2c:e1:c3:77:ea:5c:18:10:75:c4:8f:ed:d3:e6:45:
c4:9b:ed:f9:cf:5f:c6:92:6d:e7:ef:e3:93:66:56:16:16:7e:
5c:30:16:64:cd:ad:10:2f:e4:34:1b:31:fa:0d:6f:0a:36:74:
35:ec:64:e8:bb:80:06:02:bd:75:f6:bd:e9:2c:1b:8e:7a:42:
1a:a8:ea:46:df:d5:85:28:bc:4a:23:16:f2:f8:eb:88:5a:11:
d0:b7:58:1d:a6:e2:d1:6f:b7:6c:0b:62:e2:b4:44:ce:2a:02:
b6:07:ea:b6:ca:8e:52:fa:6b:24:3d:ee:66:4a:dd:33:08:d7:
6d:a0:81:eb:ce:0a:43:80:b1:ff:7e:be:89:e1:4e:7c:48:54:
38:3c:63:71:2f:ea:bd:e2:80:3b:5f:da:fa:5f:dd:82:57:9f:
a0:14:6a:23:fc:58:65:94:52:ac:9b:0e:e8:23:bf:c1:29:93:
7a:51:77:37:e2:04:56:68:c7:e2:a2:82:3a:5d:eb:18:de:71:
d2:83:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:34 2025 by rpki-client