Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa
File: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (raw, json)
Hash identifier: Uc6IvGFV1iQCfhkRq/qlgRwPJG6xeOo9MbTiUR3zcfg=
Subject key identifier: 32:B4:85:3F:2E:85:D3:4C:BA:E6:D8:97:6A:2A:BD:56:31:79:F6:E5
Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Certificate serial: 02
Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa
Signing time: Mon 09 Sep 2024 19:15:25 +0000
ROA not before: Mon 09 Sep 2024 19:15:25 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 7545
IP address blocks: 61.68.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Validity
Not Before: Sep 9 19:15:25 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66df494c-f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:58:de:e6:a2:49:87:9d:77:c6:2e:e5:a9:
42:b9:71:8e:6d:b9:36:23:44:8a:6d:53:4b:fa:b1:
c3:d9:b8:53:99:71:28:5d:2c:d1:a8:88:8d:ec:4a:
cc:a6:3f:71:39:c6:cb:42:89:fc:b0:ce:41:35:92:
c3:de:2d:61:d5:b5:1b:82:f0:cc:6a:12:6b:ef:c0:
08:bd:d8:23:ad:ac:79:bb:2b:8f:a9:16:74:19:19:
35:14:bd:70:a6:27:f8:8f:21:ac:05:32:79:82:fa:
5f:a8:7b:31:80:d2:95:af:5c:cc:ba:16:10:7f:b6:
c7:14:29:96:e2:e2:af:66:c8:e7:81:db:95:d7:1f:
09:64:6b:5a:cd:b0:7b:55:54:eb:11:d9:6e:68:4a:
a0:a8:b4:69:62:36:c4:1c:8c:05:fa:b9:29:59:8b:
f3:8e:b8:18:87:61:0a:46:7b:b5:2c:00:50:be:d5:
f0:cc:8f:3a:e1:2d:6f:5e:74:03:43:25:19:4a:94:
60:49:07:ba:98:09:07:0f:1d:d7:2b:fe:64:33:19:
b9:e7:7e:e9:be:e3:58:66:61:5f:82:ad:bf:5a:e6:
47:01:fd:27:34:b8:e2:0c:b0:0f:e0:af:ad:8e:45:
52:bb:be:14:4f:ad:46:37:24:93:de:90:ac:69:ab:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:85:3F:2E:85:D3:4C:BA:E6:D8:97:6A:2A:BD:56:31:79:F6:E5
X509v3 Authority Key Identifier:
keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.68.16.0/21
Signature Algorithm: sha256WithRSAEncryption
80:15:8c:8b:96:6c:85:4d:e7:93:dc:34:7d:16:a1:f9:80:c2:
96:68:5d:04:1d:d4:4f:c0:36:31:fd:25:fb:1c:cc:2a:2a:96:
f2:df:64:10:dd:e4:07:cb:45:57:0d:3b:ed:54:67:4d:6e:c1:
80:18:37:87:8b:2f:50:25:3d:0c:89:a9:47:90:e3:47:f4:6a:
53:34:64:1d:95:40:ec:1a:ae:5a:75:5d:6c:d4:90:86:02:ef:
7e:22:26:5f:3f:ab:c1:44:6e:b9:41:19:9a:ef:d0:2a:e3:b6:
9c:3f:49:04:99:82:aa:e4:8d:d1:31:f7:ad:2c:4a:20:f2:0e:
64:dc:5b:dc:3e:63:a1:bd:c4:91:8f:6d:e7:fe:b4:49:8e:b0:
18:25:62:6c:75:73:b8:3f:37:9e:d3:ef:bb:42:b6:3c:5a:e9:
c7:bf:83:0c:44:5c:27:46:21:e6:35:8e:04:c3:99:38:20:ec:
95:12:aa:59:88:56:b9:40:ac:7e:0b:91:a2:78:60:88:22:ad:
17:64:e3:93:6f:52:86:f3:5a:aa:ee:e1:85:8e:c3:5a:a6:07:
a2:19:76:1d:c5:1d:02:4a:56:06:0f:2d:2d:4f:78:d6:d4:80:
32:b0:1f:5b:7a:72:f2:8b:3c:d2:61:b5:a8:41:d1:6e:a2:b9:
89:b7:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:37 2025 by rpki-client