Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa
File: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (raw, json)
Hash identifier: R6PLCFd9UCoKqguuPPvWY1WhcuCHxy9fnxF0ShFGfBc=
Subject key identifier: 2F:80:A1:0E:9E:7B:5E:09:0C:29:F7:AE:C5:D3:F0:50:C3:9F:E6:84
Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Certificate serial: 52
Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa
Signing time: Sun 01 Dec 2024 05:48:18 +0000
ROA not before: Sun 01 Dec 2024 05:48:18 +0000
ROA not after: Sun 30 Mar 2025 00:00:00 +0000
asID: 9466
IP address blocks: 202.1.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Validity
Not Before: Dec 1 05:48:18 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=674bf8a2-9f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:14:8b:05:4f:f4:04:09:e0:80:b9:1d:21:
5f:e3:0a:44:7c:af:3e:3b:f9:5e:a3:d3:b4:c3:a8:
83:7e:32:9c:36:70:e7:61:97:08:07:50:ea:01:79:
f4:03:47:fb:7d:78:bf:a6:27:a9:4d:01:ef:6c:45:
e1:e0:b9:10:0f:9b:5b:5a:aa:01:2f:98:c2:5d:6f:
bd:cc:95:81:f0:cd:3e:08:e7:f5:03:b6:af:5b:94:
74:83:f9:06:b0:ee:85:a6:9c:66:51:e4:23:e4:7e:
e3:73:f1:63:12:c9:29:b5:e2:c6:9c:c1:e5:a6:02:
c2:dd:aa:12:6f:1f:5c:f6:d1:43:ed:d1:1e:60:dc:
05:9b:5f:48:ce:4e:f6:df:db:bf:d7:c1:0a:0d:ac:
56:05:0e:b7:62:bc:f3:02:05:44:6e:6e:25:a7:21:
8f:06:b8:90:d8:d8:68:0f:ec:5f:25:62:91:a4:fe:
1b:e5:60:a7:41:24:04:4d:27:3a:c1:b3:63:8d:f5:
13:6a:92:f4:51:05:26:ea:1c:eb:33:b7:c3:c5:18:
cb:68:76:29:93:02:1a:66:61:e8:8d:69:76:57:4a:
fe:78:b0:35:f5:af:f5:b7:42:85:75:18:16:9a:3d:
32:ac:de:ec:97:f7:47:b8:04:d5:f7:ad:a2:90:d3:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:A1:0E:9E:7B:5E:09:0C:29:F7:AE:C5:D3:F0:50:C3:9F:E6:84
X509v3 Authority Key Identifier:
keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.1.128.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:ec:f3:cc:5b:07:56:70:be:36:d5:5d:22:58:fd:70:8a:fa:
b3:76:d0:48:38:f5:72:04:7b:03:05:ff:04:2c:ac:33:0a:f0:
0c:a9:22:62:92:e9:c7:84:ff:6b:07:c9:d0:8e:d3:c2:97:15:
ef:b3:09:75:92:ca:c0:01:b4:c7:1e:3d:f2:12:66:e5:06:76:
c2:88:ff:0a:19:d6:54:e4:b1:1b:64:e3:64:9a:c5:5d:ee:4b:
3c:82:b2:cc:09:ca:c2:96:ad:b6:c8:d8:3f:c3:e2:bf:2f:61:
2e:1a:5e:76:c5:70:3b:79:99:22:91:7d:e6:c3:89:52:5d:1c:
03:4c:f6:1f:56:58:3e:13:36:54:6d:9e:96:06:af:7e:45:0f:
3c:2a:2f:a1:64:63:eb:b6:71:46:99:ea:93:ba:ac:df:4a:03:
70:47:cd:c0:42:d1:aa:03:b8:37:ca:fe:06:4e:55:18:5e:2b:
04:a8:f0:68:ec:b8:94:a2:8a:a6:67:73:2d:88:7d:b6:c9:fd:
04:8d:24:9e:48:04:02:40:0e:2f:7e:44:55:5b:83:e4:26:5f:
bb:0d:73:15:41:05:6a:9a:ea:83:4d:ff:a5:9d:3d:fd:bc:51:
b3:e9:9a:19:e7:1f:3e:e2:62:04:dc:79:66:67:fe:18:51:c2:
b8:90:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:51 2025 by rpki-client