Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CA822F60509111EF9E40402FC4F9AE02.roa
File: CA822F60509111EF9E40402FC4F9AE02.roa (raw, json)
Hash identifier: d8wJLaTSx3ug8YFfB0z4CkmRghIBNJLaDDYkc85OkIU=
Subject key identifier: A9:06:BB:52:4F:8F:A1:BD:2D:A2:85:87:83:54:F2:51:93:44:5A:E4
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0BAF
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CA822F60509111EF9E40402FC4F9AE02.roa
Signing time: Fri 24 Jan 2025 19:07:58 +0000
ROA not before: Fri 24 Jan 2025 19:07:58 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136908
IP address blocks: 27.111.17.0/24 maxlen: 24
117.121.230.0/24 maxlen: 24
117.121.236.0/24 maxlen: 24
117.121.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Validity
Not Before: Jan 24 19:07:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6793e50c-88a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:25:95:0d:2d:f2:98:21:9c:37:15:73:4a:
05:d9:e7:f8:1b:fb:b2:e9:76:6b:57:f4:fb:5f:1b:
87:d4:3d:51:3b:14:78:0d:aa:49:d8:a1:1a:4b:84:
da:f4:4c:5a:a1:9d:0e:bd:a4:19:a0:91:de:4c:4a:
90:94:82:f4:fc:23:3c:88:a9:56:10:bc:3b:a2:83:
c4:6a:a9:6f:df:02:33:29:4d:0c:02:cf:e0:11:66:
b1:d6:65:83:30:4d:73:8a:c8:97:1a:65:ab:bc:32:
d5:02:71:b2:54:a4:49:cc:c1:c1:15:df:75:60:57:
7d:43:79:d2:64:51:04:05:85:e0:c3:c3:9f:ac:82:
25:60:dc:a0:6d:df:be:9c:c3:0e:e7:c3:fe:b2:d8:
66:8e:b8:34:c6:17:39:1d:b6:ce:0a:8a:84:bc:eb:
29:a4:74:7a:5b:cf:63:77:48:b3:44:61:15:f4:9a:
22:41:ca:55:f6:fd:e3:1b:71:7f:7e:ba:1a:46:91:
ec:91:31:b1:c0:da:2a:73:a0:37:22:57:a0:74:d3:
67:72:11:6d:cf:69:69:91:8c:1d:79:be:8a:86:35:
39:25:01:cb:77:59:2c:a5:35:cc:32:36:cf:26:af:
d8:6a:5f:86:12:fb:64:ad:e5:8b:f6:b5:79:0f:0e:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:06:BB:52:4F:8F:A1:BD:2D:A2:85:87:83:54:F2:51:93:44:5A:E4
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CA822F60509111EF9E40402FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.17.0/24
117.121.230.0/24
117.121.236.0/24
117.121.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:99:2e:40:aa:f4:7b:c4:59:28:c4:db:49:27:29:2a:5e:a6:
2d:c6:7f:f2:7c:a4:a0:e4:01:be:5b:aa:29:2b:34:97:ac:93:
55:3d:87:06:51:af:a2:b7:da:4a:39:a5:10:7d:13:9c:5a:2c:
41:43:36:c8:f6:77:21:e4:8a:3c:34:7f:f5:f2:3c:98:df:7e:
97:1b:7f:a9:4e:5f:b4:b9:f2:0f:8f:33:41:66:5f:80:4e:28:
05:0f:df:06:ca:9e:72:4f:ae:57:80:49:9c:c3:96:93:30:dd:
8a:56:09:38:28:92:72:ae:ac:34:69:f4:d0:98:97:6d:24:97:
90:7a:a9:df:d7:f6:a4:d8:52:5b:50:11:a5:5d:1a:1c:f5:9f:
34:e2:84:af:b2:00:6f:27:ed:76:25:36:51:09:36:51:42:18:
47:b1:1a:5a:8e:0a:70:23:00:c8:eb:d3:fe:fd:80:c0:b7:6c:
80:3b:e6:d3:98:87:dd:08:fa:6a:2f:c2:38:47:d8:0b:0e:92:
a8:9b:18:ae:21:f3:ad:69:e8:57:7f:e1:7f:12:dc:22:5e:38:
9b:74:0b:de:06:58:42:2f:43:7b:3c:a2:3e:91:8f:6d:67:5b:
c0:bb:99:8b:da:03:ae:3b:87:31:b5:27:2a:88:e5:99:e9:02:
54:db:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:08 2025 by rpki-client