Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa
File: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (raw, json)
Hash identifier: F+k1pgKAm7HpOhKtY5/4J+QSbulAvGQUTiDf7IqkyBg=
Subject key identifier: 36:80:1F:90:55:82:CE:AF:FD:3F:A6:89:87:F6:C7:1F:A8:E3:8B:2D
Certificate issuer: /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Certificate serial: 0501
Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa
Signing time: Fri 13 Sep 2024 02:13:50 +0000
ROA not before: Fri 13 Sep 2024 02:13:50 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 14340
IP address blocks: 101.53.160.0/19 maxlen: 24
182.50.76.0/22 maxlen: 24
202.129.242.0/23 maxlen: 24
2401:ce80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Validity
Not Before: Sep 13 02:13:50 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66e39fde-1767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:e6:9b:25:b7:2a:a1:51:11:8d:29:34:97:
3d:96:e7:27:92:30:ca:81:3e:30:4c:80:cb:39:47:
5f:1b:48:3b:5f:90:b6:19:ce:47:a8:f6:1a:0f:58:
db:84:e8:4e:a1:90:48:f8:d3:2b:ba:bf:4e:dd:26:
ee:71:71:17:9d:92:3b:af:37:ca:26:86:3f:5b:85:
d5:c3:f9:a7:be:c3:c3:cc:b7:25:c5:18:4a:1c:86:
8e:50:07:84:5a:63:25:23:f3:60:42:0e:a7:aa:30:
f7:a9:6e:e8:93:f4:11:ca:a2:d3:ca:61:bb:d5:26:
ed:8d:8b:5f:ba:43:cf:cc:80:6c:25:6e:f0:d6:bf:
09:7f:65:75:5a:69:22:05:bf:30:61:d5:04:e7:57:
e2:e0:64:01:93:64:59:58:df:47:ec:08:70:42:ce:
06:da:23:a2:e9:b5:ef:0a:ee:31:d5:4d:07:9c:cc:
c3:24:83:50:de:0e:f3:ea:de:3f:4b:47:9b:e8:a9:
3c:2d:fc:59:ad:bc:34:96:f3:98:55:7e:4d:7f:f8:
27:3a:53:17:48:1d:4f:de:23:80:ff:54:95:b9:d7:
78:99:54:fe:56:3e:58:b1:10:f7:81:4b:f5:b1:ea:
36:8c:f4:8f:56:80:97:e1:a9:0a:7a:af:3c:3e:f2:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:80:1F:90:55:82:CE:AF:FD:3F:A6:89:87:F6:C7:1F:A8:E3:8B:2D
X509v3 Authority Key Identifier:
keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.53.160.0/19
182.50.76.0/22
202.129.242.0/23
IPv6:
2401:ce80::/32
Signature Algorithm: sha256WithRSAEncryption
46:5e:83:fc:43:b8:04:fd:b8:61:45:ae:b7:8b:d0:51:19:8c:
73:60:31:5c:05:da:62:4a:2c:c7:34:5e:65:c8:16:55:60:38:
1e:de:15:a5:78:b0:e5:b9:16:e8:20:b2:da:aa:e5:58:75:60:
72:ac:31:9f:b8:f9:a3:4f:b2:f8:20:51:2e:57:db:6a:26:0c:
43:ef:2e:1f:3b:bf:aa:77:c9:45:73:46:bb:8b:96:fe:19:50:
f9:b4:e7:74:bc:90:1e:f5:48:02:bd:a9:ec:cb:33:18:93:9b:
a0:fe:3d:58:a8:eb:93:91:33:be:fe:70:87:87:d2:09:df:26:
28:07:0f:ff:c3:6c:9c:2f:e1:1c:c6:57:f9:71:9a:0a:fb:46:
59:52:85:9b:26:c8:b6:91:20:b3:91:10:f6:9e:06:6b:f3:ba:
0a:a2:a3:5d:5b:35:e7:d7:cb:85:79:ab:88:aa:6a:91:92:5e:
4a:13:22:53:8c:e4:aa:c7:b3:45:e3:0d:ab:6c:74:94:e9:04:
a5:fd:b8:e4:db:32:bb:7d:f3:2d:d9:0f:08:6c:10:2f:9c:a4:
44:a0:02:3a:86:18:22:19:4b:44:71:7d:69:6d:3c:1f:b7:b0:
be:c5:8f:05:30:35:fa:fb:78:06:54:39:b3:c8:5a:f9:95:cf:
ec:5d:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:00 2025 by rpki-client