Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa
File: 1501E24625F511EF8F342F3EC4F9AE02.roa (raw, json)
Hash identifier: xb5pYUXWejftZcnwxhpgprfBYw1l18qZhykhwAV8tW4=
Subject key identifier: 68:27:8E:6F:DB:91:62:87:C7:81:FB:06:C4:5B:1A:72:96:FE:A6:BF
Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Certificate serial: 44
Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa
Signing time: Fri 11 Oct 2024 01:48:47 +0000
ROA not before: Fri 11 Oct 2024 01:48:47 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136433
IP address blocks: 202.61.110.0/24 maxlen: 24
2001:df4:4a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Validity
Not Before: Oct 11 01:48:47 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=670883fe-05ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:b7:f0:4c:ff:55:15:12:0d:72:f5:9c:99:
0f:71:3a:84:55:4d:2b:be:26:d8:09:ff:72:54:26:
25:70:9d:c1:e3:72:1e:a0:d3:a2:e0:ad:11:af:67:
29:7c:1b:e2:5d:08:19:74:54:13:d5:ae:40:24:63:
48:d2:21:6e:0b:27:5b:46:2d:7b:f7:53:08:64:d6:
63:b3:8a:42:79:8c:1f:77:a2:69:d0:42:a3:96:2f:
02:66:33:f2:2e:f2:a0:9c:5a:fd:c7:e0:c0:7d:30:
b2:d7:8a:2b:48:21:fd:1b:92:a6:65:06:19:3a:d5:
4b:38:7a:93:b9:a9:20:60:ed:71:3a:b2:22:39:43:
5d:a1:59:bd:ac:04:53:11:f5:3c:d1:56:1d:e1:18:
c2:c9:ef:71:3a:12:6a:1f:7b:83:23:c5:6d:74:81:
e9:cc:ce:e7:e2:bc:ed:d2:2d:9d:0f:5a:94:d9:be:
f5:6c:3b:39:12:7d:a2:01:91:a7:fc:02:a0:57:6d:
1c:50:4c:33:89:a3:b8:4f:af:b2:cc:43:dc:45:f3:
e4:8b:d4:4e:59:8b:7b:ed:e0:9a:80:32:e5:7b:e3:
d8:62:ce:e4:5d:d7:1b:72:14:42:c1:d8:5b:ec:14:
9e:63:fb:ef:fb:d4:47:6e:56:01:b9:44:b2:c2:93:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:27:8E:6F:DB:91:62:87:C7:81:FB:06:C4:5B:1A:72:96:FE:A6:BF
X509v3 Authority Key Identifier:
keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.61.110.0/24
IPv6:
2001:df4:4a40::/48
Signature Algorithm: sha256WithRSAEncryption
4c:a0:bd:da:da:40:ba:00:93:f2:6b:83:b0:46:ce:48:e2:92:
3e:33:71:ba:94:01:11:b1:a3:18:9b:c3:01:61:bd:db:94:6b:
59:26:38:ed:2a:ec:20:00:50:18:1a:e0:a7:d4:4a:86:b9:80:
01:66:72:8a:f8:f4:03:0b:5e:f4:55:94:84:03:44:02:7c:bd:
0d:00:74:53:dd:40:98:92:bd:8e:ac:93:cb:9e:a7:04:c2:67:
a9:26:45:3e:e1:6b:7f:98:28:05:bc:69:ce:60:1b:fb:c3:c9:
dd:56:b4:f2:8d:65:dd:b3:6e:fe:ff:1b:7b:ff:66:ee:3e:c3:
29:a6:66:79:8d:18:af:0d:89:0e:8d:c7:ab:e8:98:1b:65:e0:
3f:58:ee:b8:87:75:d3:e0:f5:a2:4e:a8:18:2b:7d:8c:3f:d0:
b0:35:5c:8b:38:b1:eb:a9:ed:7d:31:e5:15:31:af:7c:11:99:
7e:9c:a6:62:1a:ca:f1:47:bb:e0:dd:30:ba:09:70:c4:95:85:
c6:2d:cb:c8:01:04:a9:df:6b:15:e3:44:34:f1:85:8b:37:83:
72:c4:31:37:bc:5e:b8:1a:26:3b:ba:00:c0:91:a7:5c:16:61:
22:4d:1e:81:ad:db:2d:8a:3a:71:2b:86:56:44:79:3e:86:a3:
7c:ef:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:10 2025 by rpki-client