Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa
File: 6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (raw, json)
Hash identifier: 5EuaV2pKmfgRERw28f/5Lxl1VQWoTEyn2eDoW1PwmPM=
Subject key identifier: 2A:C5:CC:C0:96:8D:30:2A:09:BF:66:B6:E3:E7:04:7E:51:8A:6C:31
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 0138
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa
Signing time: Thu 28 Nov 2024 14:31:12 +0000
ROA not before: Thu 28 Nov 2024 14:31:12 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 150300
IP address blocks: 87.124.91.0/24 maxlen: 24
87.124.92.0/24 maxlen: 24
87.124.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Nov 28 14:31:12 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67487eaf-eb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:c0:18:dc:c1:8c:cd:23:37:68:0f:31:09:
ec:8a:e9:1d:90:d3:24:e1:b8:f3:31:61:7d:bf:c1:
be:a5:d3:9c:25:2f:43:d5:f7:c6:2e:6b:5e:d3:c0:
c4:f4:84:7d:3f:39:96:ce:b9:fe:c6:9e:28:32:fd:
b7:ad:6e:2c:00:c2:d5:ec:f3:8f:6d:57:5e:79:50:
39:1e:4f:94:63:bf:03:cf:6b:cd:a5:3e:4a:e5:a4:
62:6b:a9:21:f6:b2:04:1f:cd:05:07:28:69:65:10:
bd:e5:a0:e2:21:e6:c0:f9:f6:82:ff:22:db:ee:7f:
58:02:c5:20:d6:ee:a3:8a:de:cb:f8:88:af:51:94:
b5:11:89:4a:22:b6:3e:08:3d:4b:09:48:d7:86:c0:
dd:95:32:a1:09:26:ce:d7:79:40:77:66:b3:11:3d:
ba:c3:f9:b9:17:9d:c5:f8:80:ed:62:c3:ad:65:9b:
5a:f1:05:bb:6f:36:02:37:d4:8c:2f:e3:3d:67:e2:
d3:69:8c:8d:09:88:74:67:04:4e:b0:44:63:e5:61:
25:f2:53:40:8d:f8:52:ee:88:8a:7a:46:ed:d9:e1:
75:dd:70:00:79:27:54:81:4a:96:d1:cc:3a:5d:ce:
8c:e4:ef:17:ce:08:e4:44:15:ec:59:95:56:e6:36:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:CC:C0:96:8D:30:2A:09:BF:66:B6:E3:E7:04:7E:51:8A:6C:31
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
87.124.91.0-87.124.93.255
Signature Algorithm: sha256WithRSAEncryption
10:f5:28:10:a9:16:88:76:a4:10:29:63:86:99:b2:12:a4:c2:
ec:ae:51:c3:cc:e7:45:1a:2f:79:53:ab:7f:1f:80:cc:74:ff:
d5:f1:f5:1b:59:57:fb:4a:df:94:e6:82:58:2f:68:10:bd:ef:
10:f0:3b:50:3b:2f:37:ad:1f:4f:bc:e2:97:ca:a1:69:ed:72:
9a:dd:78:81:09:ad:1e:7c:7e:fe:cc:50:52:e6:64:ce:c0:9a:
32:ac:44:7e:3a:24:5c:99:fb:b7:4a:ac:87:33:4a:b9:32:38:
d7:4e:16:e7:64:1e:5f:02:47:ce:cd:40:ad:24:1e:89:4e:ad:
70:5c:62:f4:ef:21:bf:b5:3b:20:43:92:c7:fd:90:92:ce:39:
d2:87:13:68:17:08:9f:8f:0e:77:79:a3:72:e0:a9:7b:0a:0a:
2c:35:2b:50:f8:f9:22:d2:2c:c3:52:04:27:a9:e3:bb:cd:67:
cc:93:ca:8f:ee:ba:de:50:94:84:2a:a2:a4:0f:7f:34:2e:c3:
ca:17:2c:bd:d6:6f:83:a4:63:1f:1a:5a:e0:2c:b7:0c:a5:4c:
1e:c3:b9:26:63:48:a1:0b:6b:7a:b7:b3:84:cb:51:df:19:87:
4a:c6:8b:52:20:bc:53:72:f4:8c:6d:39:fa:c8:53:fa:58:f5:
7f:a8:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:51:52 2025 by rpki-client