Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/DC25866C6E6011EF830E7360C4F9AE02.roa
File: DC25866C6E6011EF830E7360C4F9AE02.roa (raw, json)
Hash identifier: OxiDT0SIFYyQoxxlhldZuYHR+pzMlUPJXfn9ZyBjWvM=
Subject key identifier: 61:A6:AD:57:2D:3B:E5:D4:47:E3:C3:8D:1D:41:0F:04:87:C8:6F:5F
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 0104
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/DC25866C6E6011EF830E7360C4F9AE02.roa
Signing time: Mon 09 Sep 2024 04:06:16 +0000
ROA not before: Mon 09 Sep 2024 04:06:16 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132876
IP address blocks: 87.124.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Sep 9 04:06:16 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66de7438-6a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:3b:16:fa:5c:e6:57:ec:ef:9d:0b:05:f1:
d5:9a:b6:0b:0c:9f:01:da:b3:20:e6:3f:cc:39:69:
db:00:01:2c:dd:1d:09:7a:1f:27:3f:0f:8f:d0:0b:
94:21:00:30:5b:c0:82:63:ea:5a:97:0f:6f:5b:0d:
6a:bc:18:f6:ad:a9:d4:51:4b:67:54:f7:a7:e6:3f:
aa:12:e3:e8:b5:33:51:f5:02:02:b1:5a:53:17:fb:
c1:7d:8b:b5:3a:0c:4d:69:61:65:c4:cc:e6:e7:bb:
d4:51:7b:31:81:93:5c:1d:0d:60:47:a3:f3:dc:fb:
8f:5c:a2:24:85:fc:09:4a:29:b2:43:0f:e8:6b:00:
a8:38:3f:ae:60:c3:af:67:49:e7:f3:78:30:12:c4:
c4:5a:e5:1a:9e:86:05:33:e7:8c:3d:82:9f:51:5f:
f5:fd:fa:ff:ed:cf:d8:99:f4:27:47:b6:74:51:a8:
9f:93:e3:03:22:0a:e1:99:5d:da:ef:95:22:45:fa:
fe:7d:0c:7a:f9:85:19:1a:b8:26:27:88:36:b5:b4:
68:ac:cc:7b:c4:ed:5b:5b:6c:64:bf:17:5b:9f:3a:
eb:c0:12:95:16:02:33:45:9a:0c:31:71:26:df:64:
ea:32:6b:eb:bc:6a:16:4e:f6:79:59:80:24:81:b7:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A6:AD:57:2D:3B:E5:D4:47:E3:C3:8D:1D:41:0F:04:87:C8:6F:5F
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/DC25866C6E6011EF830E7360C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
87.124.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:06:75:3a:1f:78:16:d5:21:92:7a:64:37:82:ca:87:29:29:
b4:ed:26:8d:71:df:0e:b1:ea:f8:92:22:90:e9:3c:5e:76:5c:
fb:8f:ca:88:b2:91:2e:65:03:45:33:77:18:d4:97:a6:2c:c0:
82:76:3e:3c:38:d7:bd:54:1d:fd:53:1d:2e:c6:47:ce:5c:c7:
de:eb:0e:d1:89:25:14:e7:c8:03:c4:54:79:ff:24:68:a8:eb:
fb:63:a2:88:46:35:0d:b2:88:3e:cf:0a:cf:6c:d5:2a:f6:08:
e7:45:d1:dc:62:32:20:45:23:d8:e2:12:20:a5:90:e2:ab:65:
36:49:e5:a6:4c:5d:24:9c:99:a0:c9:74:b7:ce:24:90:76:74:
42:e4:84:93:f9:5f:f4:f3:7e:dd:bc:6c:7a:fd:39:89:9a:68:
50:1f:b4:01:c2:96:00:aa:96:f2:66:b2:9d:4b:11:30:9d:eb:
65:24:72:26:7a:b0:f5:38:03:62:bc:f4:2e:b7:cb:86:76:26:
1c:ca:86:4b:4a:85:22:5e:0a:90:71:36:0d:ff:98:d8:d8:f0:
77:b2:41:f3:fd:2c:59:a7:39:f7:38:fe:2e:55:6b:e6:af:1e:
cb:5f:43:7a:d1:1e:ce:67:d5:34:56:25:34:90:d1:f8:06:f3:
d3:13:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:20:52 2025 by rpki-client