Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
File: 810DCA288C6511EF813EB90EC4F9AE02.roa (raw, json)
Hash identifier: uXjCh7TkzA4xr6P8TlTEkjQ53fF7fy/5V3MP61ICuDM=
Subject key identifier: BB:BB:4D:FE:39:49:FD:D5:A5:59:59:3A:D7:3B:AC:31:B1:87:CA:A1
Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial: 0221
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
Signing time: Thu 17 Oct 2024 08:55:06 +0000
ROA not before: Thu 17 Oct 2024 08:55:06 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 150774
IP address blocks: 45.117.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Validity
Not Before: Oct 17 08:55:06 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6710d0e9-970b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:e2:56:47:85:b9:0a:c8:68:91:18:a1:88:
c6:68:15:dd:ef:55:9b:d4:6d:08:47:9a:e3:89:fe:
c8:09:88:31:21:4b:09:7f:a5:72:bc:55:d8:32:7d:
30:06:69:e4:12:6f:ab:3f:cd:2c:8e:e4:c9:c1:37:
76:a9:0a:d0:5e:e8:5c:db:c6:57:f2:93:86:b2:2d:
57:22:63:14:fc:78:b4:2a:ba:d1:8a:2c:6a:06:b1:
35:eb:89:35:57:4a:96:58:3e:19:99:8e:ac:d9:b2:
58:b3:03:58:b0:a5:24:3c:26:86:b8:04:02:db:7e:
5d:a4:a5:08:da:32:b0:26:43:4d:5c:6d:00:af:37:
3c:28:ed:c9:6d:3b:bc:8a:46:23:6f:f8:df:fe:28:
b9:37:af:1c:62:0c:de:46:39:1c:d5:0e:bc:13:3b:
48:cc:66:98:5f:43:64:12:27:f7:f9:d1:96:07:6e:
3d:84:3b:15:f3:f7:37:7a:2c:1e:11:25:93:07:37:
a5:76:46:de:f8:8e:8a:db:4e:5a:22:4d:0c:66:59:
70:b1:2c:a5:fd:55:98:f8:f6:a0:c6:d6:9b:80:de:
b8:42:a6:de:14:1e:74:47:5b:5d:a4:18:cc:2a:d3:
1e:e8:13:eb:50:88:6b:a9:7e:a3:c6:d9:03:fb:ae:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:4D:FE:39:49:FD:D5:A5:59:59:3A:D7:3B:AC:31:B1:87:CA:A1
X509v3 Authority Key Identifier:
keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.61.0/24
Signature Algorithm: sha256WithRSAEncryption
82:45:7d:a5:cf:2f:49:7c:87:ca:81:c7:04:81:eb:2e:a5:1b:
81:b1:36:d7:b0:59:fe:90:8b:98:16:a0:19:19:44:31:ff:06:
98:c8:6b:b3:c7:ec:63:61:20:65:f2:75:3a:ea:ae:27:a7:18:
34:7b:dd:a0:ca:e5:4b:7a:13:3a:c3:a8:0a:7c:df:cf:d7:35:
c4:b8:e9:ac:bb:f2:ac:55:de:d6:39:52:dc:d3:8b:b9:8b:3a:
3f:3d:a8:ac:84:7a:28:2a:cc:77:33:7b:da:ba:2a:9c:a3:75:
6f:7e:c3:1a:f9:26:0a:98:b9:2a:d3:d0:61:99:bd:01:74:df:
da:f2:d2:34:cf:d3:c8:7b:e5:ed:44:f5:6d:c7:92:9d:6d:de:
42:ba:27:9e:a4:28:bb:20:3f:e7:ca:91:e2:2f:67:46:19:f8:
62:ab:4f:df:7a:58:21:32:05:3b:c8:5a:e4:69:7d:7a:0a:82:
a8:a7:d3:d3:d9:7c:d6:9d:31:de:5a:1e:f9:29:a1:d7:e0:74:
19:d4:03:50:89:ca:9a:4e:50:f3:c8:ad:39:b7:13:1e:91:f0:
0d:0a:df:74:6e:c5:5f:11:11:eb:dd:37:30:93:dc:14:63:b6:
36:90:b7:ef:62:34:e8:25:a6:9f:97:bf:9f:78:21:60:3f:a7:
82:a1:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:47:33 2025 by rpki-client