Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
File: C14680A887BF11EF8804736AC4F9AE02.roa (raw, json)
Hash identifier: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=
Subject key identifier: 21:66:53:79:B3:9F:D5:09:CA:ED:5F:C6:1B:0D:6D:8C:95:B3:50:DC
Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Certificate serial: 2E
Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
Signing time: Sat 21 Dec 2024 06:20:17 +0000
ROA not before: Sat 21 Dec 2024 06:20:17 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152144
IP address blocks: 210.87.106.0/24 maxlen: 24
210.87.107.0/24 maxlen: 24
2401:5760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Validity
Not Before: Dec 21 06:20:17 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67665e21-485d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:27:99:26:22:ea:e5:a4:8a:15:eb:7c:a9:00:
8a:dc:79:45:13:5c:03:48:0a:35:62:ad:8b:56:59:
c2:43:20:a5:a0:1b:eb:3f:c5:78:18:06:6d:8e:86:
c9:52:e7:4a:17:f3:a7:7a:2c:27:eb:d5:15:44:9d:
73:ce:90:44:5f:61:67:04:32:e0:02:b8:c5:06:dd:
5b:1e:6a:d3:09:0e:38:72:8d:8f:7e:f7:ec:88:9d:
1c:b2:17:d9:e4:a0:96:f4:9f:f2:c5:7d:fe:3a:5d:
dc:0a:d3:37:71:a4:50:8c:5e:cc:2f:8a:2f:fe:09:
b8:bc:e4:e3:66:0f:c2:7f:bc:78:b5:00:f0:20:5f:
f2:3f:e9:df:58:0a:c3:dc:d5:bd:19:ad:d6:45:fb:
b6:b7:1b:cb:e8:ff:ad:e6:a5:a5:06:de:0b:e6:e1:
62:c2:a9:40:96:ca:94:94:a4:e0:1e:92:c3:ba:0f:
ac:b8:60:99:f9:fe:f3:3d:d6:16:83:7c:0a:d2:db:
ad:19:ae:8d:90:fe:a2:91:9c:16:02:29:95:5c:22:
ea:6a:6c:70:90:43:de:ce:ca:56:10:26:89:33:ca:
ef:5f:b9:65:3d:60:05:b8:f4:00:ac:21:12:ed:b2:
ca:8b:d0:9c:3e:45:72:f3:1b:91:16:10:6d:bb:6a:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:66:53:79:B3:9F:D5:09:CA:ED:5F:C6:1B:0D:6D:8C:95:B3:50:DC
X509v3 Authority Key Identifier:
keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.106.0/23
IPv6:
2401:5760::/32
Signature Algorithm: sha256WithRSAEncryption
0e:a8:8c:fb:b9:c3:54:78:31:0f:ec:ad:f8:af:81:d8:c6:fe:
86:80:83:3f:12:b4:5f:87:a2:31:4f:bc:bb:1f:ae:fb:72:09:
3f:20:5c:4b:d7:bc:f0:20:28:fd:73:0a:55:47:e2:8d:00:56:
53:34:2a:de:f6:46:04:1c:76:3f:4d:3c:e1:04:43:97:8b:47:
c8:58:08:9d:c2:3a:58:f9:43:c8:c9:bf:d9:59:0e:b5:ad:19:
c1:94:a5:a6:43:e5:cd:3f:94:02:1b:69:e1:a6:82:ca:11:03:
d3:73:e2:c1:81:dd:cb:f7:60:56:7f:ec:bb:91:1d:1b:13:c5:
42:9b:d6:10:c9:45:e2:0e:38:d8:a0:c9:56:83:f7:85:0c:75:
23:a4:60:7d:7d:b2:bd:4d:1a:1d:1e:7c:9e:20:63:1e:d5:e1:
17:12:9f:15:e2:83:c3:99:c3:c8:71:92:53:d8:70:be:22:19:
78:fb:01:4f:79:c8:39:5e:2a:ac:29:d8:78:b1:2d:9c:38:34:
c4:b1:a6:23:59:24:c7:05:a4:2d:ad:a3:61:ab:9d:7b:f1:e3:
fc:be:ec:4f:98:7c:25:09:4c:f3:32:be:4b:e3:c3:a9:81:a3:
3d:72:2f:0f:e6:80:30:d3:c3:1a:7f:6c:0e:1b:21:bb:6a:92:
62:f5:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:43 2025 by rpki-client