Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa
File: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (raw, json)
Hash identifier: 0GmwzEvjQkpIQOKVrUCegjL2exFdSiExkQmTbC5jqtM=
Subject key identifier: C5:9C:33:CC:6C:7A:F4:9D:72:F2:9D:79:A3:78:A1:AB:7F:87:80:A1
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 5B
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa
Signing time: Wed 13 Mar 2024 06:39:19 +0000
ROA not before: Wed 13 Mar 2024 06:39:19 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 16509
IP address blocks: 192.245.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Mar 13 06:39:19 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f14a17-0661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:c5:09:a4:9a:2c:29:9a:10:2b:8d:04:e8:
00:34:e3:a4:9c:fd:ff:4c:88:ba:72:06:65:b0:90:
57:38:aa:21:49:7d:1a:1c:a2:d4:34:cf:9b:21:6d:
c8:fe:25:bf:c2:3b:a0:a7:63:c5:60:b4:c1:30:9e:
18:13:ab:ed:fb:04:14:10:f1:8b:d1:33:85:0a:7f:
9f:56:a3:4d:b6:48:ab:7e:3a:f5:07:ca:25:f2:1b:
03:90:b4:05:39:50:24:18:f6:c8:15:90:cf:d3:9c:
6a:76:ad:3a:8d:fa:19:f0:92:00:bb:ac:ae:2d:20:
b0:5a:de:10:ed:31:5c:d1:94:b5:fa:40:8c:c4:5c:
23:1a:35:b6:00:1d:53:7a:cb:f0:37:a5:83:f1:84:
34:81:b9:c7:5b:30:c6:74:55:29:0c:1a:45:c7:f3:
1d:5b:84:3b:3d:2a:79:33:7e:55:26:e8:6d:cb:76:
fe:e8:a9:64:06:d3:2d:89:96:bd:20:39:6a:2d:af:
d7:f7:49:10:52:b9:94:3c:87:38:02:51:d7:d8:97:
f4:21:51:07:77:f0:39:06:81:c6:93:c4:72:56:dd:
92:92:ff:01:56:89:1a:67:f9:8d:3b:5c:c1:bc:b0:
0e:8e:01:03:5c:1e:5e:5f:a9:22:db:b3:b4:7c:f9:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:33:CC:6C:7A:F4:9D:72:F2:9D:79:A3:78:A1:AB:7F:87:80:A1
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.245.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c9:25:7b:18:75:9a:12:ce:aa:35:e1:d2:4f:19:93:d4:7e:
e2:11:f7:38:ef:f3:e1:32:d9:92:67:5d:71:71:9e:a2:fa:d7:
b2:e9:e9:b1:11:06:7c:c7:9f:76:fc:44:53:30:f9:38:67:62:
d9:81:bd:0d:66:b2:b6:ef:89:75:7b:a9:ed:5b:d2:5b:2a:dd:
9d:2f:4d:74:09:15:6b:11:7f:a6:5b:c7:12:b9:97:1a:65:f9:
57:5f:ff:bb:32:2c:0c:e1:5c:9d:d9:e0:d6:e9:d8:65:3a:72:
e1:4c:06:36:00:4c:2a:ae:63:49:3c:8e:9d:62:31:b5:46:dd:
13:af:8c:53:69:60:91:28:5b:43:97:8a:a4:4f:67:39:85:c0:
70:56:9e:fe:e3:9f:59:f1:e6:f5:60:4b:e9:b9:ae:0c:60:d2:
95:dd:55:9f:06:6b:74:60:8d:e7:bb:d2:aa:39:e2:90:9c:6c:
27:71:80:4d:c2:f1:db:f7:7a:67:f8:f2:ea:2c:dc:c3:06:6a:
fa:73:80:b8:ae:52:70:01:03:60:3c:00:b9:dd:ef:e4:1b:04:
18:ea:57:30:c1:22:cd:c8:ec:60:6e:61:b6:6c:b2:2c:c3:0d:
ff:96:be:49:f8:e3:2c:4f:3e:13:14:1d:d5:e4:fc:f8:50:96:
71:43:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:24 2025 by rpki-client