Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/7FC17C58A93711EEAD42EF0AC4F9AE02.roa
File: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (raw, json)
Hash identifier: u8ukqZNe9PLxKJ7FR9jSUyywiMBSCZvKYXnr9ECDY4c=
Subject key identifier: 38:6C:29:96:B9:F5:29:EC:D5:59:9B:DC:E4:76:63:6A:43:4A:C2:A4
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 2C
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/7FC17C58A93711EEAD42EF0AC4F9AE02.roa
Signing time: Tue 05 Mar 2024 07:49:27 +0000
ROA not before: Tue 05 Mar 2024 07:49:27 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 45820
IP address blocks: 61.16.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Mar 5 07:49:27 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e6ce87-d682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:78:b8:62:70:d1:f3:4b:c7:46:d7:9c:9c:
02:dd:8d:e5:e8:e2:e2:38:42:ae:68:9a:96:58:b0:
bc:6d:b6:59:a8:5a:e8:f1:b0:d6:f1:dc:8e:66:d5:
07:a9:9b:df:8c:eb:42:4c:f1:d2:f5:8f:60:0d:b2:
a0:6c:6a:7c:e4:73:70:11:43:43:af:38:83:63:6d:
2b:e3:26:66:ea:e9:99:6a:0d:08:a1:01:0f:a3:bf:
95:60:0a:03:f1:4d:64:94:63:1a:69:23:39:65:09:
e6:fe:39:c3:22:d2:ae:dc:44:69:37:e4:dd:f6:48:
d1:8e:99:d3:c0:f5:16:d1:00:27:2b:97:b8:2b:98:
fe:19:50:73:a9:c3:27:8e:c7:5a:2c:c7:f6:1e:c9:
1f:3c:9f:c4:e6:72:eb:2f:67:7d:a8:4f:4f:a0:12:
2f:0b:3c:6e:38:b2:0e:5e:0e:88:51:15:e6:7c:a8:
22:96:5b:90:94:fb:7c:fa:47:67:37:62:07:45:fd:
07:1c:b4:47:d8:7a:f3:ca:f8:f9:40:ab:6c:fa:5a:
ef:2e:6c:cf:fe:87:82:f8:5e:71:7e:a9:36:4b:e8:
72:4b:b7:3e:fe:53:be:1d:e7:fb:43:5c:43:73:00:
1d:00:13:b0:9b:ef:f8:73:a1:e9:db:6b:b2:53:6e:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6C:29:96:B9:F5:29:EC:D5:59:9B:DC:E4:76:63:6A:43:4A:C2:A4
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/7FC17C58A93711EEAD42EF0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2f:3b:c3:2b:a6:49:11:6a:63:78:58:a6:f5:71:c9:98:88:
bd:f6:24:99:c9:b9:6b:69:b8:fc:13:10:df:04:3c:64:bd:c0:
f6:44:ab:ae:0e:20:0a:e1:10:4d:0e:1d:a0:99:51:97:80:2e:
d0:fa:b0:40:f1:73:c0:20:51:19:98:6d:53:25:c9:20:ef:6d:
a0:6d:b2:06:7b:d6:de:b4:21:77:13:55:ef:a2:e1:99:1e:43:
47:5e:fb:80:f1:42:4d:05:9d:64:d2:4f:a1:cb:95:69:db:ec:
93:8c:da:49:42:ca:6e:80:e4:03:1b:e4:57:19:4c:f9:c8:4d:
77:40:a0:04:2c:56:3b:86:83:2e:52:82:4f:44:bf:6c:d0:fa:
d1:07:4b:79:5a:73:ee:17:9e:1d:8b:84:6b:6f:74:cb:63:4e:
21:2b:b5:72:d8:6b:35:cd:53:1a:c8:fd:3f:d9:0f:44:9a:fc:
55:2c:23:04:ff:76:b0:99:ee:a8:39:81:12:83:6b:55:76:d9:
a9:7d:a9:9b:77:f3:97:a9:19:98:6a:4b:80:52:27:56:31:a8:
1d:70:15:b2:68:93:77:93:88:c7:62:94:e1:0e:be:d4:df:0f:
39:0a:b7:55:b5:0a:db:1e:b1:9a:a8:56:ac:e1:e0:51:39:47:
fd:55:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:23:58 2025 by rpki-client