Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/675EE9DC87E711EEAC6C0B48C4F9AE02.roa
File: 675EE9DC87E711EEAC6C0B48C4F9AE02.roa (raw, json)
Hash identifier: drw42sYp0Yh/VWP9xaFHuMDcqO3Tii4R1NV32pLiPSM=
Subject key identifier: DC:D2:30:10:FF:CD:63:DB:0C:BE:F3:42:04:41:25:65:29:19:C2:C3
Certificate issuer: /CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62
Certificate serial: C6
Authority key identifier: 3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/675EE9DC87E711EEAC6C0B48C4F9AE02.roa
Signing time: Tue 19 Nov 2024 04:19:05 +0000
ROA not before: Tue 19 Nov 2024 04:19:05 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 4648
IP address blocks: 156.69.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62
Validity
Not Before: Nov 19 04:19:05 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=673c11b9-d13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:af:6d:7e:de:54:1b:89:d2:d4:d1:53:c9:
dd:9c:83:6e:b9:11:3c:fd:6f:26:97:8c:88:96:f1:
8e:50:24:fc:a9:f8:a2:da:ab:bc:cf:b0:de:d2:fc:
6e:61:df:54:d8:52:fc:a4:7a:b7:59:f1:67:4d:e8:
61:e9:e6:71:bf:a8:34:a9:d1:c3:13:7e:6d:c0:8b:
69:cc:c3:8a:2c:ae:eb:86:ba:28:78:c8:67:dd:53:
95:df:1a:64:12:67:d2:c2:ee:73:0f:b8:b8:ac:b0:
64:f7:36:4c:57:ba:7b:7d:ac:c7:5d:7a:70:ef:1f:
58:a4:9a:1f:f5:fa:1c:ee:6b:60:20:f1:d1:19:ab:
d7:2e:45:24:e0:e8:04:4d:95:34:d1:24:02:1c:f4:
d6:5f:df:28:dc:d8:9a:52:d3:e5:f3:a6:24:9c:3b:
9c:d2:63:d6:61:5d:e8:6a:a6:bb:61:fa:46:70:79:
29:fc:0d:3c:11:12:09:4b:66:46:5b:1a:d0:6c:ec:
08:b5:86:37:e3:7e:95:7a:62:54:5e:a2:5c:12:1d:
bc:f5:85:d6:60:ca:70:dd:4d:37:8c:7f:7d:69:ca:
91:e0:64:46:0b:26:1e:13:a1:4f:cc:2c:84:62:d9:
82:94:41:e8:99:dc:c6:e7:8a:c9:e9:4a:40:b4:ad:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D2:30:10:FF:CD:63:DB:0C:BE:F3:42:04:41:25:65:29:19:C2:C3
X509v3 Authority Key Identifier:
keyid:3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/675EE9DC87E711EEAC6C0B48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.69.31.0/24
Signature Algorithm: sha256WithRSAEncryption
41:50:92:50:7a:18:35:b5:ba:fc:77:d4:b7:d0:2b:2e:3a:9b:
87:3c:9c:30:72:f4:62:76:dd:85:59:0b:d5:4c:20:c7:5f:dc:
22:a1:ae:42:c1:39:34:12:d3:de:60:b6:af:ae:98:ed:c6:0a:
9a:70:ef:44:6d:04:96:0a:fd:ca:84:6d:27:de:64:7f:c9:39:
4d:b6:3a:9d:e4:d4:69:74:26:5a:bf:38:97:33:18:45:29:a9:
e6:7c:ec:dd:56:d5:7c:f9:03:f2:76:1d:9d:04:d2:1e:c5:4d:
e3:86:9e:62:59:38:7a:a9:0d:e6:53:38:1f:41:55:68:20:62:
20:bd:4c:e5:07:a1:b1:5c:ee:c7:fa:10:ff:57:e6:c8:f8:24:
01:20:64:29:f4:c2:c6:f5:a2:e4:a3:01:da:fc:23:6c:45:c3:
18:20:fe:b6:ab:71:ac:fa:57:42:7a:4c:c3:53:a9:9b:ea:f5:
30:df:28:dd:33:ad:bc:37:78:0a:aa:63:30:7f:ad:93:e7:22:
7b:d8:95:07:15:4e:cf:97:c2:5b:cf:4b:0e:b1:3c:f2:41:9c:
59:57:5f:38:44:04:a5:be:fc:bf:e1:aa:4f:0c:84:d5:0e:f9:
04:52:c1:07:a8:cb:9e:e4:98:dc:6d:58:96:1d:bb:c9:f7:77:
e5:3a:86:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:13:55 2025 by rpki-client