Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
File: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (raw, json)
Hash identifier: s7kmGV11LpR2uOYTQWsw6P4Bq6z4n3l1h0bh9iKPVCY=
Subject key identifier: EE:75:EE:DD:28:1A:99:EA:D2:91:AF:1B:E8:70:CA:9C:D5:77:CF:E7
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 0822
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
Signing time: Thu 22 Feb 2024 08:33:48 +0000
ROA not before: Thu 22 Feb 2024 08:33:48 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 45593
IP address blocks: 112.78.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082 (0x822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Validity
Not Before: Feb 22 08:33:48 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d706ec-fa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:46:1a:1c:c7:07:43:06:5e:14:21:e8:d9:
92:3b:1a:a6:9e:f6:2a:2a:5a:78:3b:07:b1:3f:a7:
f1:34:f1:c0:ee:74:e5:88:50:e1:95:89:e6:3a:d5:
13:f3:f2:d6:34:22:6d:81:75:92:18:2e:84:1f:c2:
94:2c:56:94:3b:9f:eb:54:9c:b7:f7:7a:f1:77:bc:
d4:f4:a2:08:56:93:ce:00:54:53:13:3c:aa:9b:b5:
5c:d4:b8:13:84:01:06:4d:97:07:65:84:5e:4f:5e:
8f:d9:fe:b4:a5:e7:e4:0f:ac:8a:92:44:24:cc:94:
b3:e7:77:06:c4:d4:b6:85:ef:d4:14:6f:5f:38:11:
75:1a:49:d4:7e:db:51:09:fb:37:bd:36:54:90:67:
26:0f:97:c3:ed:af:65:1d:ca:17:46:2a:55:f6:95:
17:04:34:92:65:37:9d:7a:94:18:49:be:c6:e4:f5:
49:a2:7e:14:ca:25:b2:af:89:a1:82:19:b6:d5:2e:
eb:aa:cd:31:cb:10:bd:12:5d:d1:ed:d2:a5:a9:ba:
e1:ac:da:c3:b5:3a:a4:f8:44:30:50:ab:36:1a:8d:
69:bb:35:34:88:f7:7f:66:3c:44:56:6b:94:33:60:
50:ec:03:77:a2:76:7c:61:a0:cd:ac:ef:67:89:cd:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:EE:DD:28:1A:99:EA:D2:91:AF:1B:E8:70:CA:9C:D5:77:CF:E7
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.111.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e0:31:fb:db:aa:a6:d2:5b:76:14:fa:f8:27:0d:5e:7d:50:
b1:43:de:c6:ae:60:ad:81:a6:7f:fe:62:d2:b1:13:9a:88:4b:
39:ed:0a:ee:8b:55:25:d0:d8:04:71:77:3e:d2:4f:db:b6:e9:
9c:18:ef:85:04:6f:c4:e2:25:e6:bc:fd:99:47:3f:bc:5c:75:
69:a1:84:84:d5:a4:ea:f6:49:2f:b7:58:c4:00:4b:76:73:7e:
0a:99:d7:bf:5f:f1:82:63:00:00:10:01:2c:9b:e6:a6:e1:ce:
d1:52:6d:33:19:55:4c:7f:8f:89:2f:08:bd:41:4f:fd:8f:f6:
3d:2f:a6:ca:03:24:a8:26:52:31:b2:23:e1:33:c4:ea:ad:ae:
b5:03:50:7e:ec:f2:79:05:e3:57:c5:a0:d8:08:82:87:6c:8b:
50:05:24:bc:31:f4:90:cf:c6:a4:e4:8c:fc:51:a9:86:db:c7:
58:b6:c2:23:49:59:05:c0:ec:a3:6f:db:67:64:8e:67:e3:b3:
3e:ea:e7:23:2a:df:bd:9b:b8:f7:31:23:06:20:2f:d8:5e:28:
70:4d:df:c3:16:ff:9a:2b:94:86:5e:93:03:51:02:8d:9a:49:
b6:49:6f:1a:6f:f9:55:f5:4e:23:0f:18:a2:58:23:24:49:b8:
93:09:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:35:37 2025 by rpki-client