Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa
File: 2A67700A9B4411EFA1772153C4F9AE02.roa (raw, json)
Hash identifier: zl+C3NthfIT+XlnjBqg1tdgjzR0Zd+EdwBs85D/sIUU=
Subject key identifier: 0D:8A:18:2C:E7:DD:10:8E:24:03:6C:50:4A:9C:0B:29:7B:27:B3:79
Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial: 071E
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa
Signing time: Tue 05 Nov 2024 07:04:14 +0000
ROA not before: Tue 05 Nov 2024 07:04:14 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 23686
IP address blocks: 51.162.48.0/24 maxlen: 24
51.162.49.0/24 maxlen: 24
51.162.50.0/23 maxlen: 23
51.162.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822 (0x71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Validity
Not Before: Nov 5 07:04:14 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6729c36e-d4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:b5:be:e8:54:2d:89:f2:25:34:31:11:66:
80:68:d1:33:dc:89:8b:2f:2c:23:d1:10:cb:c8:e8:
41:5b:bf:4d:cf:77:c8:f8:5d:ee:db:e6:4f:11:a2:
80:7e:5c:ce:56:4a:7d:eb:3c:f2:70:36:2d:6a:a1:
99:1a:f3:ef:46:6a:1b:21:23:3e:3e:09:ab:85:24:
df:78:fb:b6:18:12:6d:b0:6e:d5:c0:c3:14:08:64:
79:a1:82:b3:3b:de:4b:7d:f4:a9:63:59:07:b4:48:
4b:ed:79:d9:c8:1a:2f:03:4e:dc:75:2d:fc:c7:6f:
02:0b:76:0c:cc:32:d9:cf:5e:f5:dc:96:1d:59:e0:
55:ca:54:fa:c7:6c:fa:29:a7:7c:97:1a:2b:d0:1a:
42:23:1f:03:60:c0:df:4b:7f:e3:14:83:dd:63:bc:
65:96:8f:f0:00:34:0d:cc:87:e6:e8:9e:9b:5f:0e:
0b:c2:e2:49:bb:a8:37:92:9f:f0:5a:75:2e:99:c7:
f3:41:71:69:80:eb:2e:f3:d1:04:91:8e:f9:ef:98:
4a:99:4c:91:0c:ee:7e:6a:d0:07:59:de:be:87:1f:
6b:3a:ae:bb:17:f9:57:1e:29:3b:0d:3d:de:08:75:
4f:27:d7:4c:31:49:5a:d9:17:49:93:7b:ec:86:a7:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8A:18:2C:E7:DD:10:8E:24:03:6C:50:4A:9C:0B:29:7B:27:B3:79
X509v3 Authority Key Identifier:
keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
51.162.48.0/22
51.162.71.0/24
Signature Algorithm: sha256WithRSAEncryption
97:32:2d:8e:0d:ea:27:b6:84:5b:bc:80:32:fb:97:85:3c:6d:
eb:5d:34:71:e7:1b:70:7b:85:7b:8a:86:db:c7:9d:7e:13:45:
61:82:b8:9e:31:45:ba:1c:37:fa:23:7a:dd:f6:78:4f:d6:dd:
fa:ce:10:83:4e:26:f7:42:d0:cd:92:9c:9c:37:ae:fe:59:a7:
f3:20:08:f9:89:be:4b:ad:77:a9:c4:c8:95:21:b3:c2:57:6f:
ba:da:d5:ce:11:49:15:a4:30:97:5c:a7:10:d8:1c:63:b8:c0:
bc:31:69:5d:56:98:1a:0e:17:9e:8d:5d:18:95:c0:8f:66:03:
0d:63:a8:42:e9:f5:80:bc:63:38:99:b4:57:38:9d:2c:37:49:
e5:de:2b:1f:ac:d3:ec:29:2e:35:d6:bb:8d:5e:a2:58:19:89:
aa:4d:7c:24:17:9b:91:83:f2:1c:0f:85:61:40:1c:7a:bd:f2:
db:a1:61:a1:e1:e5:ab:f0:d1:a9:69:c4:c3:64:b0:d3:a1:e7:
ce:ed:9b:9a:fb:9d:c5:5b:69:14:ae:f8:d9:85:8e:a7:9d:6e:
22:32:78:c4:73:12:08:8d:a0:73:b4:fc:c9:b9:5a:4d:04:40:
3a:08:6b:9e:02:75:58:b3:28:d9:3e:cd:e3:56:e1:c8:15:67:
1c:bb:a6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:27 2025 by rpki-client