Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa
File: 4C9925F2A4C911E782854F50C4F9AE02.roa (raw, json)
Hash identifier: R2/SizcxlFy6GiKbWh9BC6IePjx7ZGaL4yUJEBHXwDg=
Subject key identifier: 63:3B:CB:C7:50:0C:70:23:86:B9:99:70:96:0F:F7:73:4F:E5:90:6D
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 359D
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa
Signing time: Thu 12 Dec 2024 14:30:37 +0000
ROA not before: Thu 12 Dec 2024 14:30:37 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 18190
IP address blocks: 111.125.84.0/24 maxlen: 24
121.58.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13725 (0x359d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Dec 12 14:30:37 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675af38c-96ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:68:09:df:01:17:57:73:f0:a5:d7:e4:60:
79:38:b3:08:71:a0:1a:3c:67:60:b6:df:9e:1d:cf:
50:f7:d4:5c:ef:6f:7b:09:90:22:81:30:fe:b4:e1:
4c:49:3f:df:a3:14:d3:55:27:ae:02:88:fa:23:89:
25:a9:54:b7:a2:93:6b:a1:15:f8:bb:c3:61:be:fd:
3e:15:61:e0:74:e2:1b:13:50:e0:33:ad:59:ca:2e:
1f:e5:86:2f:a9:c8:f1:b5:ed:87:28:02:b6:9e:c0:
06:d3:5a:6f:9e:4b:73:4a:68:67:a8:bc:99:f7:ad:
53:8d:3b:98:6c:4c:81:f5:55:36:42:49:12:9f:a9:
71:e8:c2:ed:c5:0a:db:51:b9:40:39:ba:5d:5f:ea:
fe:26:ef:bb:61:fa:94:f0:ba:87:59:59:a7:13:cf:
db:13:ce:d6:69:49:f0:18:ce:5b:74:7a:22:53:2f:
dc:23:83:c7:7a:60:8d:85:30:32:4d:59:8b:1f:26:
c1:d9:75:aa:2f:ca:54:f6:47:7a:28:ca:24:a9:5d:
fa:8b:94:49:10:13:21:19:a7:b1:f9:a4:d2:21:d4:
94:93:7c:62:52:68:21:c6:07:fc:26:b5:59:4b:bc:
3a:f0:de:ec:67:0b:85:1a:03:10:31:90:ef:4a:f3:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:CB:C7:50:0C:70:23:86:B9:99:70:96:0F:F7:73:4F:E5:90:6D
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.84.0/24
121.58.198.0/24
Signature Algorithm: sha256WithRSAEncryption
15:70:ca:42:93:6c:5e:ef:45:78:82:03:f0:5e:62:a4:d8:73:
92:d8:51:ae:90:5b:75:ee:7e:79:49:3d:e8:6d:ad:2a:41:dc:
2c:51:f8:72:1c:0e:14:35:ff:ba:06:d4:24:41:ca:4a:4d:ab:
27:92:1b:cf:80:7b:70:18:83:6d:21:d9:42:83:46:ee:7d:2b:
5c:0c:56:62:22:7a:ac:11:5d:26:6b:a2:4e:a2:22:99:28:34:
a3:75:7e:f0:e7:fb:bd:eb:88:cb:bf:6d:02:29:64:85:25:5a:
b1:05:4e:fc:9e:c1:b0:9b:38:2b:da:a2:46:24:01:07:94:8d:
7e:f3:76:51:83:e2:56:75:4d:4e:14:7e:bf:cd:9a:e4:fe:af:
8b:c7:4e:6b:b0:4b:df:ff:86:05:67:da:8d:71:86:df:80:cb:
2b:93:f6:25:23:9d:5b:32:1b:88:9e:70:6d:e9:60:ff:cc:60:
15:f2:e1:96:cd:36:d9:70:19:76:ef:e8:1d:0f:37:d9:f2:ca:
ca:a7:a2:08:00:bb:0b:82:69:60:4d:fc:0b:61:42:fe:f2:13:
90:5e:27:8c:2e:56:49:b0:33:71:a0:34:2f:9b:3f:77:d4:3f:
06:c0:5e:9d:2b:74:00:d1:24:8b:66:1a:0e:eb:06:95:7a:04:
04:71:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:07:47 2025 by rpki-client