Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
File: 4D86EB72DCDA11EC97E4BC48C4F9AE02.roa (raw, json)
Hash identifier: NR6RcU9kMEadBZAcXsgH77rjUAopV9sWjzV6dmQk9RM=
Subject key identifier: C4:DC:5F:D8:EF:9D:1F:8F:63:9C:26:78:DF:E2:7D:83:58:91:63:1A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 124C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:21 +0000
ROA not before: Fri 24 May 2024 22:32:21 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 115.167.7.0/24 maxlen: 24
115.167.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4684 (0x124c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 22:32:21 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66511575-fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:b8:8d:e8:00:ad:6c:25:fa:7e:49:8e:8b:
dc:35:23:e4:80:b0:0a:f2:e1:fa:11:6c:7f:d2:d0:
f8:e1:47:24:05:93:51:9b:22:25:d6:45:a5:7b:31:
8f:74:6c:73:f7:2f:61:a1:70:67:5b:c5:4a:52:3a:
7e:b7:76:12:d7:4a:9a:13:2c:8b:e6:59:c7:98:ea:
dd:61:e9:57:ef:c5:7e:8f:71:bd:f9:15:d3:bd:4e:
4e:25:55:41:4c:e5:95:c8:3b:1a:77:42:67:f9:a8:
fe:ef:78:80:43:bf:93:f6:69:81:1e:41:ae:a1:2e:
23:47:6e:60:2b:b1:cd:6e:9f:4a:7a:6c:b5:28:51:
5b:e9:b0:e5:36:05:29:17:87:3d:f4:86:41:80:c4:
08:04:bf:16:c6:52:39:6f:c6:9d:dd:17:fa:aa:32:
5c:82:19:91:44:70:30:46:4b:2d:ba:5c:f1:60:3d:
29:7c:51:ff:4c:0b:6a:0c:8f:cc:9e:de:77:d0:09:
73:bd:d7:53:4a:ce:55:17:0a:d7:7f:a8:16:62:7c:
39:12:2f:0e:79:f0:c8:df:11:f2:1f:dc:46:3a:99:
4a:c3:31:a3:b2:82:54:49:c4:59:b7:e0:f4:a0:d1:
59:71:96:fe:09:5d:f1:e7:b4:43:91:8c:35:38:01:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:5F:D8:EF:9D:1F:8F:63:9C:26:78:DF:E2:7D:83:58:91:63:1A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D86EB72DCDA11EC97E4BC48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.7.0/24
115.167.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ec:71:0e:d2:b6:6c:f3:00:cc:79:7a:72:42:53:3d:6b:6a:
03:47:07:d5:b7:9f:7e:26:b1:21:51:7a:da:37:14:66:67:83:
b6:bb:31:27:74:0b:66:a6:ee:c2:19:f4:7b:3e:78:8c:8f:ae:
4c:83:13:70:45:86:da:0f:8c:cd:2b:58:9f:35:57:72:e6:92:
1d:2f:f9:0c:9c:f2:2a:bd:1f:84:c0:cd:5c:26:63:95:08:92:
83:4b:8c:95:57:1e:6e:1e:c5:46:af:30:93:5a:a2:72:c5:4c:
f8:8c:1e:30:2a:ca:85:ae:60:1f:63:a7:5d:b1:a6:75:16:40:
33:a7:05:56:20:65:b6:6b:20:77:3d:a4:e2:c3:e5:ad:14:f3:
40:14:71:d0:14:91:e0:67:47:64:db:68:ee:b4:1c:63:a7:78:
8b:b3:d0:ec:50:5b:5b:aa:8d:d8:0a:1f:e1:d1:d0:fd:41:f5:
af:ae:50:24:d2:e8:a2:18:2e:31:bd:30:7e:f7:17:2d:92:f0:
98:4e:16:4f:12:cf:20:dc:78:b0:02:2f:f6:18:e6:c5:67:ac:
e6:e3:ee:9f:73:a2:c0:09:1d:2e:e2:92:cb:c3:e0:85:6a:b5:
69:76:96:0b:e3:88:5b:ac:46:e0:7d:04:65:25:cb:7d:dd:78:
ae:4a:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:15 2025 by rpki-client