Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa
File: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (raw, json)
Hash identifier: ve0e1EeJW++Sl+gdEO2t3mWGIPAEc7CUq39Ok7FXatk=
Subject key identifier: CB:64:87:A5:6E:79:CC:18:73:78:68:81:A6:52:67:02:16:3C:9D:ED
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1A03
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa
Signing time: Sun 19 May 2024 08:59:33 +0000
ROA not before: Sun 19 May 2024 08:59:33 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 55569
IP address blocks: 116.51.31.192/30 maxlen: 30
116.51.31.196/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6659 (0x1a03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: May 19 08:59:33 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6649bf75-ec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:72:6f:2e:40:dd:cf:62:f7:95:68:d3:87:
e0:f9:c0:2f:e1:8d:30:63:d7:4d:f5:d3:c0:54:b9:
5b:3a:4b:1b:08:3e:29:6b:96:2c:8d:af:e3:02:42:
45:0b:2e:25:85:db:4c:b3:36:17:f8:d2:2e:7d:f9:
bb:2e:54:56:d2:38:2e:90:75:7b:f6:2c:06:1c:af:
63:62:a4:e6:0d:b9:8b:a1:06:ed:df:30:af:e8:e9:
9a:55:66:f9:a5:e4:6f:eb:7f:88:49:9b:e8:ec:2a:
4c:60:14:19:88:cc:a5:a0:61:08:d2:3b:1d:cb:5f:
4f:c4:48:bb:43:3a:36:22:8b:81:ca:d2:d4:bd:79:
d9:4e:ce:25:bc:b8:0d:9f:eb:6b:80:df:5d:7b:04:
d2:95:2e:1e:2c:7d:13:7b:11:19:ba:af:75:e4:49:
15:c3:45:23:a3:b8:d5:fb:e3:3d:6e:b7:6f:0d:d9:
77:46:a4:41:4f:7f:6e:8f:51:2f:cd:f4:41:3a:10:
60:39:b4:6a:53:15:b2:0f:5f:38:21:3a:b7:b9:a2:
64:db:92:82:aa:72:e5:7b:a9:e0:c7:04:84:bd:a8:
1d:e9:1f:74:f9:70:96:22:87:70:7f:62:f2:b7:4e:
d4:5a:d0:60:e4:d3:3b:7d:5c:27:53:85:c5:4e:7b:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:64:87:A5:6E:79:CC:18:73:78:68:81:A6:52:67:02:16:3C:9D:ED
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.51.31.192/29
Signature Algorithm: sha256WithRSAEncryption
a0:d7:09:07:89:7c:69:b3:04:bb:ab:4b:fa:e3:fd:95:1b:6c:
86:04:47:bd:2f:eb:c3:a9:b9:6c:ab:0c:4b:03:ce:27:b5:aa:
11:7b:9a:cd:11:98:81:2b:18:8f:2c:3e:10:51:63:e5:10:9d:
12:84:47:22:b1:36:07:ca:6f:ea:cc:75:fd:cb:6d:6f:84:78:
6a:1d:28:cd:e2:d0:18:72:f5:5d:60:96:72:78:82:ff:a7:df:
f9:7b:2d:b6:03:fd:8f:40:86:a3:be:e9:b2:6c:aa:8f:c2:df:
45:0c:3f:4f:99:96:70:af:78:d2:2d:c7:0a:e9:bc:81:8f:b1:
db:93:51:ad:a5:59:0b:76:5c:50:bf:73:cc:1e:e7:f0:bc:9c:
f1:8b:14:48:3c:ae:25:c3:27:5d:87:63:db:c5:e0:58:2b:5a:
a1:52:10:f9:c1:9e:99:27:df:2f:88:f8:cf:d6:b7:60:1c:f8:
5f:1d:11:d3:de:04:4a:b7:b3:8f:c5:57:41:25:7c:22:8b:53:
ab:6d:38:e0:58:7a:53:7b:16:ba:b5:8f:27:1c:de:51:76:7a:
21:b0:c9:62:95:ce:84:3f:30:bf:09:78:15:a3:4d:16:c2:bd:
b0:30:18:98:da:20:8b:1e:3d:8f:4c:2f:6c:6e:cf:c7:cd:86:
37:d5:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:40 2025 by rpki-client