Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4B6349ECD79011ED98D6CE6AC4F9AE02.roa
File: 4B6349ECD79011ED98D6CE6AC4F9AE02.roa (raw, json)
Hash identifier: tYaYyaQsrpnXSYsOGrwwzLRKJ2VgPEGWc1iN6aMv68A=
Subject key identifier: 11:DD:5F:51:AC:F0:BA:33:4A:C3:6D:BD:19:59:27:46:AF:D9:65:50
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 19E6
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4B6349ECD79011ED98D6CE6AC4F9AE02.roa
Signing time: Thu 04 Apr 2024 14:50:41 +0000
ROA not before: Thu 04 Apr 2024 14:50:41 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 393259
IP address blocks: 116.51.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6630 (0x19e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: Apr 4 14:50:41 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660ebe41-0165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:65:fb:09:6f:92:61:9c:47:6b:b5:c3:fe:
10:00:40:cb:7c:9f:71:5b:b3:ac:ce:5b:6b:89:40:
44:62:83:86:c6:32:21:ef:87:61:56:27:7c:65:3a:
55:5c:f2:65:e7:c9:c4:f9:95:02:1a:82:10:14:35:
5c:55:4a:49:63:99:0c:81:7a:26:2d:e9:52:83:81:
98:47:04:5e:07:13:cb:3d:0f:82:19:1e:21:c6:79:
d4:19:61:dc:21:38:d2:11:79:bc:77:20:8a:21:11:
dc:47:99:25:5a:0b:7a:8a:a0:38:52:42:d4:e5:5b:
e9:cc:d9:53:3a:05:f6:22:75:53:18:dc:c9:1d:a7:
6c:28:a4:16:40:7e:b4:81:0e:80:7a:2f:fe:33:11:
3e:6c:de:b1:77:68:4a:e1:b2:44:60:83:c1:6c:b9:
51:53:8e:27:e0:71:94:c9:ed:80:2f:6a:9e:f1:5c:
80:fb:59:97:91:d6:14:7b:3d:d4:82:cc:5f:b2:3f:
d0:56:c8:88:79:40:03:89:8a:22:45:68:fd:6e:c6:
67:8d:35:97:ff:69:60:12:cc:34:b0:67:5a:bb:89:
0c:9e:c8:8f:a9:cd:c9:a0:13:1a:1b:d7:e9:f5:42:
e5:f7:ae:30:db:1e:27:8a:6a:f9:b0:9c:08:8c:b7:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DD:5F:51:AC:F0:BA:33:4A:C3:6D:BD:19:59:27:46:AF:D9:65:50
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4B6349ECD79011ED98D6CE6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.51.25.0/24
Signature Algorithm: sha256WithRSAEncryption
36:20:25:93:16:13:e5:04:18:ac:0b:f4:15:54:51:a7:23:c7:
bc:18:89:6b:d1:6c:1c:52:2e:94:33:f9:05:43:2c:28:d1:b3:
91:4f:0e:d3:dc:4a:47:88:28:ea:8f:f3:fe:50:93:66:e7:d2:
a9:45:33:e7:91:f9:f5:9b:cf:9c:bc:7a:2b:01:3d:65:54:c8:
ac:96:04:95:24:30:e9:56:30:3d:04:31:d8:0f:9c:e8:a0:a2:
d7:72:94:4a:ce:69:7e:be:06:0a:ba:5f:52:b3:87:15:99:be:
8e:ae:c4:a8:54:52:f2:36:0b:4d:dc:78:33:ba:d7:29:ab:5e:
98:23:71:46:bb:b9:e6:47:45:d7:9c:25:88:f8:a5:a2:c6:66:
4c:13:d8:d7:46:9f:12:81:73:30:61:08:88:96:12:20:17:d7:
69:3e:8b:84:7f:1b:b4:a0:77:92:b0:78:e2:4d:33:2c:72:7e:
ba:cb:d4:09:a5:7a:71:3b:1f:87:2e:9b:fa:5a:6e:3e:29:33:
7d:b0:8f:51:84:06:4c:e1:a4:19:b0:7f:22:c1:a1:14:ca:7c:
37:fb:f1:d5:05:5d:e3:fa:28:e8:5c:c4:be:f3:ba:22:16:c0:
63:e5:6b:68:2f:e4:b0:51:2d:24:39:1e:3b:57:15:44:11:f7:
73:cf:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:16 2025 by rpki-client