Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa
File: 81ACB3888C9611EE88DE0726C4F9AE02.roa (raw, json)
Hash identifier: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM=
Subject key identifier: ED:AC:49:20:62:FC:1D:C2:2E:BA:4C:61:B5:67:E5:35:02:52:91:A2
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3520
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa
Signing time: Mon 16 Sep 2024 14:50:58 +0000
ROA not before: Mon 16 Sep 2024 14:50:58 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 135027
IP address blocks: 117.121.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13600 (0x3520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Sep 16 14:50:58 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e845d1-72f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:50:76:62:5c:b8:23:8f:b5:26:de:b7:b5:
c3:7c:16:f3:56:01:73:07:87:4b:ea:05:fc:50:ce:
85:d1:59:cb:82:07:6d:79:37:17:11:04:b9:34:9d:
6b:da:9a:20:68:93:30:35:5f:5a:ec:e8:f1:26:f1:
2d:14:be:4b:87:c8:e8:86:82:88:27:92:22:81:4e:
2a:62:4d:cc:4b:c2:6e:31:59:a4:22:02:b0:72:2c:
be:5c:8b:79:21:f2:9a:da:a2:82:e4:a4:d2:2f:fd:
0c:83:f2:2d:a5:88:f4:0e:ff:3f:c5:59:91:2a:48:
b6:e6:a5:96:ae:df:6f:76:c1:cc:bf:c9:96:56:65:
b6:51:a3:52:d7:97:5f:db:c0:fd:60:4b:8f:22:d2:
8a:e2:ff:cd:43:06:0c:32:b3:e9:16:67:7e:f3:7f:
e1:79:28:6c:22:98:90:c3:6c:c0:d1:53:7c:3d:ab:
ec:55:08:20:49:b3:da:c3:6c:5e:4b:ac:e0:d4:a0:
d2:db:83:8c:49:9e:20:32:4f:73:99:9d:4b:37:2e:
7c:29:c3:33:43:cb:13:6a:b3:2e:fa:88:ee:95:bb:
a8:22:e8:79:b8:6f:35:a7:a0:e0:f8:39:3f:fd:97:
54:fd:02:b0:69:dc:ca:c7:01:7a:96:d3:e5:f2:bb:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AC:49:20:62:FC:1D:C2:2E:BA:4C:61:B5:67:E5:35:02:52:91:A2
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.243.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1f:35:30:09:c1:cb:27:67:bb:60:74:1c:34:c7:c1:fa:a6:
5e:59:05:ee:bd:42:f8:56:f0:1f:e0:62:c3:5e:29:b9:be:09:
d3:ba:29:c5:3a:a1:0d:39:20:89:68:a2:cd:c6:ee:7d:9e:2f:
4d:bc:dc:99:67:23:93:69:95:6a:e0:c3:38:60:29:35:53:c1:
4d:52:74:4f:5f:7c:6f:ab:4c:2b:e2:19:ba:d0:50:ea:89:5b:
71:ac:6d:36:07:04:49:7f:99:ce:08:c1:4d:ae:36:f5:60:92:
ba:ce:2c:46:98:ce:26:0f:ec:40:5d:40:c5:e7:f9:d8:24:37:
4a:fc:7f:44:cb:53:5e:c6:6c:e6:8e:ba:bd:b2:a4:1c:db:f9:
bc:92:47:de:c2:4c:71:72:88:4d:fb:9d:54:ad:d0:34:9d:c3:
63:e0:40:55:05:c8:bd:c7:f0:58:e4:d8:76:42:65:19:13:ee:
be:64:f0:e0:d7:0a:94:50:2c:f1:92:ad:f2:bf:a7:61:72:8f:
a6:57:ac:27:a4:a2:ac:b1:bd:69:54:d9:cf:06:45:23:88:0c:
1d:80:a3:85:3d:b7:f0:94:f6:a8:bd:41:c6:16:37:c7:dc:7e:
b1:55:d8:90:97:97:2d:e3:d6:92:24:7c:5b:a9:9c:73:85:07:
7b:e7:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:00 2025 by rpki-client