Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa
File: EF706AC45C7311EF9CC47281C4F9AE02.roa (raw, json)
Hash identifier: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4=
Subject key identifier: CB:10:E5:D6:93:1A:C2:3B:FA:98:CB:EC:73:D2:A9:15:A6:8B:3A:E5
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3521
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa
Signing time: Mon 16 Sep 2024 14:50:59 +0000
ROA not before: Mon 16 Sep 2024 14:50:59 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 141158
IP address blocks: 117.121.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13601 (0x3521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Sep 16 14:50:59 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e845d2-da69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:e3:7a:18:40:35:1e:18:36:f7:51:73:61:
a9:be:84:5b:f7:d0:cb:46:96:44:3d:6b:38:fb:01:
bf:ba:ae:ee:1c:a2:63:ed:67:25:66:7a:4b:b2:3f:
20:0e:5b:60:6b:5d:69:71:06:64:d9:64:01:5b:79:
01:e5:48:9d:88:cb:e7:b0:c4:93:02:7d:fb:e8:e1:
98:04:bc:49:f7:37:79:0d:d1:6c:55:f1:16:51:8a:
81:20:fa:35:84:8b:d4:24:d6:d3:03:68:15:a9:9c:
fb:24:ec:b3:fe:7d:75:b8:2e:8d:a3:9f:f4:a9:d1:
86:7c:c9:fc:2f:bf:4c:ec:c8:2e:b2:46:3d:b0:d7:
6c:d4:5b:70:b2:c4:a2:d2:2d:df:3d:c3:cd:5e:66:
b4:8b:1f:64:11:9f:1d:e4:13:4c:40:77:6e:04:4e:
ce:be:63:98:c4:82:63:3a:5f:98:47:ee:1d:77:7b:
99:d7:5f:72:40:1d:03:f5:4f:9e:5c:ea:2e:f5:9e:
94:5a:51:4d:62:11:05:35:32:5d:81:72:6a:4e:4e:
a5:83:52:b7:91:54:94:f5:cd:b8:89:be:80:d7:16:
c4:ed:fc:0a:94:44:4a:40:85:53:1b:9c:44:ce:0c:
b7:e9:9d:f2:dd:9f:12:a3:89:e3:71:20:41:82:5d:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:10:E5:D6:93:1A:C2:3B:FA:98:CB:EC:73:D2:A9:15:A6:8B:3A:E5
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ae:23:63:b4:ab:3c:ca:9d:b0:ee:ba:b8:5b:5e:79:d5:ea:
db:9f:cb:65:22:02:4d:42:ae:7a:25:6f:26:31:61:2d:e9:12:
d9:d9:7e:a3:a8:36:f2:9f:5d:a0:c7:f9:b7:45:14:a0:e3:9a:
97:22:19:68:b3:c3:af:6e:01:9d:27:82:b8:c8:08:16:10:56:
2d:ee:59:dd:0c:aa:e5:48:54:7d:27:8d:0b:7d:85:f8:dc:88:
15:0b:5c:26:0c:3e:45:4c:4c:7f:f9:70:21:44:67:8b:e4:46:
89:be:4d:c7:aa:89:28:a2:4e:86:94:d9:99:4a:68:e0:2e:de:
17:9e:26:2d:a1:9e:82:f5:77:a1:25:01:cc:74:f7:18:c6:21:
6a:cc:24:62:cd:a3:0c:76:05:d9:9c:1b:96:50:81:30:8d:e3:
47:30:45:77:bc:49:7e:c8:4c:b2:6d:27:77:ff:03:f1:5f:98:
89:ce:73:80:9a:32:df:2b:c8:2f:d2:f1:0b:9e:76:76:a9:83:
99:69:62:50:40:f5:71:ee:29:a9:05:63:df:69:4e:69:80:94:
8b:b2:c8:21:64:41:07:f3:c8:6b:15:8d:95:88:2b:fb:b8:29:
44:21:6d:19:0d:38:05:cc:64:e1:6d:f8:4a:38:30:2a:46:8f:
93:ae:ef:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:07 2025 by rpki-client