Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/49D54560C91C11EFB0DEB92DC4F9AE02.roa
File: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (raw, json)
Hash identifier: HtGb7wA81OQvA6ze/dzBfj0aE8cw4FCoibExVZ81CDM=
Subject key identifier: 21:2A:B7:5C:A7:5B:A4:6F:21:C9:FD:B2:CA:5E:CB:4F:9C:15:7A:88
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 06
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/49D54560C91C11EFB0DEB92DC4F9AE02.roa
Signing time: Sat 04 Jan 2025 13:23:51 +0000
ROA not before: Sat 04 Jan 2025 13:23:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137047
IP address blocks: 119.160.214.0/24 maxlen: 24
119.160.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Jan 4 13:23:51 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67793667-5193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:af:22:1a:50:ae:77:92:9d:3c:84:28:87:
c1:b7:56:18:b0:61:3e:4c:53:9c:50:72:c6:8d:10:
6c:1f:78:5f:6e:a7:55:c3:2c:3a:89:31:29:3e:45:
50:48:bb:ac:67:b0:e9:08:38:a3:39:25:6f:14:2f:
1c:2a:16:5a:17:9c:17:51:be:53:97:37:02:7e:7b:
ad:21:75:ac:6a:ee:82:41:05:f5:dd:f0:32:cb:5a:
9c:96:4a:73:29:25:e8:90:fd:a0:2a:24:c8:b2:e4:
d0:5e:fb:ed:e2:5a:1d:e4:59:47:0a:69:8f:fd:8a:
41:51:5e:5a:e9:c7:13:ed:ff:84:6c:6a:f2:b7:a6:
77:bb:2d:76:33:b9:f7:78:95:ca:2d:3c:ad:ab:c7:
ee:ae:f6:78:c8:19:11:c6:58:93:07:2e:23:f0:e6:
02:b1:e3:0d:47:ea:47:0b:6e:4d:f9:3a:bd:db:36:
ba:5a:1b:df:d1:ae:6b:36:34:67:f3:47:ea:8c:6c:
9f:f2:ae:cb:04:54:dd:97:eb:bc:b8:0c:c6:2a:9e:
e6:40:38:4d:dc:9c:88:80:d5:cc:ca:02:55:a0:08:
ae:9f:e6:e6:5c:2f:63:92:61:35:86:56:68:0f:82:
dc:3e:87:df:60:69:ad:48:7b:ab:5b:bc:02:c6:b0:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2A:B7:5C:A7:5B:A4:6F:21:C9:FD:B2:CA:5E:CB:4F:9C:15:7A:88
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/49D54560C91C11EFB0DEB92DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.160.214.0/23
Signature Algorithm: sha256WithRSAEncryption
30:35:ec:d8:3d:f2:8a:14:e3:f8:f6:ff:dd:7a:13:ac:7e:d3:
4e:e8:bd:e3:41:66:c1:3e:a2:5f:19:9b:78:f1:8a:b7:b9:78:
ba:fb:dc:ca:e6:6b:e4:e8:9b:6f:76:12:d6:5c:e6:6d:1e:43:
22:e9:a5:41:0a:5d:31:97:96:a6:e7:9f:5b:52:8b:1e:3b:4e:
36:d7:b9:16:51:5a:52:d0:79:8e:5a:b0:7d:fe:13:72:d8:ea:
48:75:b8:f9:66:77:3a:2c:f7:ab:b1:e6:30:8d:5e:d3:8c:b6:
51:23:df:24:7a:f0:e3:44:0a:b1:67:7c:c4:fd:98:f1:4e:96:
bc:22:f8:27:94:f4:7b:03:61:6f:17:80:21:49:fe:20:4f:23:
87:d8:da:07:d0:0b:28:36:e1:d8:37:1c:2b:e8:09:42:bd:35:
98:3b:19:73:6c:9d:aa:6a:3a:a7:35:12:7b:0c:b5:27:08:9e:
45:77:d5:9e:af:cc:14:67:ae:3f:3b:53:64:38:9e:45:ae:da:
79:bc:6a:c2:8b:00:16:d1:ca:3a:0b:ef:f9:9b:7e:f9:44:d5:
a6:7e:69:ee:13:0f:cf:32:d3:98:0e:dd:38:10:af:55:4f:9d:
6e:6f:16:f3:84:0b:5b:b3:59:43:a3:c6:7e:c7:e5:77:11:ca:
99:73:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:19 2025 by rpki-client