Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa
File: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (raw, json)
Hash identifier: 351c1xDCKrPS/Zgdm9IuCdTBAtSfPFKtcdL0Nkv+aac=
Subject key identifier: 18:59:A2:21:EB:42:05:E2:61:A5:4C:74:3E:D2:6B:1B:08:44:85:9C
Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial: 0766
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa
Signing time: Thu 04 Apr 2024 23:01:48 +0000
ROA not before: Thu 04 Apr 2024 23:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141435
IP address blocks: 149.234.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894 (0x766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Validity
Not Before: Apr 4 23:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660f315c-ad7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:9e:64:da:cf:3c:df:46:c5:fd:44:92:29:
90:ef:b9:9a:3d:f5:b4:61:2f:4b:6e:5e:47:ef:55:
15:1e:74:a3:ef:c5:e4:fe:0f:9d:cf:35:36:f3:73:
1a:28:c2:54:1b:59:81:38:39:db:2f:e4:0e:c4:0d:
28:b5:b3:82:b1:af:ac:bf:01:a9:e4:c9:d9:85:ad:
a7:20:f3:1d:f5:9f:00:70:db:7d:f0:6a:73:78:9a:
4a:79:2b:29:c0:95:e9:7d:d3:73:cf:1d:47:2c:d6:
3d:b9:9b:b7:79:37:43:05:e3:84:9d:93:77:15:0e:
d7:04:b2:c7:d4:e8:13:90:09:05:f2:65:af:8a:c7:
ec:7f:54:fd:ac:46:ca:9b:68:56:c2:ed:88:f5:04:
3e:d9:12:ce:e0:55:6d:0c:84:d6:a0:48:62:23:ed:
10:3b:20:b2:ab:e0:38:41:d1:c5:12:68:9f:2f:d9:
22:06:af:42:72:46:17:3f:d6:dc:06:85:5e:74:ac:
0b:6e:3d:7b:c7:e8:56:37:0c:fa:c0:75:10:de:2c:
6c:ce:f9:5c:43:e3:69:71:9c:29:19:77:1a:be:56:
df:94:b4:1e:1f:f8:87:2b:79:86:9c:bc:a6:48:a6:
0c:bc:fb:f5:bd:10:66:fd:8f:be:ee:19:d5:db:45:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:A2:21:EB:42:05:E2:61:A5:4C:74:3E:D2:6B:1B:08:44:85:9C
X509v3 Authority Key Identifier:
keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:08:c4:72:9b:64:b2:72:dd:f1:ca:b9:f0:e2:c2:aa:f7:a7:
2e:16:4f:62:ca:5e:99:a4:0a:7e:26:bd:7e:8f:be:ce:9a:86:
85:13:d2:8e:bf:09:11:13:49:00:2f:c2:f0:af:f4:82:36:3e:
e5:d5:01:74:4a:b7:ac:b1:6f:62:48:6a:d6:62:c8:ed:66:ec:
63:85:da:d7:af:6f:62:a4:62:6b:c9:73:73:19:4b:6a:fa:ba:
cc:bc:54:85:39:f6:71:3a:52:3e:90:9d:bf:80:0d:16:ad:bd:
aa:a5:38:7d:83:47:88:2d:c2:fd:28:0a:f7:fa:21:9d:5f:dd:
84:03:5a:ca:8d:9c:70:99:34:47:0e:cb:b5:cf:f4:32:8a:b8:
be:70:f4:5f:ec:46:8f:91:b2:b4:e6:cf:26:70:4b:81:69:cb:
96:99:15:44:3e:2b:74:47:2d:43:18:43:ed:83:fb:fe:d1:80:
fb:3c:3c:60:d5:a7:ef:5d:c4:3f:c5:d8:af:9e:9e:23:29:9e:
e3:e1:c7:dc:a6:87:d7:b9:85:f9:c6:87:e7:1a:e8:ef:34:11:
24:72:d4:30:19:6f:92:cc:3f:9d:fc:3f:51:3b:06:a8:82:c2:
25:bd:c8:6a:89:b3:68:66:ec:6d:cc:92:a1:dc:a2:26:4f:15:
5f:f4:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:18:43 2025 by rpki-client