Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa
File: C3623470CF4611EBBBA79165C4F9AE02.roa (raw, json)
Hash identifier: 3vFM77FagLpqFr/nJpGYMXl7CPSlGG/bVu+mI2HwRkY=
Subject key identifier: 90:6A:B4:F1:1A:21:31:23:5A:B6:D3:4B:72:F9:7D:F1:61:30:56:58
Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial: 056B
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa
Signing time: Thu 26 Dec 2024 06:02:36 +0000
ROA not before: Thu 26 Dec 2024 06:02:36 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 16509
IP address blocks: 199.166.34.0/23 maxlen: 23
199.166.37.0/24 maxlen: 24
207.189.185.0/24 maxlen: 24
207.189.186.0/24 maxlen: 24
207.189.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Validity
Not Before: Dec 26 06:02:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=676cf17c-78b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:2a:d7:c4:cf:c2:14:c7:ea:4d:62:07:5f:
51:ea:db:3c:df:ae:5c:bd:49:8b:9d:10:38:4b:08:
10:5e:18:ca:2a:c5:43:30:0f:6a:08:a0:71:4d:18:
c3:0d:00:29:d7:54:59:cc:fe:95:d7:2b:4d:fd:15:
e8:04:de:de:57:64:dc:88:1f:29:9f:ca:b2:f2:19:
bf:4e:26:fe:cc:2a:45:2d:bf:c2:0b:89:a2:53:77:
3f:2e:0a:f6:b2:71:97:6a:34:d8:6e:a7:ce:12:b3:
71:90:84:f8:0c:ff:72:95:a8:8f:af:de:6c:44:43:
70:68:e5:54:7a:60:03:01:fb:2f:dc:df:64:1f:33:
4a:08:10:44:2f:1c:16:3b:54:48:17:3d:24:7d:e9:
34:16:60:5d:cf:14:c0:6a:c6:59:39:58:26:fe:b8:
45:f6:a7:6b:69:e2:8c:b8:e4:9d:d6:15:1e:92:a9:
4e:17:e2:3a:6d:7d:f7:15:5c:90:04:91:32:79:31:
39:bc:cd:41:a4:ba:b1:b9:c3:ac:17:5e:9b:61:41:
f7:42:69:4d:c0:99:af:dc:5a:9b:6c:c1:f7:07:23:
58:27:b0:19:2c:70:54:ac:06:73:0e:4e:bc:97:39:
f8:bd:26:1c:c3:e2:4f:3c:ac:01:8e:a5:06:7b:47:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:B4:F1:1A:21:31:23:5A:B6:D3:4B:72:F9:7D:F1:61:30:56:58
X509v3 Authority Key Identifier:
keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
199.166.34.0/23
199.166.37.0/24
207.189.185.0-207.189.187.255
Signature Algorithm: sha256WithRSAEncryption
5d:ed:c3:05:09:00:0c:5c:71:0d:9d:a7:5b:db:8f:c3:82:a1:
27:2a:c6:64:18:1b:18:da:9f:f2:d7:48:20:9e:af:cf:56:9e:
4e:a5:26:53:75:cb:d9:95:03:4a:59:95:54:e3:98:c7:06:4a:
a3:41:b3:9b:07:8e:9d:84:9c:82:c6:66:af:d0:40:26:a9:d8:
c3:dc:a7:7b:01:1c:3e:b5:f9:02:0a:28:74:b7:be:9d:09:df:
78:51:50:c2:79:05:e0:46:12:ec:32:9a:cc:fa:e6:f2:8d:41:
c2:42:8f:a8:54:f8:ff:b4:56:8c:3f:c5:cc:e8:9e:ae:cb:12:
1d:d4:36:34:35:8d:be:a4:74:7b:ed:1d:9c:c3:07:19:2b:7b:
c6:6e:64:ea:b5:86:f0:78:7e:3a:6a:22:3b:e4:3a:ed:f9:80:
70:3b:c1:5d:e1:03:7c:9c:20:8a:58:f1:31:38:a2:9f:b2:27:
0d:70:12:94:c1:3d:f8:2b:07:c9:1f:4c:1f:62:87:ec:bf:f7:
bc:ba:c1:ac:ce:28:5c:b0:52:20:e8:bc:69:f1:34:5d:3d:b4:
0d:eb:b8:cb:57:66:6b:0e:b7:bc:1b:a8:a8:6a:c1:0b:74:84:
f0:86:08:c5:de:64:94:fe:84:10:e0:21:25:1a:41:ea:66:1b:
86:c7:45:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:41 2025 by rpki-client