Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa
File: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (raw, json)
Hash identifier: XRUvAzYaseIVxGtch+U0AQhcNiwJ6tjLkzEhHdxkHCM=
Subject key identifier: 65:25:56:6A:36:D6:18:F4:30:1D:6C:F2:3E:57:B6:98:8C:8B:E7:87
Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial: 1016
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa
Signing time: Wed 14 Aug 2024 17:55:14 +0000
ROA not before: Wed 14 Aug 2024 17:55:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137989
IP address blocks: 87.247.160.0/21 maxlen: 22
87.247.160.0/24 maxlen: 24
87.247.161.0/24 maxlen: 24
87.247.162.0/24 maxlen: 24
87.247.163.0/24 maxlen: 24
87.247.164.0/24 maxlen: 24
87.247.165.0/24 maxlen: 24
87.247.166.0/24 maxlen: 24
87.247.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4118 (0x1016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Validity
Not Before: Aug 14 17:55:14 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66bcef82-1aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:e9:32:9a:aa:aa:0e:6a:61:b7:d8:2c:a2:
4c:6c:5b:df:b7:11:66:30:f6:4e:44:c1:e9:c9:49:
a1:1b:37:fc:eb:00:fb:22:ff:c4:78:0c:3d:45:14:
a8:a7:e7:e9:31:11:fa:c4:19:d7:55:16:66:28:48:
de:89:68:ed:6c:b1:3d:36:66:6c:bb:37:1b:38:8c:
ae:2c:2a:d7:fa:86:7a:d0:cd:a8:b8:84:35:a2:32:
d3:a1:33:08:ec:d3:d4:3d:ec:a8:0d:4e:94:37:3c:
04:fc:91:e2:e3:c2:f5:9a:6a:82:fa:93:f8:cb:e7:
06:1f:fb:e5:46:85:82:2d:ca:ed:fc:34:3c:03:5b:
ee:3d:70:88:ff:f5:11:be:1f:b3:bb:8a:b8:ad:29:
af:8a:3a:09:f6:5f:8e:d9:24:73:33:c7:dd:0b:bc:
e2:a9:60:66:3d:26:cf:76:9c:dc:45:f1:70:31:a3:
b6:6e:43:48:22:59:7c:26:9e:b0:91:0b:7a:64:1f:
dd:bb:cc:d6:25:3e:f7:ca:cb:20:54:b7:9f:52:39:
bf:78:1a:ec:85:dd:c8:75:14:65:d5:a3:b5:28:e0:
cb:f1:8e:4f:b6:80:45:f2:71:91:15:48:11:da:c4:
3e:d1:28:1a:dc:61:b2:b1:5b:f1:90:7b:ec:3e:61:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:56:6A:36:D6:18:F4:30:1D:6C:F2:3E:57:B6:98:8C:8B:E7:87
X509v3 Authority Key Identifier:
keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
87.247.160.0/21
Signature Algorithm: sha256WithRSAEncryption
59:39:b6:e5:c4:e1:ec:a3:f2:70:c1:a5:3d:d4:59:15:e4:6f:
80:3f:56:3b:d7:ef:a5:a5:32:04:0d:7e:63:3b:0c:f9:9b:c8:
a6:13:14:09:0f:8e:2b:a7:59:29:60:00:10:9d:d4:98:fe:b8:
fb:6b:24:fb:a3:f8:9b:f0:a5:4f:7c:c1:48:05:e2:96:81:f1:
b6:ee:e0:fe:6f:a3:6c:59:39:ef:92:cb:e8:d1:22:dd:d5:52:
6d:98:2c:73:bd:a0:f7:16:71:4a:1b:cc:59:2c:a2:73:1b:6c:
9a:82:f3:bb:bf:c5:e3:ef:ae:89:7a:dc:2e:00:66:77:23:5a:
34:02:5f:03:cf:ac:a4:75:1b:61:bb:f6:41:52:aa:09:cf:90:
cd:78:e8:b4:b1:be:0d:41:2d:9b:03:3f:7f:45:80:5c:38:cd:
b5:92:3d:54:7f:b1:d4:3c:9a:51:17:59:0e:41:8f:1a:1a:15:
36:2d:ac:cd:45:c5:16:ac:97:2a:76:e7:f7:05:00:58:cf:b0:
1d:17:b2:60:b3:9a:13:88:59:44:f1:0b:d8:ed:50:30:4b:f0:
58:52:cd:6f:59:69:e1:dc:5e:cc:4c:82:db:1f:b0:1c:40:49:
3f:8b:0f:d0:0d:b5:c6:67:e9:03:70:28:5f:c3:b9:ef:2f:54:
81:98:c0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:18:58 2025 by rpki-client