Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa
File: 9156042083EB11ECB7EC3B76C4F9AE02.roa (raw, json)
Hash identifier: dPrx3cF0sDj9FTl2qCoRHJgtgGOLW5ACbJ0tx2wVxmU=
Subject key identifier: E9:55:4A:B7:EF:D6:99:6E:42:5F:0D:8C:2E:48:D4:21:20:74:37:EC
Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Certificate serial: 0A8F
Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa
Signing time: Fri 30 Aug 2024 20:28:35 +0000
ROA not before: Fri 30 Aug 2024 20:28:35 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 24014
IP address blocks: 131.244.0.0/15 maxlen: 15
192.48.109.0/24 maxlen: 24
192.48.110.0/24 maxlen: 24
192.88.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2703 (0xa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Validity
Not Before: Aug 30 20:28:35 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d22b72-bddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:3c:12:f6:d7:77:0d:f1:03:b6:49:80:88:
e4:78:4a:d5:82:d6:3b:a8:28:62:65:fd:23:7c:0f:
7b:23:d5:45:8d:b3:bf:b6:73:ef:28:f5:d5:81:39:
e6:07:5b:af:c9:b0:2b:0d:bd:53:8c:f2:82:89:65:
ca:cb:c5:65:ab:37:9e:aa:5f:1c:ae:58:0c:12:15:
a8:05:66:61:7d:e5:a2:78:16:be:fa:60:68:9b:de:
d3:ad:c3:27:d6:f4:aa:6e:33:d2:04:f4:5b:d6:a4:
de:09:75:16:65:25:40:3e:e3:0e:00:e4:2a:61:23:
7b:ab:63:15:64:e1:81:42:b1:ea:bb:b9:df:2b:1a:
ae:8c:9f:00:36:26:82:c2:bb:d1:62:21:58:ca:30:
e7:c6:43:f5:ae:41:fd:13:4f:de:c4:3b:5d:11:8c:
f9:87:29:71:fd:5e:a0:35:89:0d:d7:dc:f7:3b:7d:
cf:18:b2:d7:e9:0c:65:53:0f:79:34:4d:74:57:99:
fa:f0:78:a0:dc:66:3a:6d:60:0a:87:9a:41:f8:f8:
64:95:91:e5:f2:55:e7:b0:6f:53:55:d8:d8:f8:e0:
11:f4:ae:cd:64:2e:08:a8:fc:9f:25:2a:09:7a:82:
2e:18:41:5f:8f:05:24:ed:a9:1c:43:1b:b6:60:6f:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:4A:B7:EF:D6:99:6E:42:5F:0D:8C:2E:48:D4:21:20:74:37:EC
X509v3 Authority Key Identifier:
keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.244.0.0/15
192.48.109.0-192.48.110.255
192.88.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:67:10:af:82:e6:a5:03:f8:5d:df:3a:48:a8:e6:8b:75:ce:
00:32:0d:6a:40:98:56:8a:43:7c:81:ea:d8:2c:d9:32:98:72:
1e:94:51:79:09:81:1d:fc:35:25:3c:e4:68:78:eb:bc:a8:d0:
b2:16:fe:40:a9:f5:b8:47:48:94:93:b6:fa:41:22:ee:b2:cf:
3e:3b:d2:7d:37:d9:5a:c4:a0:42:7e:fd:6b:e6:05:d6:b2:53:
19:05:59:6a:4a:b5:a2:e1:d3:75:1e:02:d6:43:91:f7:ab:08:
a6:68:a5:75:c0:bc:8a:dd:b0:67:5e:a2:d8:df:55:97:46:06:
72:70:eb:95:bb:e9:6e:8d:05:94:83:c5:06:7c:33:f1:97:b9:
9c:39:6b:99:43:f6:23:6e:71:dd:8b:7c:f7:85:9c:86:bb:d0:
5a:cc:a5:22:72:84:4a:e4:df:2f:e4:41:13:87:30:ae:66:6e:
3a:27:cf:61:4b:2b:20:e2:83:8e:6a:57:1b:6c:9e:8a:99:09:
46:49:5a:6e:88:a0:6e:f0:7a:31:42:ee:53:6a:10:93:cd:04:
db:8f:7a:01:b0:9a:f1:bc:7a:0f:71:ff:98:ef:c4:81:43:80:
cc:af:ca:07:d3:81:52:ac:ef:9e:05:8a:2a:01:1c:02:78:2a:
0a:22:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:19 2025 by rpki-client