Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/005D2F8E56B611EAA08F9B82C4F9AE02.roa
File: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (raw, json)
Hash identifier: PAQkZZ3jUKMhKKWzlauMDLdfLxF+5ct2efz+amPISSA=
Subject key identifier: CC:75:9D:AE:46:5D:2D:07:3E:52:C9:01:EB:FA:35:98:69:7F:3B:1A
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 127A
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/005D2F8E56B611EAA08F9B82C4F9AE02.roa
Signing time: Sat 02 Mar 2024 15:20:52 +0000
ROA not before: Sat 02 Mar 2024 15:20:52 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136952
IP address blocks: 167.179.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4730 (0x127a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Mar 2 15:20:52 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e343d4-f84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:07:18:f7:b3:ad:3f:6f:3c:90:32:a2:2d:
a2:e1:48:26:d7:c7:d9:80:36:c6:b1:a5:53:30:2a:
6c:a0:39:8a:c3:38:1f:79:9a:64:87:66:38:9e:95:
d5:39:a0:80:fa:93:ea:a9:6a:36:99:05:4e:eb:fe:
8d:52:60:44:46:82:e0:56:12:86:1d:bd:5a:c4:95:
bb:b5:eb:d1:cb:c9:b4:95:49:d5:89:52:42:5d:7a:
61:41:59:c2:54:45:4d:22:2f:8a:56:b0:f4:f8:f4:
9d:0c:12:3d:10:1b:37:ee:a9:bc:0e:70:f2:c8:76:
c1:0a:32:74:e7:21:da:70:5f:e8:25:b9:85:eb:74:
fa:c9:38:d9:fa:3d:ef:ef:6e:2d:cc:aa:3b:c8:ab:
40:c4:ef:12:48:a4:4c:60:ed:28:3f:ac:10:da:09:
32:53:95:4d:39:49:27:ed:9e:6b:a7:51:4c:d9:e3:
ba:0f:af:81:7f:20:e1:a1:ad:ad:ea:c4:cc:cc:95:
15:70:4c:52:26:6a:85:a5:2b:54:e6:f3:79:9b:5a:
cc:4f:00:65:0a:11:86:60:22:38:02:b7:2a:12:21:
61:76:ba:e3:72:d7:7c:12:e3:cf:fa:db:f7:fb:bf:
fe:b8:02:5b:c8:2c:a9:d6:d2:2e:87:57:af:c9:a4:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:75:9D:AE:46:5D:2D:07:3E:52:C9:01:EB:FA:35:98:69:7F:3B:1A
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/005D2F8E56B611EAA08F9B82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:70:1d:25:2d:97:0b:a3:4d:3c:e8:7f:fc:52:8b:cb:36:29:
22:d9:d1:f9:d3:76:ea:df:0e:b7:7c:8a:e6:6d:e9:8a:c1:7b:
e1:68:3b:4c:7c:3e:3d:6a:b4:5c:e0:94:9c:99:79:6f:42:ce:
c4:03:06:77:b8:31:04:23:c3:f5:8d:61:88:1b:86:e0:54:c7:
f4:f2:00:c8:b0:49:6f:97:0f:40:81:ad:ea:e6:7d:08:07:c4:
2e:29:ce:f3:6f:8c:c9:a9:e7:cc:68:19:07:c9:7a:be:93:de:
46:a7:37:e7:d8:56:a5:cf:75:ed:84:2e:68:5f:6d:40:e2:3e:
d3:c0:c7:f0:58:9c:2d:06:e6:b3:dc:75:31:d8:02:32:4e:dc:
73:fa:0b:91:71:06:cd:3a:c3:ac:5c:be:28:3d:fd:0d:51:40:
94:dd:d4:47:ed:4c:ac:83:05:04:59:ef:9c:b2:e6:01:66:2a:
44:2a:ed:66:60:a0:a6:bf:14:b8:35:26:61:0f:72:d9:1f:63:
13:33:06:e0:ff:e5:b6:0c:57:46:91:c6:fc:37:a9:9b:1e:30:
18:a2:6c:e7:62:be:1e:29:02:f7:77:f4:e7:37:68:c5:7b:93:
1e:19:c7:d7:1e:ed:95:c6:8b:f9:a7:10:62:f5:fc:7f:ae:be:
f1:8b:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:36:24 2025 by rpki-client