Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
File: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (raw, json)
Hash identifier: 2yJ7kFYTJkf50U0uBqpDGHxgNhUCgO6DtJXDA60CFgc=
Subject key identifier: 8D:0F:F6:AF:FE:A2:B7:B7:D5:56:1A:2F:D3:12:2F:8B:35:A4:F9:E0
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 127E
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
Signing time: Sat 02 Mar 2024 15:20:56 +0000
ROA not before: Sat 02 Mar 2024 15:20:56 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 54994
IP address blocks: 167.179.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4734 (0x127e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Mar 2 15:20:56 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e343d7-afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:a8:6f:b2:bf:64:e6:f7:d5:14:56:91:06:
d6:90:60:06:0a:57:18:01:d3:6e:b2:44:6c:d1:b9:
3d:32:89:ca:85:2d:9f:65:61:0f:e0:cc:51:28:75:
fa:8d:a7:8e:f6:91:83:af:b6:01:ba:50:c7:db:ec:
87:e3:9d:d8:9b:bd:01:d5:ec:08:f8:8a:1b:b5:a2:
95:be:e6:20:b4:9f:5e:0d:5c:78:af:a1:f5:20:f3:
e4:35:2b:4c:1a:1a:10:f6:4d:6e:87:cb:b0:43:32:
da:28:83:d7:86:7d:7a:27:1c:7f:a9:59:b1:ea:77:
41:37:82:20:af:eb:ab:8c:94:14:82:ce:27:e3:a2:
1f:e5:e8:36:59:b4:5c:3e:78:74:81:98:4b:1a:16:
c9:1d:d9:b2:f6:c7:8a:4d:26:e2:dd:f3:1b:96:ff:
8f:82:98:0b:1a:cb:f8:02:18:64:92:af:bd:1f:06:
38:62:c1:0d:de:27:d6:64:ef:f6:32:f1:a7:db:8c:
3e:cc:a1:92:3f:f5:fa:56:70:23:90:69:dd:90:5f:
ee:f0:07:50:b7:99:c7:4e:1d:a5:4d:0e:a3:69:e7:
ad:58:d6:6a:e5:3f:fd:47:e4:2b:2a:8b:09:ae:65:
c3:bf:fc:a6:7e:b8:63:19:84:3e:8c:e3:e9:11:f6:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:F6:AF:FE:A2:B7:B7:D5:56:1A:2F:D3:12:2F:8B:35:A4:F9:E0
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:45:16:ed:4d:71:a1:54:15:52:44:77:da:72:c5:5e:40:7a:
5e:de:77:0e:14:bb:34:8f:be:35:3d:e8:c1:a4:c7:bc:11:b6:
ec:62:69:83:11:93:eb:22:57:e2:13:b5:e8:10:72:8c:f1:d2:
b9:0d:45:83:6d:81:41:3a:ec:7a:f4:16:b0:3a:bf:aa:38:72:
f9:b9:e1:91:e9:db:ff:4e:34:90:e6:96:1e:16:b5:50:2d:bc:
ef:6e:10:59:ed:c5:dd:4d:37:b5:3f:36:4d:ea:7e:4a:83:d5:
4c:ae:c3:48:ac:24:c6:9e:2d:25:2d:8c:d5:28:69:7f:59:ca:
fc:dc:02:f3:41:33:f3:86:74:b4:3c:05:8c:31:86:2b:68:45:
9b:26:ff:2d:a6:c1:d0:21:9b:dd:a8:da:ae:a9:d4:a5:c1:83:
84:ac:c4:ab:5d:19:11:e8:03:a9:b8:04:e4:aa:bb:cf:d6:84:
d3:8e:e5:42:d8:5d:29:84:a5:78:6b:ef:05:f4:aa:e4:cc:1e:
84:2d:54:50:6b:9c:b8:88:cc:ac:d6:a6:85:58:6d:4b:a5:00:
8f:e2:78:41:93:9a:f7:05:87:fc:d0:21:b7:a1:49:f1:00:4e:
15:d0:bb:8b:c7:fd:d6:65:38:8a:de:67:8c:5f:48:29:9c:c7:
3d:13:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:46:35 2025 by rpki-client