Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/664604CCD8E211ED913C4684C4F9AE02.roa
File: 664604CCD8E211ED913C4684C4F9AE02.roa (raw, json)
Hash identifier: bF+cQvGTN6hj6Su+AW4ebeZcP3ajFMubLlVPlkZn8CY=
Subject key identifier: F5:6B:C5:F2:74:1D:E3:90:FC:A6:79:0F:47:81:21:E7:3D:5D:03:8A
Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8
Certificate serial: 080A
Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/664604CCD8E211ED913C4684C4F9AE02.roa
Signing time: Tue 22 Oct 2024 14:50:59 +0000
ROA not before: Tue 22 Oct 2024 14:50:59 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 138322
IP address blocks: 23.88.192.0/19 maxlen: 19
23.88.192.0/20 maxlen: 20
23.88.192.0/21 maxlen: 21
23.88.192.0/23 maxlen: 23
23.88.192.0/24 maxlen: 24
23.88.193.0/24 maxlen: 24
23.88.198.0/23 maxlen: 23
23.88.200.0/22 maxlen: 22
23.88.200.0/24 maxlen: 24
23.88.201.0/24 maxlen: 24
23.88.202.0/24 maxlen: 24
23.88.203.0/24 maxlen: 24
23.88.204.0/22 maxlen: 22
23.88.204.0/24 maxlen: 24
23.88.205.0/24 maxlen: 24
23.88.206.0/24 maxlen: 24
23.88.207.0/24 maxlen: 24
23.88.222.0/24 maxlen: 24
23.88.223.0/24 maxlen: 24
152.36.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8
Validity
Not Before: Oct 22 14:50:59 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6717bbd3-cb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:fc:be:8c:3a:c9:4b:b9:5f:20:7c:f6:dc:
0b:7a:97:a0:37:e8:38:79:6f:af:84:8c:5d:f0:26:
83:16:d5:c6:65:95:7e:0e:b3:db:63:4b:94:47:d0:
c4:ee:14:9e:f6:ee:9c:7b:dd:8c:3e:2e:0c:6a:47:
3c:d1:96:35:96:ee:c5:cd:94:be:01:09:0e:0e:fe:
87:a2:78:18:d2:38:1f:c3:93:c3:ff:0e:32:f6:2d:
81:ed:3b:ed:6d:56:dd:c2:6d:a9:09:78:a1:57:fc:
f6:84:0b:a7:4c:3b:89:04:0e:e4:84:08:cd:55:e9:
4b:c2:d9:ec:85:d0:b4:d8:8b:ea:6e:c9:ed:8e:ae:
41:6c:e9:6d:e4:b8:5e:42:1d:e5:77:b6:b7:29:43:
5c:ba:d5:bb:57:bf:61:ce:97:23:64:19:b1:f7:79:
00:0f:80:17:9a:75:5a:a5:73:7e:6f:f4:83:dc:7c:
3e:8b:d9:bd:2d:21:b3:17:be:3b:33:40:d5:38:18:
6f:05:e4:c0:41:7a:1d:2b:9f:bb:84:7b:18:0c:c7:
1e:f2:12:77:6e:09:4c:ab:76:57:96:56:ce:21:df:
77:0a:04:4c:d5:02:3e:89:90:e9:bb:98:59:18:88:
e7:57:ae:4d:e7:c7:f8:83:f6:b5:a1:ad:17:30:ed:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6B:C5:F2:74:1D:E3:90:FC:A6:79:0F:47:81:21:E7:3D:5D:03:8A
X509v3 Authority Key Identifier:
keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/664604CCD8E211ED913C4684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
23.88.192.0/19
152.36.192.0/19
Signature Algorithm: sha256WithRSAEncryption
53:96:65:18:bf:fe:e1:87:52:dc:59:f1:ce:74:c5:8e:e3:bf:
e8:96:a1:cc:e8:66:a3:36:9c:f5:5b:b1:da:55:84:34:07:20:
9d:e1:ba:ac:cb:82:27:4c:d8:d7:74:bd:18:be:2f:88:4e:04:
bc:c5:94:0d:d7:63:5a:e8:76:5d:2d:81:b8:a0:cf:ef:f1:63:
df:35:ec:45:ce:6a:25:ed:8d:0f:3d:d1:5c:68:6b:88:5e:d5:
6f:9c:12:d4:9e:84:bf:6a:a6:b1:61:cb:cd:c3:ad:3a:ae:16:
34:97:44:da:c3:55:00:4f:b8:1b:42:ef:0e:26:fa:05:71:50:
2d:ba:c6:35:bf:22:76:fe:21:b9:e2:84:1e:eb:77:d4:d0:ca:
e0:ed:8a:6f:fe:1a:07:ad:98:59:2e:e9:2d:d1:0b:41:6f:95:
86:8f:8f:c6:57:d8:8a:64:68:e9:89:ca:60:d4:2c:58:03:42:
41:26:8f:4e:73:6c:59:9d:01:73:62:33:91:4a:03:48:2c:96:
35:73:04:19:5a:b6:58:19:4b:01:cc:52:7c:67:e4:eb:e5:77:
43:69:50:68:e6:a4:15:a0:57:11:4e:5d:64:37:dd:64:37:87:
17:63:5c:0c:9a:37:40:3a:08:4c:f5:5d:df:b7:34:a3:e3:b0:
0f:a2:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:56 2025 by rpki-client