Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa
File: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (raw, json)
Hash identifier: B8Xb2sYgtypSv3e1Q/ixe1JBQsd2MMr7LDz0OuJS7tw=
Subject key identifier: AF:B3:27:53:33:E3:A1:02:A9:97:FE:75:06:CE:20:B2:FB:E4:41:1E
Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial: 2A
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa
Signing time: Thu 05 Sep 2024 07:50:33 +0000
ROA not before: Thu 05 Sep 2024 07:50:33 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 10022
IP address blocks: 192.188.185.0/24 maxlen: 24
192.203.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Validity
Not Before: Sep 5 07:50:33 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d962c9-fbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:95:50:54:64:0b:66:98:5b:51:df:31:7d:
ba:97:73:74:72:b2:fd:bc:6d:b3:30:d4:2e:aa:52:
d5:73:2a:81:64:75:72:72:18:90:9a:23:93:bc:c4:
0f:e8:48:0a:8b:39:d9:95:e1:01:3e:47:e0:41:2c:
80:d6:ae:15:72:37:fa:1a:3b:c1:63:97:03:6c:29:
1d:8b:e0:9b:fb:8c:5f:25:7e:36:d8:70:62:4a:c6:
77:c5:7e:88:05:79:cd:f5:c5:71:d5:1c:bf:5d:4e:
84:c3:f3:bd:bd:71:e0:ba:ee:65:5d:66:6c:a8:24:
e3:1c:9f:dc:19:86:6a:66:e2:c6:be:bd:49:bc:01:
1c:55:f7:f4:ba:84:b0:3a:f9:49:42:5c:37:13:3b:
61:95:c8:43:79:30:b8:eb:75:a9:38:b2:56:91:17:
06:ed:9b:fe:eb:6e:13:b9:39:3b:b4:a8:58:f8:6d:
8a:42:5d:c9:9a:a8:e5:1b:e0:b3:71:e4:21:4e:0b:
c9:96:e0:41:71:84:b5:3a:23:10:81:b8:a8:67:e6:
37:0b:df:8a:a2:af:9e:a0:96:a1:19:3c:4b:a5:e9:
f8:f3:53:c2:61:4c:84:a7:d5:89:e1:ac:4f:f7:9d:
6a:f7:35:be:e6:13:9d:99:87:62:d6:26:63:c1:ab:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:27:53:33:E3:A1:02:A9:97:FE:75:06:CE:20:B2:FB:E4:41:1E
X509v3 Authority Key Identifier:
keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.188.185.0/24
192.203.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d9:40:3d:08:b2:45:ae:c2:5b:bb:22:5b:a5:2b:b7:ce:a0:
9b:4c:9b:0d:86:52:c4:0e:e4:06:b8:b7:b2:c7:f5:6b:9c:c6:
f1:64:31:6e:1d:b2:b4:09:05:c2:79:39:fc:ce:18:46:f3:e3:
5b:3a:af:ff:c0:70:73:a2:c4:1a:89:8c:ea:fb:4e:18:c2:dc:
cb:7e:c2:0c:d2:01:3c:15:50:03:9c:0a:ff:91:e5:88:86:d9:
ea:a9:53:cb:bc:79:65:38:54:79:8b:ae:82:fb:3c:da:0e:c6:
bb:04:94:3c:9e:fe:93:20:33:4c:35:81:94:a7:31:e9:27:3d:
ac:50:eb:b1:5e:eb:a5:ce:3c:cd:a5:e2:d1:1f:aa:d3:5a:99:
4f:96:51:14:f8:fc:4a:fc:0c:ee:de:e7:58:47:d3:0a:f1:a7:
6b:ef:0b:45:4a:b6:b7:a8:08:8d:34:82:dc:84:f4:59:b3:91:
df:9b:b0:d3:ee:37:d8:3a:ff:ee:76:19:aa:3c:ee:a8:99:76:
b0:a3:34:aa:28:f1:91:dd:5b:bb:2b:ed:5e:3a:b6:dc:1b:56:
c8:a8:34:9a:b3:5b:4c:dd:64:e4:7d:8c:69:42:c8:0c:a7:77:
a1:26:33:21:f4:b6:23:d0:f1:92:db:bd:e1:72:43:ef:c6:77:
7b:ed:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:21 2025 by rpki-client