Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
File: 31745126CD1811EC917CB819C4F9AE02.roa (raw, json)
Hash identifier: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=
Subject key identifier: 66:8B:EC:21:C6:21:E6:2F:1D:01:7D:56:8E:9B:FB:19:F5:67:4B:53
Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial: 3498
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
Signing time: Sat 02 Nov 2024 14:50:51 +0000
ROA not before: Sat 02 Nov 2024 14:50:51 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 38187
IP address blocks: 182.54.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13464 (0x3498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Validity
Not Before: Nov 2 14:50:51 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67263c4b-44c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:32:ff:54:d2:cd:44:9f:60:6b:d0:68:28:
c2:17:77:42:8c:b0:15:90:3c:5e:1f:d0:79:f9:a2:
85:c0:3f:c2:84:86:27:2a:dc:e1:52:f5:72:7a:a2:
23:a3:d9:cc:2b:ed:30:d6:4b:55:fb:af:f6:a9:03:
e5:42:cf:69:fa:16:4a:d8:37:da:9d:32:b7:b1:d1:
43:9d:92:8b:f8:e9:2b:e1:df:d1:18:ff:18:c6:85:
c6:26:52:6d:a1:00:4b:5b:c6:05:17:b8:f1:b9:94:
81:e7:ef:d9:90:54:26:d5:5a:01:5b:cf:18:91:59:
03:21:6c:7b:43:b3:52:8e:98:09:a0:39:c2:46:6f:
e6:17:06:df:11:0c:11:c7:80:51:e5:bc:26:13:33:
6a:ba:ad:e9:b0:81:fe:dc:4c:1e:35:d4:d0:9c:a2:
55:a4:14:a6:2a:d9:1e:15:ce:c5:40:43:26:b7:f9:
9d:e0:68:93:3a:e9:6c:32:79:5c:79:9a:f1:06:aa:
5f:a1:f1:c9:2a:7d:ee:43:c6:32:3a:7b:20:64:39:
b4:d9:5f:c2:d9:5d:72:34:01:e4:16:84:a1:b2:4e:
9e:ee:58:4e:c8:fe:fa:ef:fa:57:29:35:42:a6:f0:
c3:2e:3b:eb:88:e9:61:09:14:e5:4d:2f:c4:e2:bd:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8B:EC:21:C6:21:E6:2F:1D:01:7D:56:8E:9B:FB:19:F5:67:4B:53
X509v3 Authority Key Identifier:
keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.54.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:39:6e:85:83:61:2a:fb:65:08:1c:3a:55:88:e3:6d:25:d5:
9d:a0:a0:72:4e:b8:2f:a5:b4:5f:68:96:79:b6:d0:a9:40:25:
f3:f8:be:24:ef:0a:45:52:04:c1:7a:d4:40:af:a4:db:6e:80:
52:3e:99:4e:94:de:a3:57:c3:e4:10:08:d1:38:b8:b8:a7:fa:
a0:23:cc:e1:b7:71:6c:70:35:b2:02:1f:bf:58:9d:43:36:6c:
2f:03:c3:21:ab:a5:e1:1f:82:7d:cc:41:ce:35:c4:7a:51:de:
37:df:b9:10:a0:3c:71:60:da:64:f3:7b:82:2e:c3:c7:01:a8:
94:39:c6:0c:95:8d:1d:bb:2c:5c:5d:fc:da:56:63:f1:15:89:
69:f7:5e:e3:f6:4a:d3:f6:74:b6:32:4b:8d:60:66:2e:75:62:
09:ec:14:26:b6:fc:11:07:14:32:c9:ab:ee:ae:b8:93:b3:e6:
24:e5:6c:73:14:e4:81:f8:2e:19:b4:29:aa:69:8d:b4:e6:1a:
e4:df:b7:41:13:d8:d3:0e:e0:5f:36:f9:01:d2:0b:7d:4e:17:
e9:ef:a1:0b:4a:09:01:32:ad:e4:32:70:c4:9f:49:af:d3:41:
c2:a1:f6:7e:79:43:07:73:8a:4b:74:e3:df:3b:33:12:45:de:
e5:a1:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:09 2025 by rpki-client