Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa
File: 8A9A4734854211EB9DAFD045C4F9AE02.roa (raw, json)
Hash identifier: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I=
Subject key identifier: 93:E9:1B:C4:53:7C:B7:6E:D6:B5:FB:D8:32:06:B2:B5:2B:B3:87:27
Certificate issuer: /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
Certificate serial: 0604
Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa
Signing time: Fri 06 Dec 2024 22:41:37 +0000
ROA not before: Fri 06 Dec 2024 22:41:37 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 55861
IP address blocks: 49.143.224.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1540 (0x604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
Validity
Not Before: Dec 6 22:41:37 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67537da1-7644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:fd:7f:95:b7:81:8a:ae:51:78:22:10:5e:
3c:c0:66:b6:a0:41:0d:23:3d:35:3f:48:f4:1e:76:
ee:54:b8:a5:81:49:d0:d7:58:05:55:a8:26:de:1f:
af:3b:cf:f6:d5:d5:7a:99:25:5b:bb:56:ab:e0:20:
f3:ff:79:31:a6:80:d4:bb:aa:1a:fe:f9:76:e7:f3:
21:d1:fd:8f:4e:a6:f9:d7:06:10:84:c1:b3:9a:81:
c7:8f:c7:af:e5:6d:df:19:00:8b:99:8e:f9:10:3d:
9b:3c:ca:71:e0:1d:c2:c2:0b:92:b4:4c:3a:61:f5:
c2:51:9f:6c:9d:6b:bf:be:4a:3b:75:b1:12:d8:f6:
e8:93:ea:c5:7f:7f:76:fa:e1:bb:0a:1d:32:e1:55:
6b:bd:f4:06:7b:19:b7:a7:8a:be:ec:f2:6e:1c:b0:
39:97:6e:71:e8:a9:9d:4d:11:bb:c6:13:b4:f8:cb:
b3:f7:e1:ab:93:c5:65:9e:a1:5b:40:eb:05:fb:b5:
5e:76:f0:2d:d8:f1:f8:67:0a:5d:5b:60:d3:c4:85:
75:c4:aa:7d:14:b4:a5:0f:47:da:e6:db:67:13:8b:
0a:7b:c0:4a:d2:84:50:73:32:9d:fd:ea:74:a7:fc:
a9:e0:6c:61:3e:61:3c:d2:87:de:93:d0:d6:d4:81:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E9:1B:C4:53:7C:B7:6E:D6:B5:FB:D8:32:06:B2:B5:2B:B3:87:27
X509v3 Authority Key Identifier:
keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.143.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:67:7f:18:cd:32:0a:f3:bb:80:09:19:28:24:ec:b2:2c:0a:
ae:32:23:e6:51:45:fa:8b:e1:62:3f:5a:d3:e9:22:c3:57:3b:
64:ac:f4:c1:e3:45:04:91:6c:2d:bc:99:af:69:a0:1c:c2:3d:
30:29:f3:7f:fc:d5:5f:5e:82:69:9f:0b:29:9b:0e:e6:a4:01:
b9:4b:31:dc:3f:a7:79:5e:2b:04:8e:1d:29:a3:5f:53:f0:da:
ec:c6:a6:22:04:66:dc:fb:7d:a5:0d:3a:62:39:0c:e3:dd:d6:
df:c6:e5:19:37:bb:9a:79:48:32:4f:3d:81:7a:d5:81:82:57:
1a:b1:9a:e0:dc:d2:b0:58:6b:aa:8c:9c:85:c6:25:29:7f:65:
bf:e4:99:0a:53:c9:bb:97:7f:6f:af:05:c1:31:9c:5c:cf:26:
b2:55:24:f4:ec:f3:ab:bc:91:8e:be:94:93:2a:c5:9b:13:f7:
3d:b5:03:22:3f:d3:e5:3e:c0:df:7b:4b:f8:e8:24:c3:d4:4f:
dd:e1:83:ae:42:af:8f:88:3a:5b:89:fe:93:43:11:a7:a1:16:
57:63:b7:b2:c6:87:e3:85:0b:f5:f5:4d:97:a1:59:7d:0c:11:
3e:0b:56:2c:92:75:a1:d6:fe:1b:26:a0:82:61:84:83:9d:aa:
f0:cd:09:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:46 2025 by rpki-client