Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/71685FB25F6411EFB16D4552C4F9AE02.roa
File: 71685FB25F6411EFB16D4552C4F9AE02.roa (raw, json)
Hash identifier: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=
Subject key identifier: DA:F4:FB:67:8B:16:00:EC:C9:3E:73:B0:45:F6:A7:5E:24:FE:7F:61
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 30
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/71685FB25F6411EFB16D4552C4F9AE02.roa
Signing time: Wed 09 Oct 2024 06:49:45 +0000
ROA not before: Wed 09 Oct 2024 06:49:44 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 14618
IP address blocks: 192.206.156.0/24 maxlen: 24
192.206.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Oct 9 06:49:44 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67062788-388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:e9:63:50:37:d1:b5:53:42:62:21:3d:88:
39:48:cb:3e:28:e9:0f:64:31:2a:89:44:6c:b8:ce:
12:2e:7c:e9:ee:d6:2e:44:d5:e1:3f:f4:d9:c8:f1:
ba:a0:04:3a:3a:dc:c2:99:ad:ad:67:a5:6e:46:16:
a3:3f:22:72:fc:ed:40:58:43:e1:40:18:1f:29:ea:
83:4e:c8:99:a5:d8:23:ca:ca:6c:c1:51:b5:2a:c9:
5c:f8:55:fb:34:42:07:62:47:90:c8:46:19:12:98:
16:c3:3f:1f:a0:4a:fe:a4:8f:d3:84:76:eb:56:87:
b6:1a:18:07:95:da:7a:a6:a6:c1:5b:8b:e2:26:7e:
53:53:ae:d1:4c:ed:84:13:e6:5c:5b:3c:2a:64:73:
e5:d4:e4:50:f5:44:f5:63:d1:3a:e0:a7:ed:c9:de:
cd:bd:e5:98:dd:ea:fe:42:dc:a2:3c:9f:c5:e3:ea:
51:ff:05:60:3c:15:c8:c8:47:7c:30:1a:8d:85:bc:
5a:cb:38:7c:f7:9f:1d:d3:84:ab:3d:87:66:a2:7a:
ba:ef:a7:c2:ac:3a:54:48:fa:b2:02:5c:81:e7:ca:
5b:28:73:82:c2:05:4a:2e:62:0c:f0:d1:f4:26:85:
7d:33:80:f7:48:75:cf:de:8a:37:42:cf:7c:ad:66:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F4:FB:67:8B:16:00:EC:C9:3E:73:B0:45:F6:A7:5E:24:FE:7F:61
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/71685FB25F6411EFB16D4552C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.206.156.0/23
Signature Algorithm: sha256WithRSAEncryption
00:43:49:63:40:3b:3c:6f:49:ff:c2:19:9a:d2:71:35:9a:e2:
41:2b:31:9f:45:89:68:41:3a:e9:ad:c5:59:22:99:dd:8b:70:
90:90:a5:50:c3:5b:7b:3f:b4:93:4c:d8:f1:8e:88:58:f3:85:
00:9c:6d:e9:c3:dc:70:79:a2:23:43:47:0c:da:ad:e7:38:b3:
8d:06:f6:d4:71:ae:28:c6:46:e5:fe:1d:d8:f0:4c:cc:6f:7f:
d4:c9:72:e9:22:ad:ae:e6:1d:29:39:1c:c1:a6:e9:1d:a3:3f:
11:0b:a2:f3:7d:ed:0d:10:aa:1c:fb:4f:1c:29:91:19:4a:f4:
a2:34:cf:13:36:b1:fb:99:b6:12:82:03:82:12:b2:c8:fb:1f:
3f:59:0f:b8:1b:86:61:6c:5d:ed:15:1c:10:1e:1c:83:35:87:
22:57:6f:dc:a8:10:91:e6:ea:bf:f8:ed:2c:65:5d:b6:9e:25:
05:e5:a2:4a:86:d7:a3:3b:ed:4f:80:c9:df:85:9a:85:dd:d3:
68:88:db:87:b0:59:c1:80:c5:3b:d5:bc:ad:1f:95:5b:61:f8:
c5:90:b8:f8:a7:aa:9a:ec:73:a5:d0:6b:9d:37:0d:6d:f4:5e:
78:53:06:62:ab:0e:9f:62:25:ee:ce:92:fe:62:cd:85:83:a9:
e0:54:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:34:17 2025 by rpki-client