Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
File: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (raw, json)
Hash identifier: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=
Subject key identifier: D3:AB:43:D4:23:1D:76:60:72:A4:75:C8:CF:2E:7A:54:C7:F5:1A:58
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 31
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
Signing time: Wed 09 Oct 2024 06:49:45 +0000
ROA not before: Wed 09 Oct 2024 06:49:45 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 16509
IP address blocks: 192.206.156.0/24 maxlen: 24
192.206.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Oct 9 06:49:45 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67062789-0f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:56:d7:ab:54:be:ea:53:ed:53:82:48:1a:
94:4c:23:80:b1:44:90:61:28:7f:b9:78:45:ae:72:
04:ed:ff:00:a4:b0:37:cf:4f:43:b9:c5:bf:e7:fa:
47:ba:96:50:cf:eb:43:27:fa:38:3c:80:1f:67:65:
21:f9:57:35:f9:b6:22:6e:87:c7:87:27:d5:ac:bb:
59:16:77:f0:86:32:7c:69:a0:d1:cd:08:ba:50:17:
df:64:7d:5d:98:14:33:0f:17:b7:74:d9:e3:66:3d:
12:3d:55:cd:6c:5c:e2:0d:ce:9f:51:9e:1a:fc:6c:
df:ff:ae:d9:85:99:9b:61:1d:df:b7:24:6f:01:fb:
d0:50:92:5d:f9:4d:5e:68:35:bf:b3:ac:2e:3d:7c:
5e:f6:4e:43:6f:02:86:bf:96:7c:2e:19:e6:33:9e:
b8:4c:c4:25:72:27:76:2e:70:17:d4:9d:36:ca:8b:
5d:ad:f5:cd:9c:d6:60:25:9f:a4:b8:0b:72:6e:a2:
5d:79:31:01:c1:eb:d8:81:a1:33:c8:62:e9:67:03:
93:03:d0:45:95:4d:3a:00:15:aa:04:3f:bd:52:ce:
9e:c5:6c:ea:8f:70:93:70:81:e0:af:50:b8:94:19:
28:82:de:94:cc:92:8b:8c:98:1b:95:b0:79:be:d5:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:43:D4:23:1D:76:60:72:A4:75:C8:CF:2E:7A:54:C7:F5:1A:58
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.206.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:e1:4e:f0:50:58:3a:6f:1c:d5:85:ef:05:db:21:96:47:5c:
07:c6:13:7b:81:8a:6e:e7:aa:5a:1a:fa:a7:37:d8:d3:4e:0e:
db:93:4a:2e:eb:e5:ed:07:d0:f0:90:3f:a3:f5:8e:85:20:09:
14:75:0b:8c:40:74:5c:ce:ac:c4:e4:0b:6c:d0:c4:02:fd:e0:
05:4c:4b:33:b4:88:52:86:27:19:71:f3:c4:f7:91:e2:ee:ab:
d8:15:dd:52:94:6f:0c:fe:5b:b7:29:32:cf:48:12:4f:97:74:
f4:2f:b3:4f:54:97:86:26:ea:dc:53:92:a7:fe:ea:43:8d:bb:
c7:24:64:b1:1d:12:d2:33:84:30:df:65:fc:6f:c9:f5:fb:24:
90:d4:14:15:fa:c7:1b:e9:bf:73:23:59:82:1f:bb:0f:16:50:
0c:81:e0:ee:8d:97:7a:05:fc:5d:89:6b:07:f4:2e:cb:39:8a:
1c:67:ac:17:36:b7:3d:d4:07:74:8f:0f:1a:96:9c:09:77:7d:
ff:ee:8d:f3:31:ff:64:b7:ee:ca:14:36:81:8e:05:17:8c:97:
3f:99:93:d8:a6:57:b9:aa:41:a8:8b:eb:ed:57:7f:4b:49:9b:
99:67:02:80:ee:f7:23:2b:a4:8c:d6:f2:69:99:e0:a5:59:9b:
d4:5b:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:21:31 2025 by rpki-client