Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0F106C42E9BF11EB9287F045C4F9AE02.roa
File: 0F106C42E9BF11EB9287F045C4F9AE02.roa (raw, json)
Hash identifier: a6iV+VdvATPTvUTvrvtJWIJfp3l1+BdYBIr8MaPpp8I=
Subject key identifier: 78:77:F0:32:B4:63:F6:9B:8B:9D:F1:40:55:50:B2:90:C0:FD:0E:2E
Certificate issuer: /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial: 0490
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0F106C42E9BF11EB9287F045C4F9AE02.roa
Signing time: Tue 09 Apr 2024 01:03:16 +0000
ROA not before: Tue 09 Apr 2024 01:03:16 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9408
IP address blocks: 192.69.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Validity
Not Before: Apr 9 01:03:16 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=661493d3-1c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:0d:95:b3:14:96:86:f7:1e:97:82:a5:a7:
4f:f1:69:d4:49:4c:27:78:56:ee:fe:5b:d9:ef:c4:
e4:5c:60:6e:7f:33:21:ad:20:7b:05:18:6d:dc:67:
ee:5d:4f:cd:12:7e:01:69:89:41:d1:e6:51:c1:c0:
81:33:d4:f2:59:de:2c:60:d7:87:56:98:fb:4b:8c:
a1:f6:3b:fb:41:a6:d1:63:a6:06:89:74:9f:29:57:
63:ba:c6:8c:b2:9f:4d:a6:65:d2:9a:aa:c8:34:64:
5e:ab:76:83:85:a8:2b:1d:0b:2b:2d:b8:f6:8e:41:
a7:10:da:e9:7c:4c:c8:03:a2:1b:c3:c8:95:f6:d0:
b1:33:6a:a3:4c:99:03:e3:3e:24:44:d5:bb:2d:9e:
1c:1a:97:ac:35:82:ba:f1:83:ea:cf:0f:34:cb:ec:
f0:84:ca:50:cf:23:d8:c1:3e:5e:35:b3:ab:4f:6d:
b3:bf:bd:6a:be:ab:40:45:16:24:75:28:79:3c:c3:
37:dc:05:04:12:9a:bc:aa:a7:77:cd:c5:0a:dc:00:
3d:5a:6e:05:97:32:76:3a:19:d1:58:a9:11:33:bf:
ea:cb:aa:62:e9:8b:55:3a:ef:71:39:e5:89:49:f4:
0c:42:85:41:c4:df:19:3c:27:f9:1d:92:6f:49:2e:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:F0:32:B4:63:F6:9B:8B:9D:F1:40:55:50:B2:90:C0:FD:0E:2E
X509v3 Authority Key Identifier:
keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0F106C42E9BF11EB9287F045C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.69.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:63:ed:eb:1e:14:cd:94:9b:5b:86:ff:f0:7b:56:94:00:fe:
7e:ee:96:3f:a7:a9:b2:c6:37:29:ec:ec:b0:27:b1:29:c0:bd:
75:03:b2:f9:8b:c2:98:b5:86:4e:97:f2:2a:67:0a:14:98:6e:
33:04:2d:7c:7e:6c:46:b1:95:03:50:b8:af:06:f1:6a:20:41:
16:06:00:23:ba:1c:71:a8:58:44:4f:8d:6a:bd:0d:ad:cd:ae:
13:bf:30:3f:6d:67:c7:d0:64:cc:a9:3e:71:2b:31:25:8c:90:
2d:28:c0:9e:30:2f:58:18:dc:6f:60:10:15:76:7a:b6:e3:e8:
9b:b8:29:1e:28:bf:39:42:dd:9a:86:80:33:8d:ff:7c:60:97:
b7:3d:bc:c9:85:55:77:f3:b7:15:64:ac:0f:5a:e3:c0:e7:01:
29:0a:cc:14:d0:e2:e4:a7:40:d8:b7:76:d9:40:23:33:cf:64:
64:d6:17:9e:04:1d:4b:9b:98:38:80:d8:ff:17:c8:5e:69:e0:
9b:87:52:08:a5:e7:59:8d:04:bd:11:24:4b:94:bf:42:b2:8d:
1f:42:9a:43:4a:a4:b4:60:31:c9:b2:c8:ea:c2:bc:66:e0:1f:
8e:f3:db:cd:7d:b9:8e:cf:29:2b:7d:4a:fd:bf:3e:b7:60:3d:
0c:b4:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:16:58 2025 by rpki-client