Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/54EDB8542E1811EBB4E80B1FC4F9AE02.roa
File: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (raw, json)
Hash identifier: vez5gs+Pt4ya6YLdOueO0QMF6IGNEZr0U1SUVMLX8CY=
Subject key identifier: 03:D8:4B:5D:F1:59:13:C4:0F:CC:B5:A9:9D:49:08:63:AD:47:3B:17
Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial: 09C8
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/54EDB8542E1811EBB4E80B1FC4F9AE02.roa
Signing time: Mon 18 Mar 2024 20:49:02 +0000
ROA not before: Mon 18 Mar 2024 20:49:02 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 4628
IP address blocks: 192.154.17.0/24 maxlen: 24
192.154.18.0/23 maxlen: 24
192.154.20.0/22 maxlen: 24
192.169.32.0/24 maxlen: 24
192.169.34.0/24 maxlen: 24
192.169.37.0/24 maxlen: 24
192.169.38.0/24 maxlen: 24
192.169.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2504 (0x9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Validity
Not Before: Mar 18 20:49:02 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f8a8be-6a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:df:5b:aa:8b:7b:1f:5e:34:85:9b:08:43:
2b:7a:f8:8d:ba:7b:a1:02:5a:fd:44:dc:e5:72:77:
a3:5e:4b:c8:75:50:af:05:4d:6a:08:23:62:b6:90:
c7:e4:72:66:60:61:aa:43:20:1e:ab:01:e4:2b:e1:
1b:a2:09:17:ef:27:2e:84:cc:f4:9a:75:9b:9b:dd:
b1:28:e8:c7:0c:b6:97:9f:33:c8:56:8a:40:59:47:
8f:b7:5b:81:98:61:d2:cb:b0:95:b9:75:57:c4:65:
db:42:5d:83:77:68:a2:aa:34:c7:b7:7f:4a:5b:a0:
83:36:a9:f0:46:6b:48:3e:b5:0c:04:17:66:e2:54:
ae:80:01:ec:71:b4:6e:c3:20:8b:09:03:66:7a:67:
d6:33:8e:21:c2:f9:a9:af:b9:4e:8d:60:f9:a4:5c:
1c:45:c1:1a:d3:9d:a0:2a:a9:8c:bd:bf:74:54:d6:
8a:10:29:9b:08:4d:57:02:90:8c:97:75:2d:cf:17:
94:f1:9e:f1:01:7b:1b:6f:27:d2:04:e8:35:00:6d:
97:56:71:d4:08:aa:7b:ff:f1:f7:c1:da:ea:42:cd:
b2:b1:84:c3:73:7a:d6:37:f2:65:7b:38:26:03:7b:
ec:66:91:c7:06:53:da:85:c0:2a:e5:02:37:88:ea:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:4B:5D:F1:59:13:C4:0F:CC:B5:A9:9D:49:08:63:AD:47:3B:17
X509v3 Authority Key Identifier:
keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/54EDB8542E1811EBB4E80B1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.154.17.0-192.154.23.255
192.169.32.0/24
192.169.34.0/24
192.169.37.0-192.169.38.255
192.169.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:98:9f:3d:96:d8:0d:2e:65:74:51:c2:40:60:b3:96:3f:72:
ed:83:a9:e6:62:06:32:db:a8:0e:12:c4:06:3b:59:77:7e:a2:
4b:0b:55:68:50:fa:0b:46:f2:7b:85:27:25:c2:a9:f1:09:2c:
61:a0:86:ba:e2:05:11:46:c9:c0:db:4a:ac:4e:9e:14:b8:4b:
3c:fc:33:58:4b:0c:ce:f9:e8:a1:b1:c6:16:3a:16:80:04:fe:
7f:55:d0:9e:d5:df:7f:c8:33:35:bd:1f:7d:9e:6b:d5:04:14:
4c:10:2b:dd:63:06:52:3e:a7:a0:25:f1:55:24:ab:c3:54:7b:
0b:f7:05:de:61:12:63:86:05:bd:f1:0c:0a:36:75:56:7d:13:
9d:a2:b8:d0:2b:15:d2:bd:fa:ab:b0:df:55:4f:11:da:ce:94:
f4:be:e6:1b:36:e7:2d:66:93:74:93:5c:58:9c:88:92:fd:75:
ed:dc:03:c2:bc:51:a7:34:dd:3c:14:e9:e7:64:6e:be:ee:db:
72:62:58:0e:78:1b:cf:46:29:b5:f2:62:f1:c9:16:21:3b:3a:
ea:76:69:b0:55:72:03:fa:72:88:88:1c:8a:af:38:6c:16:fa:
40:37:f7:e6:f4:46:09:1c:b0:d1:da:fc:ee:e8:21:6e:23:6d:
0b:08:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:58:01 2025 by rpki-client