Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa
File: BE6B7B76337911EA8016C03DC4F9AE02.roa (raw, json)
Hash identifier: t0t2H41OSs9bcuWnHLre1o5kYbLG5xg69/nQyymgcE4=
Subject key identifier: D1:ED:BC:2C:1A:E3:97:BE:66:CB:31:1F:15:38:0B:F8:A4:63:4A:3A
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 34B4
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa
Signing time: Fri 24 Jan 2025 16:02:13 +0000
ROA not before: Fri 24 Jan 2025 16:02:13 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132651
IP address blocks: 175.184.236.0/22 maxlen: 22
175.184.236.0/24 maxlen: 24
175.184.237.0/24 maxlen: 24
175.184.238.0/24 maxlen: 24
175.184.239.0/24 maxlen: 24
2403:ba00:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13492 (0x34b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 24 16:02:13 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6793b985-b417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:92:c8:b7:a9:5d:96:3b:0e:1e:8a:63:02:
54:bb:18:bb:bd:3c:14:ca:93:b2:6a:65:0e:0a:d0:
9d:6f:fd:52:c5:13:2b:95:0a:08:04:45:db:ee:44:
82:53:b8:4c:3c:63:92:10:3c:1d:9a:f1:6f:d2:62:
ba:70:6a:97:e1:82:c3:91:21:0b:3c:97:dd:b5:84:
97:7f:01:d9:fa:f8:5d:96:97:e8:53:4a:6a:90:48:
5f:2c:bb:52:3c:66:5a:ae:e9:fd:26:ef:64:9d:8b:
c3:29:36:21:02:7f:f6:fb:3b:54:54:56:ca:ca:1a:
8e:10:49:f6:7b:be:9f:ae:e7:68:81:b5:1b:9e:65:
59:c8:67:9a:af:d7:b7:1b:b3:7b:55:e3:60:de:e3:
35:37:ee:46:08:ec:34:ee:fa:cb:dd:29:b9:81:57:
24:22:35:fd:f3:8f:36:77:6c:b5:e8:e7:f1:7f:9c:
ad:9a:e8:2a:4e:a6:bc:42:43:c2:db:2e:36:13:89:
d8:bd:d3:80:01:ce:5e:ab:7d:3a:fa:c1:ab:04:eb:
d8:d6:de:95:ac:a3:ea:ba:4a:65:74:1a:dd:58:6a:
0d:4d:21:d6:e7:54:d0:55:4d:32:fc:16:0d:69:72:
f1:8c:cb:af:57:cd:6d:a0:c9:38:0c:f9:a5:86:d8:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:BC:2C:1A:E3:97:BE:66:CB:31:1F:15:38:0B:F8:A4:63:4A:3A
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.184.236.0/22
IPv6:
2403:ba00:2000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:78:ac:bc:89:d5:aa:f8:92:a6:2e:43:b0:92:05:77:34:bc:
fc:9f:96:5c:e4:c6:00:7a:41:41:e4:e0:a3:41:38:57:b7:33:
2f:4d:b4:a2:c1:67:6e:88:13:fe:bc:d7:04:f3:5c:30:ae:37:
72:8c:c5:20:48:b1:6a:fa:4b:f4:73:62:0b:aa:d2:f8:e6:63:
e5:e2:54:ff:b3:87:4d:82:1a:ca:e3:a5:f7:05:57:dc:a0:cd:
19:17:14:7b:b2:a0:91:a6:f8:25:53:d2:e2:31:18:fd:f9:ec:
e4:ba:27:c9:52:c1:65:80:50:ee:bd:bd:06:77:66:bb:66:1c:
f5:58:b6:2e:6f:49:53:68:09:a2:5a:9c:20:a4:7f:20:94:5e:
38:4d:0f:83:df:be:c0:51:dc:13:48:4d:a5:50:39:7b:f7:7f:
4c:b2:8d:e0:4c:aa:db:37:bd:1c:4d:48:b0:bb:e7:de:ac:1e:
ec:e1:cf:50:bd:8e:99:08:4d:c3:80:11:b6:0c:d7:0d:13:28:
01:12:39:f3:9f:67:8b:49:88:67:17:8d:97:2c:f9:ac:3b:ad:
9b:da:5b:7a:f8:a9:94:5e:56:5c:25:a7:80:90:41:36:88:f6:
78:45:1d:1f:1d:47:62:7d:4b:0c:b3:25:1a:40:97:d7:30:0b:
7d:6f:c4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:13:16 2025 by rpki-client