Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
File: 866314EE5FCC11EF8416052EC4F9AE02.roa (raw, json)
Hash identifier: 3AqN5CbYpWEtnxWi7Et2B3/yQBF6JM8e4+/OE5L6X9w=
Subject key identifier: B7:92:ED:48:34:0C:38:C0:4F:50:DE:93:8A:C3:26:C1:8B:D2:5B:E3
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 07
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
Signing time: Wed 21 Aug 2024 14:49:10 +0000
ROA not before: Wed 21 Aug 2024 14:49:10 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 16509
IP address blocks: 64.251.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Aug 21 14:49:10 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66c5fe66-5def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:65:5b:2d:78:d2:62:25:d7:11:4d:89:06:
3f:d9:53:12:8c:67:8d:99:a0:61:9b:3b:b1:e0:ef:
1d:f4:f1:40:a8:5c:e3:4e:c7:8e:d3:a9:52:95:8d:
1f:6a:43:8d:d8:25:ff:cd:2a:c9:fc:cb:2a:6c:11:
02:6a:68:73:c6:27:ce:56:67:2e:52:62:b3:6e:b7:
f3:ee:50:4c:01:5d:d2:39:52:7a:40:e0:bb:3c:42:
e6:4e:b5:ef:7a:2c:87:bb:46:5f:6b:0a:44:95:30:
30:b2:6a:6e:ec:29:92:e5:d0:a1:9e:2b:7f:42:87:
81:7f:f1:6a:9a:89:58:89:4b:ab:95:ab:b7:d0:e4:
ce:b8:38:5d:94:ed:04:c8:4d:8d:8d:30:28:a2:e3:
1a:6e:24:64:87:65:41:d4:92:dd:25:f2:83:78:9a:
3f:ec:03:b1:bf:5f:30:bd:23:90:e4:9f:1b:1c:39:
41:84:bd:10:71:d1:49:2e:aa:c3:2f:44:62:8f:d4:
0c:20:f8:8d:1c:58:ad:05:70:ed:d5:94:56:9a:67:
12:d8:bd:37:dc:59:9f:d7:ba:7d:7e:37:28:9b:fc:
d1:d5:e7:f4:d2:10:c5:53:8c:27:c2:0d:8c:42:db:
16:45:7b:86:dd:82:bd:74:2f:43:f6:ca:db:20:55:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:ED:48:34:0C:38:C0:4F:50:DE:93:8A:C3:26:C1:8B:D2:5B:E3
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.251.192.0/21
Signature Algorithm: sha256WithRSAEncryption
19:62:8d:71:01:bd:f3:23:2e:db:72:a6:ca:ee:71:31:74:55:
f1:6d:5a:04:df:1e:33:a9:61:48:d1:54:24:72:83:21:db:ad:
24:4a:55:87:ef:05:8b:c1:ee:69:0b:f4:19:ba:d0:12:4b:9c:
f9:d1:08:bf:60:e6:26:61:a2:67:f2:6f:27:be:cd:02:e4:94:
04:b9:c4:1b:22:3d:9a:d3:7f:9a:e1:3d:e1:71:2b:62:de:da:
c3:67:6a:16:33:74:40:7f:ab:a7:bc:4e:c9:68:bf:90:41:2d:
2d:03:e3:78:d7:47:f3:5c:8e:d7:75:eb:3d:81:74:ba:2b:d7:
00:78:99:e6:c8:a9:a4:97:71:4d:ff:7e:fe:50:56:ba:26:98:
87:f3:86:51:80:3d:34:0e:96:e5:86:73:44:41:88:bb:30:29:
0c:0e:be:b2:bd:61:10:a0:ba:64:e8:b2:57:64:d3:1d:f3:08:
d5:ec:f2:c0:bf:6b:91:a3:3c:3e:77:2e:9a:b0:da:97:ce:95:
b2:29:75:b8:74:0c:27:43:d2:23:3a:61:a9:53:dd:9e:2c:7e:
ba:59:8b:4e:d1:38:28:de:e3:86:da:ba:0d:c6:ca:5d:56:f8:
eb:eb:30:8e:cb:fe:eb:33:16:66:76:cc:09:e5:2a:7e:57:7e:
f6:d1:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:46:04 2025 by rpki-client