Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa
File: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (raw, json)
Hash identifier: +idkc0Y+TplJvB7T7xrVzyMgw/UlYDqH1h1gbH9ycfU=
Subject key identifier: 7C:51:4E:CA:6D:E4:99:60:E0:B8:11:A6:0A:CD:AA:5E:56:20:CC:B8
Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Certificate serial: B0
Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa
Signing time: Wed 18 Sep 2024 10:57:34 +0000
ROA not before: Wed 18 Sep 2024 10:57:34 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 36007
IP address blocks: 45.130.164.0/24 maxlen: 24
45.130.165.0/24 maxlen: 24
45.130.166.0/24 maxlen: 24
45.130.167.0/24 maxlen: 24
45.151.152.0/24 maxlen: 24
45.151.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Validity
Not Before: Sep 18 10:57:34 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66eab21d-8ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:8c:ff:69:4d:11:38:1a:9c:cb:a4:b1:89:
26:c2:58:bc:a5:9f:8d:8e:9d:44:ce:c9:e4:8f:77:
17:e6:e5:41:6b:7c:6d:1f:04:49:04:ef:91:f2:ae:
67:17:97:06:a1:9a:bb:4b:13:bf:a2:b4:f1:c5:a9:
19:3d:0f:18:d4:cd:6f:7b:0f:b1:da:e5:5c:a6:6a:
de:b3:bc:c8:d2:73:61:1d:3e:7d:38:cd:a2:c0:80:
4f:ae:86:fb:57:6a:4e:94:6d:41:c9:b4:14:15:91:
6c:32:02:93:b0:2b:5f:ed:3c:c0:0a:ad:56:57:c6:
72:58:8f:bd:39:f1:c4:6e:b1:e9:54:50:94:57:47:
50:37:aa:22:8d:b3:3a:06:54:19:37:cc:ee:15:d8:
03:bb:11:e6:1c:ea:1c:1b:c2:a5:61:bd:8b:53:01:
5d:9e:76:12:6c:3a:28:17:56:cf:1a:e4:96:ee:62:
7f:45:00:26:2e:71:94:23:aa:0a:43:6c:26:47:d8:
9c:e3:5b:8e:5f:bc:4f:79:f4:38:aa:d0:db:34:43:
44:42:9d:28:af:10:85:b0:61:25:57:e1:f7:ef:78:
d2:b3:a7:37:50:a2:ab:18:1b:4c:37:c1:d4:ed:95:
8e:69:39:66:2c:27:79:ed:c7:9b:25:73:4c:45:29:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:4E:CA:6D:E4:99:60:E0:B8:11:A6:0A:CD:AA:5E:56:20:CC:B8
X509v3 Authority Key Identifier:
keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.130.164.0/22
45.151.152.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:48:6c:de:64:85:96:cb:67:bb:45:1c:42:9c:10:eb:57:a1:
2b:47:33:60:e5:cc:ab:cf:be:51:f2:9b:fc:d2:e3:31:ec:61:
e4:80:5f:ae:88:9d:39:e9:96:15:13:34:72:bc:90:4f:ec:8f:
2c:f5:88:73:04:64:a6:40:6c:dd:19:da:f3:17:fb:db:fe:94:
fb:9c:a6:52:51:61:06:fa:cb:2e:9d:2d:65:18:74:89:e8:a6:
b3:c2:71:04:4f:95:c1:9d:5e:10:bf:d4:a1:75:96:9d:07:2f:
e1:ac:9a:43:38:75:5b:ab:f1:7a:0a:b2:55:75:39:39:58:74:
e4:b0:2e:af:37:05:78:9a:18:c8:6d:28:b5:e9:04:ae:cf:cf:
97:bc:aa:2a:1e:94:12:43:48:6f:82:48:e2:bb:16:69:f7:d7:
ac:b1:0f:27:b7:ba:78:f5:46:34:b6:1e:f3:3d:3a:38:f1:11:
2e:1c:ab:1a:fc:bd:9b:bf:8a:fb:77:7d:5d:54:01:94:80:25:
de:76:e5:19:f7:40:81:94:d1:51:28:2f:4f:a1:ab:90:17:32:
89:ec:60:4d:78:d7:2f:da:71:79:1f:44:67:9b:fc:ba:13:13:
93:e0:bb:7c:ed:b5:aa:c6:88:a7:58:4a:b8:58:79:b3:3b:eb:
06:5b:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:11 2025 by rpki-client