Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
File: 5E46267A46B111E98B793856C4F9AE02.roa (raw, json)
Hash identifier: sVPaCSc2bcCAKD2poBldbcrhl65mJlc4QyQnO+jZmMc=
Subject key identifier: EC:E2:82:BF:CD:C2:DE:90:53:07:06:0E:80:FD:CB:7C:0B:3F:06:44
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 0F7B
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
Signing time: Thu 02 May 2024 18:36:42 +0000
ROA not before: Thu 02 May 2024 18:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136518
IP address blocks: 147.76.54.0/24 maxlen: 24
147.76.55.0/24 maxlen: 24
147.76.60.0/24 maxlen: 24
147.76.62.0/24 maxlen: 24
147.76.63.0/24 maxlen: 24
147.76.64.0/24 maxlen: 24
147.76.65.0/24 maxlen: 24
147.76.66.0/24 maxlen: 24
147.76.99.0/24 maxlen: 24
147.76.100.0/24 maxlen: 24
147.76.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3963 (0xf7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: May 2 18:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6633dd3a-e9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:0d:fd:d1:79:00:9c:bb:4c:76:6d:a0:44:
60:40:19:75:df:f5:95:2a:71:09:93:67:4a:e3:ee:
69:1e:b6:d9:7f:91:d7:7a:ac:31:ab:a7:92:1b:a6:
c3:0e:c8:52:04:a7:a8:81:b9:79:32:4d:e3:c9:bc:
d3:69:8e:4b:2b:6b:a9:41:59:29:2f:2f:2e:ee:a3:
44:b5:f6:3b:e3:db:70:f1:05:d7:be:42:f0:f4:30:
cf:6c:6e:be:2e:ff:7f:e4:9f:cb:7b:af:92:10:f3:
1e:53:54:26:13:9a:3a:49:8f:e5:5c:57:29:6f:55:
d5:71:4b:16:b9:8d:ef:93:9b:2e:5c:97:f7:45:ca:
f1:a2:f2:79:17:b2:14:c2:86:ee:ba:ec:b1:47:0f:
4c:ab:2e:93:54:16:06:f0:01:d8:85:0c:b8:fb:cf:
b4:d9:9f:85:29:7d:e1:f6:b1:10:f4:1a:eb:cb:e5:
e0:18:ee:ab:b3:8e:ce:b5:89:05:08:5d:f0:83:fe:
ce:77:76:b3:33:35:30:f5:9f:3f:d5:f5:c3:d1:fb:
e7:7c:5d:fc:2b:45:c1:07:de:54:50:c3:e3:a3:85:
0d:04:e5:37:57:a8:b3:6d:74:41:bb:7a:e4:81:e3:
f2:cb:08:22:b2:ce:16:52:48:c7:31:4a:09:4e:64:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:82:BF:CD:C2:DE:90:53:07:06:0E:80:FD:CB:7C:0B:3F:06:44
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.76.54.0/23
147.76.60.0/24
147.76.62.0-147.76.66.255
147.76.99.0-147.76.101.255
Signature Algorithm: sha256WithRSAEncryption
18:cc:ef:16:0c:b5:91:47:28:32:f0:f9:df:f9:dc:c3:00:41:
e3:54:1b:30:fe:f3:1e:21:5e:01:14:b0:03:38:ad:08:74:b8:
f2:99:59:9e:44:82:99:1a:84:3f:58:c9:4e:ca:9d:84:f6:3c:
ae:bc:da:2f:88:d8:fd:16:1f:fb:17:29:88:f8:8d:81:84:1a:
09:f3:5e:65:8a:53:c0:42:cf:3e:7c:78:8d:3b:56:c6:e8:e8:
ec:97:96:ec:74:f1:b9:aa:6d:87:3c:be:4e:2f:4d:09:86:34:
82:21:15:9e:77:91:fc:a9:23:dc:0b:23:84:49:70:09:d5:83:
c4:ac:fc:95:bf:d0:58:83:1b:94:8f:16:1e:59:6b:11:cd:52:
9e:b4:27:3e:45:ca:08:20:d7:9d:fa:6e:8f:a0:7e:7d:2e:8c:
78:b8:7b:a4:20:9c:4c:11:cd:b1:b1:28:bb:c7:ea:fd:0c:bc:
70:d1:ce:0e:2e:de:94:48:56:f1:1d:1c:9b:1c:f4:cb:7c:ea:
12:f4:31:30:42:f1:4c:35:79:1e:80:99:a8:92:c1:49:a6:d2:
58:6d:6d:3b:58:ba:37:81:9b:94:bc:74:ab:bb:38:1b:31:05:
a1:60:86:ba:8d:43:c3:49:85:55:1a:5f:3c:9b:fc:f3:2d:49:
5b:f6:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:01:00 2025 by rpki-client