Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa
File: F4D5953246AF11E9A68E7652C4F9AE02.roa (raw, json)
Hash identifier: vZxHW9v+mlkDb36aKmwFEOVDkr5RgcxOUaNZsIkNej4=
Subject key identifier: B5:54:A1:F0:DB:ED:67:37:46:E7:F1:35:94:FC:AA:21:3C:BA:E8:24
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 0F7A
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa
Signing time: Thu 02 May 2024 18:36:41 +0000
ROA not before: Thu 02 May 2024 18:36:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10152
IP address blocks: 147.76.0.0/24 maxlen: 24
147.76.1.0/24 maxlen: 24
147.76.51.0/24 maxlen: 24
147.76.180.0/24 maxlen: 24
147.76.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3962 (0xf7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: May 2 18:36:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6633dd39-9238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:6d:4c:ef:c5:4d:c1:f1:0d:74:84:83:03:
9f:23:ce:e0:d4:53:cd:64:d3:39:bc:b8:66:30:89:
dd:e0:67:30:9c:ba:a4:65:0a:26:6a:2e:4b:6a:25:
80:c8:ad:af:27:2b:54:a6:e0:a3:da:f3:0e:66:45:
13:b8:cc:70:76:35:ad:2a:0e:c6:da:54:04:4b:57:
09:a5:27:20:b5:3e:3c:5f:40:aa:9e:c7:16:c8:ed:
a1:7f:db:b3:75:e0:76:ee:3e:9f:0d:db:22:2c:46:
2e:74:e2:f6:89:d3:f6:66:c3:6e:70:d6:6b:c9:c8:
ec:9c:4f:c8:60:73:44:51:18:c7:0d:dd:ba:03:3a:
2a:25:ed:9c:07:3b:51:a4:1b:3f:80:d1:d1:8d:23:
7f:47:e0:db:06:2a:49:9a:ce:c3:a9:f5:e6:a0:81:
73:e5:b8:7b:9a:b7:e9:36:5d:c8:fa:fc:25:23:30:
18:c2:fa:a7:d1:ba:db:3d:e1:77:78:90:88:a6:c0:
65:70:9c:fe:5f:c4:fc:6e:61:2b:b8:93:18:12:d0:
5f:6a:cf:43:ed:0d:db:d8:4b:8b:cb:bf:69:2d:5f:
ec:ed:e5:25:22:fc:d2:f4:35:26:40:72:b7:25:f7:
44:53:04:9d:b0:da:57:08:c9:5e:0e:77:4c:6a:14:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:A1:F0:DB:ED:67:37:46:E7:F1:35:94:FC:AA:21:3C:BA:E8:24
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.76.0.0/23
147.76.51.0/24
147.76.180.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:5a:41:3f:10:d2:bf:be:b5:1b:47:3e:79:c2:8f:5e:d6:24:
a5:48:64:11:48:99:33:4f:47:9a:99:5a:cd:98:50:42:a0:56:
50:0a:25:af:71:24:1a:98:05:8d:40:4e:9f:0f:3f:aa:02:a4:
aa:18:9c:cb:74:9d:9b:cc:77:3a:c7:7b:a6:1e:aa:56:44:16:
c0:58:41:7a:64:0f:9c:89:95:e6:20:48:06:39:b1:31:6f:a8:
2d:de:02:c8:87:eb:8b:34:7c:41:40:de:10:26:79:2f:e6:ab:
3d:eb:97:02:67:be:1c:c8:9e:3d:a9:ab:1a:4f:0a:e4:04:66:
85:4c:6c:1d:63:67:b9:d2:aa:0a:15:34:d5:d9:01:88:c5:4b:
4c:6a:95:47:90:c1:f8:d6:38:6d:3c:77:f0:a2:a3:8e:13:ff:
1e:b4:64:e1:c1:c6:b4:17:fc:c6:6a:7e:e3:c9:ac:58:de:34:
36:1f:a4:e3:f0:57:80:32:3c:1d:b3:87:2b:7f:b7:e0:6d:b1:
a0:6a:8f:cc:f6:cf:f4:ae:2a:90:38:64:9f:5e:7f:58:f8:8e:
0b:5d:96:83:e2:97:ed:27:14:95:c5:f1:7c:4e:a5:70:a6:d9:
77:cd:20:e0:98:e4:76:32:6a:1b:31:61:a7:1c:34:64:f9:50:
94:e8:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:41:27 2025 by rpki-client