Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa
File: 4426B244F6A011EC8E197883C4F9AE02.roa (raw, json)
Hash identifier: bBZfLoHpOK0OlB0OzQEVHa924CCG++Yge8OBC7CQuI4=
Subject key identifier: E0:12:10:33:AD:2A:59:72:BE:D6:A8:A2:59:83:64:2F:48:53:F2:B5
Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial: 11E3
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa
Signing time: Tue 02 Apr 2024 17:55:53 +0000
ROA not before: Tue 02 Apr 2024 17:55:53 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 55002
IP address blocks: 167.179.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4579 (0x11e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Validity
Not Before: Apr 2 17:55:53 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660c46a8-46d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:1f:42:b0:0c:6b:c8:34:f0:54:c2:06:1d:
ad:2c:08:89:89:fa:74:ba:8c:8a:8f:ca:a0:3d:3a:
1e:b2:6e:12:b7:80:e7:e1:f6:ef:03:e0:29:c1:24:
3b:e2:c1:41:24:86:c5:9c:79:e6:b7:5e:b1:9b:59:
8c:c3:e2:25:96:5c:ac:01:26:16:d2:01:26:d1:fc:
a9:0a:f3:44:53:1b:f3:48:76:17:91:40:43:7f:38:
48:bd:20:e2:3b:60:9b:fe:9d:8e:ad:df:32:56:f4:
fc:2e:43:2c:5e:f5:49:5f:86:3b:60:70:1e:8f:9d:
bc:6b:47:8b:18:a1:82:4c:1c:cd:32:53:54:3a:fa:
7a:55:00:08:16:6e:0a:b9:fd:23:6b:a4:d0:8a:c1:
5d:76:74:ef:0a:66:c2:5b:5d:e3:2c:d6:5c:04:34:
e7:25:68:41:02:2a:33:ff:9d:81:f6:c6:e7:04:48:
a3:40:cc:aa:f7:c8:33:6d:96:7a:f8:10:de:c7:a9:
ef:dc:f3:c6:eb:15:a5:8b:8e:76:20:0b:dc:54:d0:
9b:e9:27:dd:38:aa:9a:11:74:ce:e3:9a:62:65:f5:
43:56:b3:ac:60:aa:d4:bb:9e:98:1f:cb:78:c5:28:
aa:64:66:64:95:c9:70:5e:5b:21:6c:09:7c:bf:ff:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:10:33:AD:2A:59:72:BE:D6:A8:A2:59:83:64:2F:48:53:F2:B5
X509v3 Authority Key Identifier:
keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:00:9f:13:9d:4e:04:f6:68:c1:b1:a1:67:5c:2c:ea:ca:ba:
75:8d:e9:d2:96:51:5e:14:01:27:ee:e0:a7:51:1e:70:e2:c3:
4d:db:e9:e5:83:95:c6:53:4b:a9:da:29:5d:9d:01:d6:63:0b:
3c:24:d4:84:44:3d:fe:26:ad:a1:4e:7b:ba:2b:79:af:c2:5d:
fa:25:52:14:fd:9f:22:f2:bf:61:88:05:3c:ea:ab:44:37:cd:
4f:f7:c8:a8:5d:8b:75:78:0c:1d:c1:15:ce:ca:60:84:b3:56:
f5:2f:2e:da:eb:d5:0d:53:74:4f:12:c4:6f:b7:a1:22:81:c6:
c1:df:69:35:a0:da:1a:e6:ff:15:31:ee:13:81:74:38:7d:28:
a8:9e:15:ec:6f:1f:6a:08:eb:ce:b8:b5:07:16:08:29:3a:fe:
e2:52:43:76:c0:80:fe:0e:0b:91:20:72:15:dc:90:9b:b8:73:
47:f7:3d:cb:62:35:2d:fc:ad:69:3a:68:f8:f5:3e:ab:da:aa:
b4:9f:f9:76:9c:d9:d4:81:61:b6:ba:a5:b2:a5:9e:23:e9:ce:
ca:81:45:4a:bc:5c:28:cd:ca:f9:38:28:5a:0c:7a:4c:07:96:
02:66:5a:73:80:54:5f:83:da:5f:0f:7e:ab:8d:8e:d6:d3:c3:
05:9b:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:34:16 2025 by rpki-client