Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
File: 77E7AC0E492611EDAF439D83C4F9AE02.roa (raw, json)
Hash identifier: TsGvB3XS2Vh4dLTmPMnLM5jlZpG6ZHWJ7EVrOVQXeXQ=
Subject key identifier: 3C:14:54:BA:7F:BF:1B:BA:9A:8B:14:05:BC:D5:A2:DC:5B:F1:98:D0
Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial: 01F7
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
Signing time: Tue 31 Dec 2024 02:06:02 +0000
ROA not before: Tue 31 Dec 2024 02:06:02 +0000
ROA not after: Wed 30 Apr 2025 00:00:00 +0000
asID: 136140
IP address blocks: 140.168.240.0/24 maxlen: 24
140.168.241.0/24 maxlen: 24
140.168.242.0/24 maxlen: 24
140.168.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Validity
Not Before: Dec 31 02:06:02 2024 GMT
Not After : Apr 30 00:00:00 2025 GMT
Subject: CN=67735189-5c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:1b:4d:e4:6f:99:80:42:09:e4:6f:63:91:
ba:c0:f9:c1:71:f3:cd:b5:5a:20:d1:a1:9f:80:19:
54:1e:42:f0:db:02:55:78:63:78:ab:0b:47:4d:a1:
f4:fa:d4:38:6a:29:41:69:2c:7d:2e:43:48:26:fd:
32:e4:08:9e:a6:a3:6f:0f:74:e3:9f:e4:7f:09:f7:
81:7b:b9:e1:25:a5:da:d5:77:ae:37:ce:33:28:12:
84:fb:4a:1d:eb:d3:48:69:ba:e6:40:36:89:d4:84:
c2:e7:b2:92:44:b4:96:6f:fb:c2:da:9a:c6:7a:11:
b6:2b:24:0b:c0:f2:22:16:de:c1:ad:d6:08:64:86:
7e:a2:c4:8a:f4:18:58:40:91:d3:e9:ca:29:0e:ba:
4c:8b:b1:a9:11:81:5f:13:46:b3:d5:75:ef:88:71:
5a:c4:71:45:f2:34:9a:61:ec:27:b8:ce:9a:1d:49:
fc:9b:59:1f:eb:41:2b:f7:d7:77:95:e4:9d:74:81:
01:ef:47:03:da:5f:81:7f:06:12:ea:07:18:73:ed:
ff:2b:0c:e3:5b:d3:02:83:0c:65:3a:0b:8c:c5:16:
9f:60:cd:a9:c1:1a:a8:46:aa:c0:9a:13:2f:9e:52:
17:ca:09:49:6e:85:a4:af:ad:fe:d6:a6:00:46:0a:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:14:54:BA:7F:BF:1B:BA:9A:8B:14:05:BC:D5:A2:DC:5B:F1:98:D0
X509v3 Authority Key Identifier:
keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
140.168.240.0/22
Signature Algorithm: sha256WithRSAEncryption
14:61:ad:2c:b7:6b:dd:e6:33:8e:c7:aa:db:43:ba:9f:49:5b:
be:7c:2a:37:6a:b8:31:7e:08:d9:17:35:d1:3a:11:6d:c7:8f:
a0:13:c7:0e:eb:47:8d:94:96:73:4f:e1:40:b5:05:57:6e:e1:
70:3d:3e:67:69:6a:1b:7b:54:eb:0b:42:a2:f9:0f:e4:55:1f:
91:b1:0a:4a:d4:0c:35:79:74:3d:33:14:ec:b8:ca:60:d7:30:
2e:21:6b:5d:8d:e0:a3:6b:97:3f:0f:bf:19:f2:94:a8:fa:5a:
7f:02:d2:7f:de:87:9c:a3:6a:15:8b:6e:73:4e:eb:83:1d:16:
79:8d:46:86:c7:48:f8:1b:20:64:34:95:e5:e5:33:cd:b5:e7:
50:41:51:72:58:d9:92:8d:25:ac:0a:c9:c1:dd:ea:51:5c:0d:
d3:b6:46:a5:b4:4a:94:92:93:d5:89:12:b1:20:29:df:da:d9:
6b:43:a2:b7:01:86:08:85:f6:cf:ef:a7:cb:ce:da:f0:f5:33:
87:cd:45:4b:70:9f:f3:08:39:56:23:cb:10:c3:46:9c:8a:5f:
dc:08:1a:da:ff:89:89:4c:5d:15:01:b9:ce:0b:4e:41:f0:9e:
82:11:ae:24:94:6f:88:8a:73:54:3d:6c:18:66:fd:82:52:b2:
a4:c5:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:32 2025 by rpki-client