Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa
File: 7677A43AF8C511EBA498E771C4F9AE02.roa (raw, json)
Hash identifier: Ahb9X8aGkM4hgOjSkOVMY4nk30td0okGRRUIVN6nUDA=
Subject key identifier: 09:DD:13:4B:87:2D:37:08:32:8E:DA:CD:CC:EB:D7:63:40:01:99:CF
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 1248
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa
Signing time: Mon 26 Feb 2024 17:55:37 +0000
ROA not before: Mon 26 Feb 2024 17:55:37 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 55002
IP address blocks: 159.196.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4680 (0x1248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Feb 26 17:55:37 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65dcd099-52fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:36:6b:1d:77:4d:95:da:e2:63:01:ed:37:
a4:ee:46:52:f1:1e:bc:c7:5c:a3:23:96:ad:3c:eb:
99:30:63:45:99:97:e7:24:96:67:08:61:9d:37:71:
ba:fe:dd:71:2c:9d:3e:3e:78:d9:ed:0d:63:69:ad:
88:2f:ec:00:0a:f3:ba:ee:e4:64:f0:cb:32:02:55:
41:37:5e:a2:ee:e8:fe:80:24:fc:93:a9:53:53:aa:
55:3a:3e:04:10:ce:7b:82:48:a0:d2:21:d0:34:af:
58:b4:b3:d1:ce:3e:c0:34:5b:4f:c3:28:09:c0:e9:
78:c0:14:59:46:11:3d:83:42:d8:03:3f:90:71:35:
6f:87:2e:83:2b:de:15:89:7f:ed:50:a2:e3:2b:84:
c3:de:8f:dd:53:70:1a:8c:2c:da:92:d5:9f:bf:83:
bb:a3:50:06:4c:85:28:fa:9c:1b:59:a9:68:10:df:
11:00:84:4b:b3:49:2f:dd:f1:d2:ec:4b:90:72:89:
f7:1a:4e:1a:14:b5:07:80:6a:f0:b7:29:33:a1:89:
3b:b5:fe:07:4a:06:96:48:f7:6e:9d:08:17:2e:14:
9f:5a:d7:3b:99:dc:5c:b8:76:7e:98:0b:8d:dd:b0:
c1:54:50:3d:ca:ed:ab:1b:b2:47:18:c4:ac:c4:31:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:13:4B:87:2D:37:08:32:8E:DA:CD:CC:EB:D7:63:40:01:99:CF
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
159.196.220.0/22
Signature Algorithm: sha256WithRSAEncryption
74:9b:f2:80:b2:d0:6f:8a:09:85:74:0b:3d:65:27:e4:28:0d:
9f:e0:27:d3:5f:35:06:33:99:f4:3c:07:bd:e0:01:1c:1c:01:
56:75:20:d9:b8:59:31:8e:e9:00:53:83:de:0a:6f:9a:03:1b:
69:8e:65:b0:09:4e:25:01:0c:49:84:f1:26:db:09:00:58:2a:
d4:85:77:08:de:f6:b7:cc:29:a6:04:d2:3a:9a:bd:c3:cc:8e:
e4:61:3f:71:84:c9:e2:49:dd:71:dc:2a:41:ff:04:09:8d:47:
c8:dc:f7:44:bd:23:4a:4c:da:14:86:5a:fc:01:64:96:34:3a:
24:cb:cd:cc:68:bd:7f:31:5b:ef:26:b8:c4:bb:e4:e5:19:5b:
92:70:90:05:83:cc:e1:34:5d:fd:d2:cf:54:20:81:90:ee:62:
db:69:2d:a5:9b:b8:f1:f7:df:36:8a:d7:d4:3f:56:93:d0:1f:
5e:15:53:0d:c8:dc:26:f7:94:36:f2:8c:ab:dd:e7:3d:20:3d:
ad:d8:27:5c:a9:d1:5b:0c:02:29:ff:28:d9:8c:29:00:f4:19:
a5:a3:0d:22:e1:15:80:ee:3c:3f:65:ec:17:0d:14:34:ad:37:
a6:78:f3:30:bd:4a:f6:36:22:f9:ea:af:5c:e7:bd:eb:63:d9:
28:07:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:58 2025 by rpki-client