Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/EE83B18A7F7E11ED86E00936C4F9AE02.roa
File: EE83B18A7F7E11ED86E00936C4F9AE02.roa (raw, json)
Hash identifier: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=
Subject key identifier: 70:D3:1C:B5:60:FD:76:9D:78:C6:66:14:01:36:82:21:E7:94:6F:15
Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial: 01F5
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/EE83B18A7F7E11ED86E00936C4F9AE02.roa
Signing time: Tue 21 Jan 2025 01:35:46 +0000
ROA not before: Tue 21 Jan 2025 01:35:46 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139341
IP address blocks: 164.52.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Validity
Not Before: Jan 21 01:35:46 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=678ef9f1-0d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:a6:fe:63:d0:74:21:fb:9b:5e:0e:c2:75:
ea:9c:c2:49:a9:1b:a0:dd:16:ea:39:b0:7a:3c:30:
30:27:22:63:2f:da:a8:7d:0f:7d:09:3b:2b:af:28:
72:c1:e5:af:72:e3:09:6a:eb:bf:27:7a:58:20:2a:
fc:c4:1f:87:1b:a7:35:78:0c:10:74:c8:a7:67:6e:
86:0c:c9:89:5a:d1:83:d9:e7:9d:0e:a1:13:06:49:
1f:ee:37:96:8e:a1:35:63:c9:70:e8:7a:91:a8:87:
4b:a0:00:5f:d1:98:7f:71:10:f8:70:63:03:51:8a:
59:26:d5:6a:8e:13:b6:55:8d:66:65:e7:7a:22:0f:
0f:5c:8f:2f:0c:27:70:8d:e7:18:dc:a7:a4:fe:78:
32:52:24:d5:6e:92:86:87:f0:77:c0:84:72:8b:b8:
49:10:2a:fb:b3:78:64:54:f1:50:f0:99:10:83:a1:
58:89:8e:e6:5a:af:2c:43:e5:ee:50:74:2e:6e:e3:
ad:bc:93:cc:a6:2f:c8:9a:24:00:6e:bf:89:cc:c2:
9c:77:63:ac:a6:b7:3f:89:c7:44:b5:f2:b8:55:33:
80:0a:d5:17:c1:2a:84:67:fd:11:0f:96:e2:ba:43:
41:a2:81:55:51:5f:58:53:75:d8:33:90:b6:8d:a3:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:1C:B5:60:FD:76:9D:78:C6:66:14:01:36:82:21:E7:94:6F:15
X509v3 Authority Key Identifier:
keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/EE83B18A7F7E11ED86E00936C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.52.14.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:90:e1:43:82:e3:36:f7:55:2b:fa:ea:6b:29:7b:0b:57:37:
47:c3:4a:b7:07:5b:3b:66:6a:3b:24:a0:f3:ee:92:a1:1a:90:
e1:8c:e8:4d:9d:b3:71:0f:a9:50:47:21:3b:8c:74:27:c6:7b:
22:18:fe:ae:a1:6e:06:63:d5:40:2c:b4:b0:ea:6c:2e:0f:31:
ec:a6:6e:cb:80:9b:54:ac:d7:9c:db:fa:12:c5:c6:19:73:30:
b7:68:46:1c:f8:94:09:20:e0:0d:88:4a:d7:a5:76:c5:06:dc:
5b:0e:13:74:ce:34:24:4c:dc:9a:89:c8:b8:6b:91:8b:77:92:
ea:b9:59:fe:1c:0d:89:66:f9:6d:eb:53:85:46:0e:2e:fb:70:
b6:06:4b:b7:4f:86:2d:76:28:fa:79:9c:c6:99:3f:3a:e9:0b:
c2:b7:92:67:7d:7d:af:29:07:8d:45:af:3f:c7:e1:65:0b:57:
a9:0d:ee:08:40:17:8f:92:d1:01:52:9b:bf:c4:29:a0:ca:1f:
58:ce:2d:56:21:04:29:1a:43:4d:38:a7:16:f7:a7:3b:ff:f6:
41:ac:db:ca:bd:84:ba:b0:7d:80:fc:0b:dd:d2:5b:c0:c2:34:
30:44:8f:1f:7a:b7:6b:0c:f5:c4:a9:a1:81:a4:33:8b:24:29:
4f:d7:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:03 2025 by rpki-client