Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/CD26CAC0431611EE80B53A75C4F9AE02.roa
File: CD26CAC0431611EE80B53A75C4F9AE02.roa (raw, json)
Hash identifier: PN8KDNG+lfB8OMD8c5W9WAaHU3MIVkDLw5J7GhvF+L4=
Subject key identifier: 9B:55:1D:5A:FE:3E:3E:A6:0D:1D:AD:23:3B:A6:E4:73:CC:E1:6E:F0
Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Certificate serial: 0929
Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/CD26CAC0431611EE80B53A75C4F9AE02.roa
Signing time: Fri 10 May 2024 21:30:37 +0000
ROA not before: Fri 10 May 2024 21:30:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139006
IP address blocks: 165.173.160.0/22 maxlen: 24
165.173.190.0/23 maxlen: 23
165.173.190.0/24 maxlen: 24
165.173.191.0/24 maxlen: 24
199.67.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Validity
Not Before: May 10 21:30:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=663e91fd-e62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:89:65:ae:66:ba:0e:a3:0f:37:46:96:8d:
07:ed:bf:dd:dc:d8:03:1e:96:65:60:7a:fb:e3:06:
c6:6d:87:0a:62:65:1c:cd:b3:4c:0e:9b:44:0e:0e:
86:b6:7c:1b:c6:2a:8e:ee:38:37:20:16:35:04:80:
40:99:15:c7:cd:bb:0a:bb:29:73:b9:02:25:50:fc:
37:a7:0f:72:f0:bf:8e:e7:bf:fc:42:e4:22:b0:eb:
78:45:8a:fc:1a:e1:62:3c:a8:92:45:e2:7b:91:5d:
77:a9:b3:d0:3a:1c:c2:fc:cc:6f:09:02:51:39:0a:
c4:50:ba:e2:d9:08:76:a7:80:b3:5b:08:e6:05:ca:
6e:06:bb:b8:d6:eb:72:a5:e7:92:e0:c7:80:c3:37:
4c:2f:4c:21:fb:fe:8e:2f:6d:43:4f:cb:94:71:74:
f0:6a:18:1e:41:31:f9:ba:53:6d:f0:89:9c:f3:9d:
b3:d3:e0:ea:f4:51:07:ea:b2:ca:9a:89:fb:45:82:
a6:e0:fa:b2:8e:b4:5c:22:d2:1a:f8:ac:ac:d5:fc:
c7:c4:0b:75:3c:fb:33:08:9c:0e:77:88:29:06:f9:
32:99:df:8c:bc:2f:52:1e:15:28:03:b8:72:ca:66:
b3:3a:80:61:71:a9:18:f2:8a:d1:48:9f:08:0e:df:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:55:1D:5A:FE:3E:3E:A6:0D:1D:AD:23:3B:A6:E4:73:CC:E1:6E:F0
X509v3 Authority Key Identifier:
keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/CD26CAC0431611EE80B53A75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.173.160.0/22
165.173.190.0/23
199.67.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f2:45:e5:b1:02:23:58:52:50:73:60:10:b1:8d:f7:aa:74:
47:c1:cf:27:ff:06:52:aa:75:53:e0:17:03:62:4f:40:14:fc:
d8:5e:45:95:6b:7c:5e:56:47:33:66:73:0a:14:9d:70:7a:fe:
6a:10:06:8d:ce:ef:e5:80:4e:da:3f:f2:42:1a:1a:a1:1e:b5:
d4:c1:11:2b:32:a0:ae:d8:8f:60:30:18:df:43:76:27:9e:44:
81:4b:e6:8a:37:8e:4e:5f:9a:82:bc:df:af:b8:96:b0:d7:8c:
a4:5b:98:82:12:9c:03:5f:4d:35:fb:61:07:47:d7:46:97:a5:
86:06:27:87:5b:45:91:c6:5c:b5:fd:82:e1:a7:0d:94:5a:c4:
1d:54:34:52:b2:c3:35:49:40:de:3b:46:40:6f:62:75:6a:29:
40:c9:25:39:70:47:68:f0:bb:64:dc:68:62:6b:c2:23:63:c1:
8e:22:02:c7:72:58:a8:ce:ee:65:3c:9e:54:a7:0f:b6:52:a7:
44:00:51:36:9f:85:04:80:24:3b:7a:3b:fb:11:25:84:5a:67:
73:ba:43:36:d2:00:b9:e1:9a:12:5a:ae:22:e0:12:4f:ae:04:
e2:55:db:5f:d5:70:2f:1c:3b:13:c1:f5:f0:01:3b:ed:cd:d7:
41:a4:9c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:00:51 2025 by rpki-client