Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa
File: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (raw, json)
Hash identifier: NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=
Subject key identifier: CF:1C:5B:39:0C:19:56:6B:8E:E7:30:71:1D:A7:5B:E4:E1:8B:96:D1
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3537
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa
Signing time: Thu 19 Sep 2024 13:28:45 +0000
ROA not before: Thu 19 Sep 2024 13:28:45 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 35758
IP address blocks: 182.54.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13623 (0x3537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Sep 19 13:28:45 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66ec270d-9178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:1c:05:d9:a4:0d:7b:af:e7:1f:0c:a6:18:
c3:d1:51:9e:83:0f:53:e1:33:95:d8:d6:88:93:96:
a3:2b:0f:90:0e:26:6c:ea:92:97:27:01:e5:18:59:
5a:f5:30:aa:06:59:3f:e2:ac:39:f2:bd:23:37:b4:
bc:4e:34:bc:88:97:14:18:9b:1a:ab:51:6e:8b:17:
e2:37:09:da:c7:21:05:1e:b1:09:01:08:51:34:40:
ea:e2:c7:b3:ea:fa:dd:83:61:90:59:ef:1f:b8:fa:
fd:5e:95:72:3f:0d:4d:4e:a9:8a:c1:09:a3:6c:ef:
16:ec:07:81:f6:17:a5:55:6e:93:07:d2:9f:f5:69:
1c:26:80:7e:fa:6b:a1:54:6c:60:7e:e3:1c:46:1d:
13:de:91:95:88:8d:d0:ee:e7:03:da:b6:a4:51:54:
bc:d0:0c:69:10:41:f9:f1:ed:47:f7:a2:fe:71:8b:
83:e9:f1:80:65:3d:69:ca:1f:14:46:a5:3b:b4:70:
6a:a1:8e:ba:bd:63:57:68:39:9e:1f:bd:2e:bf:98:
55:fe:4c:7c:db:30:ae:1a:b0:0d:9f:5c:d4:ee:20:
47:20:35:7d:59:93:cc:eb:91:d5:92:2e:23:45:d0:
7d:1e:5c:80:27:04:b2:7e:ef:e6:c9:1f:04:60:bd:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:5B:39:0C:19:56:6B:8E:E7:30:71:1D:A7:5B:E4:E1:8B:96:D1
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.54.236.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9e:96:06:9f:7f:ba:fa:87:87:21:be:b4:9f:12:f5:ab:a6:
11:cf:73:f1:97:29:9f:bf:ca:e6:53:4f:bf:cc:cb:91:c1:0b:
35:21:52:e4:5f:79:4e:c9:47:71:d9:62:94:ed:7a:d5:1e:eb:
14:aa:f9:af:7e:39:fb:61:45:70:bd:7d:75:9f:74:d1:f2:b0:
5d:1c:6d:39:c3:de:07:94:2a:e3:7d:c8:61:3c:cf:e8:b7:7b:
9a:2f:b5:2a:a0:f7:69:1f:73:dc:07:1c:71:68:88:8b:d3:ff:
1b:32:e8:e5:73:45:68:08:3e:0a:c1:24:ea:c6:3e:5b:06:2c:
a2:be:b0:16:ff:02:8a:dd:ad:52:b4:11:e4:d1:67:43:40:84:
6a:80:c8:15:cd:ee:47:5d:38:82:38:8b:a3:37:c3:b4:85:82:
6a:a6:e2:32:24:03:b6:ed:2a:52:91:6f:00:cd:74:36:04:9b:
22:16:05:10:1b:a0:5a:10:34:ce:5c:c6:7e:2e:3c:20:a6:f2:
92:6b:94:d4:47:56:78:bb:20:7e:fa:b4:84:53:92:d1:70:c5:
84:8d:73:0a:3a:b4:b4:1f:5e:75:ef:bd:20:f3:e4:a5:cd:8a:
30:77:e6:6f:69:66:17:02:ac:5f:b9:90:bc:18:5a:ff:0a:30:
2e:c2:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:40:04 2025 by rpki-client