Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa
File: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (raw, json)
Hash identifier: HTX8AzlBVBkYFaGVRN5GWHgC9HxdFLqil4uBj/GLN6g=
Subject key identifier: C4:E6:6A:0D:F4:61:0C:0E:24:F4:EC:F3:D8:E7:F9:69:20:DA:B0:52
Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial: 02
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa
Signing time: Tue 14 Jan 2025 06:46:40 +0000
ROA not before: Tue 14 Jan 2025 06:46:40 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137248
IP address blocks: 161.248.168.0/23 maxlen: 23
161.248.168.0/24 maxlen: 24
161.248.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660
Validity
Not Before: Jan 14 06:46:40 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67860850-204e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:92:0c:dc:46:37:66:88:1a:2b:2e:b3:1b:
5f:2b:1b:74:3c:2d:ff:29:59:62:e4:20:10:fd:f8:
64:10:82:78:66:a1:ba:ae:18:65:31:1c:b7:aa:54:
90:98:b3:3f:92:26:0f:77:4e:ee:4d:ee:6e:38:bc:
0a:80:e5:47:58:18:68:c1:bc:e6:58:a1:2c:9e:2f:
2c:58:3c:79:9d:4d:46:2c:4b:35:97:46:c6:7f:40:
f3:3e:d3:02:a2:7b:7e:07:ba:c1:2d:27:51:a1:b6:
10:f7:0c:f7:5f:8d:0e:fa:70:1c:1e:2c:e1:c1:84:
36:d9:69:f7:af:cb:1e:2a:c5:97:e7:6f:f6:d0:fa:
28:3d:ed:8b:e2:1a:83:63:c2:43:f7:40:86:60:80:
dc:7d:a2:61:3c:8c:b1:ad:7f:a6:46:1e:17:16:a3:
58:6c:ee:c9:bf:f8:01:39:1f:e4:be:13:66:66:bb:
19:3f:d1:a6:e4:d4:b3:97:b9:40:48:ce:68:8b:9d:
3f:e7:f6:ff:e3:83:bf:37:4c:7c:c1:dd:b5:05:cb:
53:9f:4b:69:13:aa:08:41:0f:58:4d:51:55:40:3c:
cf:ec:51:12:16:11:0f:46:d2:b0:3a:19:16:e8:ea:
b9:64:33:28:b7:f1:85:bd:b5:19:ee:da:d8:ba:79:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:6A:0D:F4:61:0C:0E:24:F4:EC:F3:D8:E7:F9:69:20:DA:B0:52
X509v3 Authority Key Identifier:
keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.168.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:22:07:f9:95:db:0b:b5:ef:89:bb:a1:c7:79:e0:d8:37:85:
16:6e:80:0d:22:5c:99:a5:55:8b:b6:83:cd:12:a3:96:a5:2d:
c0:1d:6b:f8:99:9c:5f:08:09:ec:e1:77:20:8b:46:2a:f2:a8:
57:91:7c:51:b9:8a:03:0f:47:76:87:6a:e2:b2:ed:87:08:bd:
4b:7e:cf:d3:4e:eb:26:fb:0f:58:2f:3f:a3:52:66:ef:72:6a:
97:1e:30:0e:46:1f:11:74:dc:b7:07:d4:16:ee:23:27:b7:ea:
17:94:db:ae:0e:0e:3e:39:87:4b:38:8f:fc:03:5c:51:a0:a2:
e6:a6:9e:3f:33:00:d2:2b:ed:61:04:e6:73:00:cf:60:6c:85:
50:98:f7:90:bd:aa:61:84:09:9e:a2:a1:bb:ea:41:0d:fc:5b:
97:1f:64:c8:84:3b:2e:52:41:74:68:45:99:70:3e:81:8a:f0:
c5:b5:75:fd:08:4a:d5:f4:33:31:46:13:70:16:2b:04:d3:a1:
76:79:25:b4:34:a8:64:36:99:36:0a:55:06:ae:e4:da:58:83:
95:8f:28:e3:01:f7:d2:08:88:b5:29:5e:48:cc:ff:96:37:02:
97:d9:4b:3c:71:78:49:aa:e9:22:85:76:38:c0:03:2e:f9:5b:
eb:9f:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:07:34 2025 by rpki-client