Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa
File: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (raw, json)
Hash identifier: 9PGVW+39KLlj0WI9eJ5OovuG1UvnRDi3eMzS7oZFC4g=
Subject key identifier: 12:2A:DF:57:32:C6:3D:F7:63:AE:BB:38:0C:95:57:A3:AD:EE:29:A4
Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial: 1674
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa
Signing time: Wed 04 Dec 2024 16:54:27 +0000
ROA not before: Wed 04 Dec 2024 16:54:27 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 18190
IP address blocks: 155.137.88.0/24 maxlen: 24
155.137.89.0/24 maxlen: 24
155.137.90.0/24 maxlen: 24
209.141.8.0/24 maxlen: 24
209.141.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5748 (0x1674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59
Validity
Not Before: Dec 4 16:54:27 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67508942-d3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:e4:f2:c3:ab:60:89:60:eb:93:5c:a5:72:
14:fb:a4:95:dc:1b:2a:0f:f0:58:3f:35:cd:25:4a:
d0:99:bc:39:2f:b5:35:64:d1:37:c8:60:51:25:68:
25:08:94:07:28:7a:fc:aa:62:6c:e1:1d:f1:45:e7:
a3:0a:fc:0b:66:ae:5f:51:d2:9f:66:89:d2:0c:3e:
ba:db:2b:0e:3a:10:5c:8e:30:ca:89:e7:73:f5:82:
7a:8e:7a:7e:72:62:a8:6a:40:c1:0b:61:85:cf:85:
e0:e2:a2:c1:e3:b2:46:77:d8:0a:f9:69:22:69:76:
ef:0e:e6:d5:d0:43:fd:70:f4:e4:78:eb:41:83:74:
72:0a:47:4f:e4:ff:06:83:00:79:80:bf:e1:93:a9:
2b:2c:3e:4a:8d:30:44:53:a4:d5:e0:3d:51:31:d1:
79:d0:e3:93:3b:dd:d7:2a:86:83:00:02:21:95:2e:
69:d3:36:3d:2c:d8:ce:86:bd:26:b8:57:8f:78:83:
e5:35:cb:0e:9f:cf:b5:e6:6f:bb:71:b3:7e:03:98:
db:c8:87:30:7d:25:92:39:82:b9:9a:f0:6c:45:89:
05:dc:09:2d:2c:09:00:f0:64:61:2e:ea:d7:9f:8b:
9a:b0:7e:97:c7:8c:ec:58:a4:dc:60:fc:bc:68:e3:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:DF:57:32:C6:3D:F7:63:AE:BB:38:0C:95:57:A3:AD:EE:29:A4
X509v3 Authority Key Identifier:
keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.137.88.0-155.137.90.255
209.141.8.0/24
209.141.12.0/23
Signature Algorithm: sha256WithRSAEncryption
30:d2:1a:c0:b1:0d:15:a5:0d:4b:88:d6:3d:f3:45:2f:14:cb:
61:72:84:bd:d7:a8:e0:ee:0c:b1:85:14:6b:fc:ff:5f:ce:40:
a9:c2:9e:c8:43:4c:d2:e8:df:84:d4:d2:aa:57:f6:3b:9b:6e:
6f:91:9d:f9:71:90:af:c5:4b:96:91:84:86:39:46:0f:36:dd:
3d:67:72:87:3b:42:d8:28:a2:6d:a8:e4:5f:36:95:91:1c:84:
a8:0a:42:5e:0c:59:fb:ec:8c:71:47:e1:2d:dc:da:e1:09:b9:
e2:01:68:81:ba:ec:97:c5:b4:14:14:39:29:57:08:60:7b:f1:
17:a5:c0:5d:b3:b0:6c:5e:dd:d7:7e:db:e9:ce:3f:bd:b4:2c:
db:cd:41:39:60:85:60:02:4f:20:b7:d1:68:26:f2:7f:68:56:
31:f9:1e:01:d2:ec:c0:43:4a:cf:28:0d:5f:f7:4a:19:e7:11:
94:80:87:12:6a:d8:da:9a:98:ca:8c:28:2c:a5:07:65:b6:0f:
48:2a:90:35:59:bb:8a:b8:9c:6b:9d:80:73:a4:60:47:84:04:
8f:91:95:5b:1e:8c:d7:86:b4:b8:28:14:1b:f0:b4:1c:54:97:
a2:07:fe:c1:21:4f:cb:ea:79:9f:47:a7:0f:ff:0f:3c:06:61:
7d:7a:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:37 2025 by rpki-client