Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/06C73A8EFBE511EFA186694BC4F9AE02.roa
File: 06C73A8EFBE511EFA186694BC4F9AE02.roa (raw, json)
Hash identifier: xwgSw9TLYkyiCDH0bebD3MfSotyYkMkFJNkTHafCstA=
Subject key identifier: 97:F5:32:1E:1E:A0:D9:97:C6:5E:77:68:1E:F1:8B:E1:35:2A:AB:F3
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 034F
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/06C73A8EFBE511EFA186694BC4F9AE02.roa
Signing time: Sat 08 Mar 2025 06:17:35 +0000
ROA not before: Sat 08 Mar 2025 06:17:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138571
IP address blocks: 157.119.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5
Validity
Not Before: Mar 8 06:17:35 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67cbe0ff-3289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:08:ea:be:08:0a:65:e2:ef:8c:20:66:83:
ab:ce:e9:45:fb:c9:f2:49:e9:75:db:44:41:37:ae:
b9:5f:77:ff:68:d8:97:80:4f:d3:59:eb:1f:09:fd:
02:b9:b6:7f:78:de:73:db:56:8d:54:1f:b1:4e:48:
d6:89:e4:4c:de:ee:d0:6f:87:7d:4e:64:f0:e8:96:
e8:c9:7f:28:d6:6f:33:de:6d:10:20:86:90:bc:59:
e5:82:cf:28:db:52:e7:0f:ac:6b:9a:ce:a2:f5:24:
b5:c6:b1:b9:11:cd:0f:b9:03:7d:af:a6:8b:be:60:
7b:a6:87:ee:60:28:ea:de:3d:a3:c7:e2:01:1f:e2:
ce:d5:07:a7:fb:ec:4f:fc:5d:c2:fb:62:91:61:64:
7c:92:54:24:a5:c3:87:31:73:b8:53:28:5b:11:80:
0b:5c:d5:bd:a5:05:e9:e3:df:ad:fa:9f:9f:12:38:
ab:e0:b7:ae:b1:c4:33:c3:80:67:b8:b3:62:bc:98:
54:5d:f5:55:80:a6:50:45:aa:c7:5a:cb:6a:92:83:
3c:38:a1:94:de:5e:b9:38:da:50:3f:20:b9:b3:46:
77:25:50:9e:cd:6d:e0:ae:78:e3:1e:fc:f8:0a:06:
4b:e5:16:76:1a:01:b9:bc:56:c2:7e:25:88:6a:f5:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F5:32:1E:1E:A0:D9:97:C6:5E:77:68:1E:F1:8B:E1:35:2A:AB:F3
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/06C73A8EFBE511EFA186694BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.119.22.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bc:19:32:5d:15:13:cc:e9:d6:21:96:57:2a:a5:a5:91:f7:
bf:f5:53:1c:ef:d6:b6:89:f6:15:93:80:71:68:9a:6b:07:d3:
a7:55:c6:a6:4a:98:2e:be:a9:d7:0f:1b:2b:03:c2:4c:92:49:
65:c3:bf:ca:0f:b0:e2:99:79:31:fb:8d:e3:ac:0e:72:6d:f7:
94:23:64:d5:7c:47:eb:de:85:53:7d:cb:50:99:86:0d:fa:6c:
da:fd:56:cc:b8:eb:22:67:92:2c:43:18:cb:0e:80:ae:79:f7:
1d:bc:23:5c:ff:2a:72:fd:d9:be:da:69:ee:35:2d:4e:fd:52:
bb:7f:4a:73:4a:fb:7e:9b:ed:62:d9:87:f8:da:05:80:ad:c9:
85:9b:a9:3f:92:c8:c9:55:9e:65:86:34:41:61:a7:6d:dd:be:
db:8f:ed:da:8e:f3:1d:26:f9:fa:02:9d:23:25:88:4b:0f:b3:
4c:34:cb:56:33:02:23:2c:d1:e1:3e:a4:99:58:37:1b:be:f3:
8f:3b:ce:42:db:0b:4c:c8:9c:cf:b3:8b:08:b0:7c:12:40:60:
67:82:3f:cd:58:76:8d:2f:b6:c6:98:4d:b7:47:9a:4a:8e:9e:
e1:1c:52:93:07:ec:4c:29:9d:41:87:a3:d6:0a:f7:42:31:c9:
f7:b1:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:33 2025 by rpki-client