Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/46CE46B416BF11EBB31D5A6AC4F9AE02.roa
File: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (raw, json)
Hash identifier: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=
Subject key identifier: 9F:05:50:F5:3B:EB:72:97:54:8F:85:B3:C3:36:22:D9:40:DF:94:C8
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 1343
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/46CE46B416BF11EBB31D5A6AC4F9AE02.roa
Signing time: Tue 04 Mar 2025 15:30:49 +0000
ROA not before: Tue 04 Mar 2025 15:30:49 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 38231
IP address blocks: 167.179.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4931 (0x1343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A
Validity
Not Before: Mar 4 15:30:49 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c71ca9-f514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:68:22:83:c8:e8:f2:3b:b2:4a:42:83:89:
ba:ac:85:a4:48:bb:2b:87:83:40:49:89:2a:9b:9d:
10:99:b0:bf:02:f4:5e:af:ce:6d:23:2d:f1:77:6a:
40:8c:12:26:4d:0c:5f:68:7d:77:cd:35:ed:ac:4c:
ab:1f:e0:11:ca:e3:26:b6:a3:87:c0:f5:c8:02:3a:
7d:a6:ee:1c:28:ba:1b:51:14:df:84:04:04:0e:e1:
63:51:da:7a:c9:e5:f6:57:7d:ba:c2:e1:e1:4b:aa:
c9:14:f3:4d:dd:10:fa:e0:81:4e:46:96:ac:29:cd:
d1:56:29:be:36:e1:bf:f7:5c:10:3f:56:68:e9:0e:
78:00:60:a1:1f:4c:7b:6b:d3:cd:ac:bc:1d:52:e3:
bf:9b:51:b3:5e:ea:7b:d6:c6:75:87:09:1d:4f:c2:
86:0f:c5:4d:fd:ae:b7:2e:51:72:1f:57:56:c9:62:
d5:58:66:fa:1e:46:ca:e3:29:ce:e5:07:be:aa:91:
63:1b:6f:50:86:08:58:2a:60:63:2d:69:1f:d3:91:
90:79:df:12:ef:37:2d:54:c2:41:c6:81:af:41:32:
05:90:1c:37:01:e7:7e:ba:2b:dc:88:45:58:38:c9:
0b:be:93:73:03:b0:24:4b:69:c6:5c:16:0e:bc:8d:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:50:F5:3B:EB:72:97:54:8F:85:B3:C3:36:22:D9:40:DF:94:C8
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/46CE46B416BF11EBB31D5A6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.231.0/24
Signature Algorithm: sha256WithRSAEncryption
01:68:39:4e:d5:f5:26:17:93:29:59:ef:5a:63:4f:ce:b3:ec:
9b:4e:f2:f4:04:d5:08:fc:87:06:ff:e5:62:bd:95:9a:79:7c:
b7:74:ec:7b:f2:15:b3:ff:c7:27:0a:4a:6f:ea:d1:c8:19:f6:
cf:da:74:97:71:91:74:28:97:f2:0b:64:4b:ef:4f:eb:0e:5e:
a7:1b:c2:8c:25:4b:dd:e0:9d:a5:32:79:46:c5:ea:e0:aa:b7:
03:43:4f:11:54:a0:b6:66:85:77:c4:99:13:9e:99:ab:49:b1:
c1:9f:01:f7:1d:12:dd:36:f6:d3:11:6b:7d:22:a2:93:11:5a:
50:8c:2e:d3:65:77:13:3d:90:3f:ae:4d:61:89:06:a8:47:01:
8d:18:af:f7:09:85:a2:62:04:96:34:69:27:63:9a:bc:04:ba:
5b:e6:0a:e2:47:b2:a7:6c:cc:a6:a5:29:77:51:81:29:55:12:
5a:8f:81:20:29:30:86:a8:a7:71:34:2d:e5:85:a3:68:fb:90:
cd:ac:34:47:33:a8:91:34:09:bd:71:c5:24:36:be:90:5a:77:
f2:0d:ed:3c:51:be:8d:fc:db:a3:06:08:12:5a:72:15:99:af:
59:96:0e:49:a9:6e:5e:77:dc:7a:0b:d1:cf:70:d0:d0:13:1e:
60:95:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:06:58 2025 by rpki-client