Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/994F0A88D86B11E9B8BFCE0AC4F9AE02.roa
File: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (raw, json)
Hash identifier: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=
Subject key identifier: 07:ED:F6:BC:34:CD:E6:7E:3B:E6:89:38:37:4B:F8:A6:BA:D3:21:CA
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 1347
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/994F0A88D86B11E9B8BFCE0AC4F9AE02.roa
Signing time: Tue 04 Mar 2025 15:30:54 +0000
ROA not before: Tue 04 Mar 2025 15:30:54 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 55423
IP address blocks: 167.179.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4935 (0x1347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A
Validity
Not Before: Mar 4 15:30:54 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c71cae-0d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5c:f7:00:d0:f5:d3:e8:ce:fb:ba:f6:fe:4e:
31:2b:49:76:87:ac:8e:2e:a8:e8:4d:4b:b4:88:ec:
dd:01:c6:6c:1a:b2:22:c1:e1:41:fc:aa:da:b7:58:
cb:db:ff:6b:2e:55:b8:e1:fc:24:fe:f4:b7:d3:cd:
a1:da:2f:3c:c6:45:66:79:4a:f4:e0:ef:71:22:83:
a3:12:24:4e:ad:5c:cb:36:7a:2e:56:82:d9:1e:bb:
e8:bb:fd:4f:d0:a7:af:ea:e7:d4:65:97:61:71:ea:
31:b8:bf:b3:c0:e0:86:a8:04:b6:d0:71:2a:44:90:
7d:3f:67:98:88:0a:eb:aa:d1:41:31:76:06:8a:25:
19:47:b7:d8:cb:7c:b0:67:6b:6d:97:51:40:31:2c:
0d:e8:96:41:b1:f4:24:45:57:55:4b:2a:b4:94:46:
70:b7:73:d5:f7:d0:e1:cd:a3:83:4b:a0:63:94:71:
b8:fc:07:74:c0:a7:91:27:d7:1a:c1:3e:3b:bb:45:
da:0c:7d:f9:82:db:63:64:3c:66:b6:94:8c:5f:9a:
2c:51:a1:cf:d4:a6:81:8e:ef:c2:65:f6:00:3e:3a:
df:85:c6:aa:48:a2:9c:b3:d1:87:2a:a8:37:67:e3:
49:d7:8f:91:6b:04:f0:e1:84:e4:18:b3:ed:6d:0a:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:F6:BC:34:CD:E6:7E:3B:E6:89:38:37:4B:F8:A6:BA:D3:21:CA
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/994F0A88D86B11E9B8BFCE0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:e4:42:60:e1:4c:e5:57:ae:88:ee:9a:e7:f0:f1:e6:ea:1c:
db:f3:8f:09:c3:91:c5:e1:6b:17:80:b8:37:d6:f0:0a:2c:3c:
d5:8c:59:9f:89:9a:b5:9c:9f:90:03:7a:79:96:37:87:f4:da:
2a:c6:dd:14:a4:dd:36:ee:da:58:01:4c:80:fe:66:67:b9:70:
ec:b6:dd:74:d1:c0:df:7f:72:c0:b1:d1:c4:10:bb:99:73:1a:
85:d0:f8:75:b9:b5:55:96:43:20:81:29:61:39:b1:c0:9c:dc:
db:a3:64:09:75:2d:7a:5e:f4:bb:0b:7a:6e:fd:e6:d2:ca:04:
74:ab:0a:af:e2:5a:98:b6:04:a2:89:6d:aa:03:2a:78:ce:fe:
94:18:fd:6b:79:e7:25:66:71:87:a3:4f:7f:93:8a:f7:fd:e5:
14:ed:85:41:b9:f2:e7:38:95:17:cd:04:ce:bc:4d:eb:6a:65:
b6:96:97:c5:13:07:1b:33:20:8e:85:08:5d:db:c1:f0:66:a1:
bb:12:8b:44:68:9c:65:c3:36:6a:07:1e:e0:cb:dc:87:3f:32:
be:f4:54:2d:94:2f:27:07:1a:bd:b1:a5:48:90:73:3a:d8:dd:
1b:36:61:85:43:f3:89:bf:13:c1:ed:af:10:7a:60:f9:0e:c9:
12:dd:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:24:05 2025 by rpki-client