Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/E1982A2EAD7511EA94C97127C4F9AE02.roa
File: E1982A2EAD7511EA94C97127C4F9AE02.roa (raw, json)
Hash identifier: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=
Subject key identifier: A7:07:E1:47:78:AC:C3:F6:1A:EF:2D:3F:70:03:45:15:44:FA:15:89
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 1344
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/E1982A2EAD7511EA94C97127C4F9AE02.roa
Signing time: Tue 04 Mar 2025 15:30:51 +0000
ROA not before: Tue 04 Mar 2025 15:30:51 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 45629
IP address blocks: 167.179.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4932 (0x1344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A
Validity
Not Before: Mar 4 15:30:51 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c71caa-7be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:36:84:91:8d:c0:83:f1:ff:da:50:b8:90:
13:c9:29:6c:dd:7e:fe:a0:69:55:43:f0:de:b5:f1:
65:5a:d9:87:6c:b4:9c:1b:a6:fb:67:0f:53:15:b4:
70:e5:21:a6:9c:38:18:78:9c:69:9b:73:59:5e:02:
02:61:df:e1:9c:97:a5:94:27:bf:57:33:c5:92:ab:
9c:1a:b8:68:91:d3:3c:9e:04:a0:20:ee:b9:5e:bb:
8a:d5:02:c7:9f:fd:10:a8:77:bb:7a:03:4f:35:b1:
18:e7:76:8d:fd:0f:89:88:66:fc:4c:31:64:e4:c7:
43:47:a0:52:30:c2:a5:6d:c9:0d:bd:84:ec:55:3d:
cd:5b:be:de:3a:eb:fc:c2:5f:8a:e0:0b:0d:6c:c2:
7a:09:de:e3:f1:5b:dc:ec:c9:02:0a:14:ea:d5:e0:
47:a8:33:2c:72:9c:5d:e5:bc:3f:a4:a4:81:1b:13:
01:5e:ac:a5:6e:a3:95:3d:82:29:66:15:e1:c7:20:
28:8f:d5:42:7f:f6:7d:6f:0c:63:11:f6:4e:7c:08:
0f:a9:27:1f:21:43:3d:76:02:72:90:9a:84:47:af:
be:f2:08:95:83:82:23:53:56:cc:b1:0f:0b:5e:27:
ca:1b:e7:7a:a4:dd:64:93:ca:d7:c5:74:54:53:20:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:E1:47:78:AC:C3:F6:1A:EF:2D:3F:70:03:45:15:44:FA:15:89
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/E1982A2EAD7511EA94C97127C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:57:fa:a4:62:37:e7:82:e3:aa:43:66:c5:1c:f9:4b:d0:8a:
3d:54:66:0d:fb:05:1e:ed:86:0e:5a:4a:40:ed:19:39:8a:6e:
e1:ab:ce:f5:46:69:20:c4:8b:b0:75:37:e9:33:17:2a:48:c0:
c8:05:2e:3e:5e:a5:b8:0c:31:5d:e4:ca:e3:98:7c:f8:12:90:
2e:49:9c:8d:62:7b:4a:b7:d1:7e:0e:57:58:07:a5:7d:2c:20:
1f:36:ba:c3:41:dc:9e:61:86:57:29:c8:48:9a:82:8a:e2:52:
a5:64:67:7b:a4:52:54:d6:7c:03:fd:a4:31:34:a4:0f:9b:54:
11:db:cc:27:65:c5:eb:c2:3c:78:40:d5:00:d2:dc:50:15:53:
3b:c1:6b:45:4c:18:d8:4a:2e:d9:c6:6d:cd:ad:a7:78:d7:bd:
e7:cd:8f:23:40:ab:59:bc:c4:5e:20:ee:f3:cb:4b:2e:b6:e7:
de:fa:27:5e:93:9a:5c:95:ed:d8:d2:14:9b:15:b5:78:e5:06:
37:8b:f7:66:33:14:18:c0:b9:5f:79:b7:9b:73:11:d0:3f:9e:
14:5a:4c:0d:5e:14:cd:9c:43:74:27:db:cb:8e:a6:2c:41:12:
e0:5c:47:d5:dc:48:3e:78:8c:2c:8c:d5:cb:54:00:64:e6:75:
28:af:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:19:18 2025 by rpki-client