Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa
File: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (raw, json)
Hash identifier: W65Bof4UuRWkpC1J6y/jnu+98zllARlm3OPaWe3smHI=
Subject key identifier: 96:FB:36:14:18:41:26:0E:43:70:67:1B:1D:56:87:08:2E:E0:46:E2
Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Certificate serial: 172D
Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa
Signing time: Mon 10 Jun 2024 17:48:15 +0000
ROA not before: Mon 10 Jun 2024 17:48:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 131310
IP address blocks: 143.192.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5933 (0x172d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7
Validity
Not Before: Jun 10 17:48:15 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66673c5f-9366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:02:f4:87:12:62:86:1b:68:cf:84:c2:a0:
d6:93:e5:91:87:37:68:bb:90:99:00:6d:ac:54:e7:
7d:f4:35:30:a8:51:be:a4:33:35:e3:5f:90:8a:8c:
06:52:85:9c:ac:25:13:42:3d:94:dc:77:58:89:11:
d0:8c:5b:71:f4:c4:a5:ba:65:a9:1d:61:e7:6f:6e:
62:e7:33:17:b0:55:cb:59:46:39:fc:31:ea:53:67:
f0:09:7a:63:3b:dc:56:fe:96:80:42:99:a3:f3:46:
25:12:bb:61:fe:f1:68:86:00:21:27:d5:9b:ce:ff:
c0:a2:64:2b:5a:f3:c5:36:88:e9:0b:97:ee:d8:85:
40:2f:dc:f9:f9:d9:f3:48:33:65:16:75:92:a6:35:
c5:f0:e8:33:3c:20:4e:a3:65:c8:1d:03:49:86:0b:
d2:fc:ea:4c:5c:3d:46:79:67:0f:ef:79:d6:0c:c2:
85:07:96:0a:c4:6d:50:b4:0e:19:ab:57:53:7b:d2:
91:5b:01:72:49:27:33:08:84:e3:57:d3:c9:59:db:
e2:da:37:ce:35:b6:99:6b:05:19:17:d6:c2:cd:0c:
96:64:ec:7a:8f:3b:14:d0:39:58:89:47:1b:56:ac:
47:2b:87:15:5d:1f:24:51:e5:fd:bd:64:5a:31:34:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:36:14:18:41:26:0E:43:70:67:1B:1D:56:87:08:2E:E0:46:E2
X509v3 Authority Key Identifier:
keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
be:0a:d2:2e:ea:bc:03:b0:96:94:2b:fe:37:14:62:d2:25:39:
7d:e9:6f:76:6c:48:1a:c0:cc:69:79:b7:78:e8:b4:57:f8:19:
0a:a6:39:a5:4d:7f:c0:b3:9e:ca:f1:e8:0c:ed:2b:e6:99:bf:
53:e8:6d:ba:ff:a5:ee:6d:87:4c:f6:62:bc:b7:8c:8f:23:f6:
eb:2b:5c:37:9f:b6:49:9a:91:75:1e:bf:23:bb:fe:16:21:77:
bf:8b:32:1a:e2:6e:3c:c8:c1:e2:26:ce:7a:81:05:3e:68:18:
9e:37:d0:2c:53:0b:f9:22:81:f5:04:86:37:63:08:3e:16:41:
17:9c:4e:0e:fb:bd:0e:62:58:d5:df:99:3d:82:be:b2:a0:b3:
f7:33:96:83:0a:1d:b4:c9:14:6e:28:19:3b:e8:05:89:1b:09:
9b:fd:05:8d:48:f9:e9:36:eb:8c:01:a8:8b:09:7b:18:92:e7:
7d:46:08:95:49:d0:fe:6e:21:db:5f:ea:15:44:64:f6:99:e0:
57:b1:9d:1d:03:d2:f3:b2:58:7e:ec:3a:95:b1:f7:fc:ef:07:
59:e9:dc:9f:22:72:84:0c:c0:04:d8:41:3f:3e:06:a4:8f:dd:
f1:65:5e:a4:6c:a1:81:68:b6:c9:94:b8:cc:e6:7c:b4:7f:7f:
b3:8e:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:39:20 2025 by rpki-client