Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
File: AC61350A4E3C11EF9286040CC4F9AE02.roa (raw, json)
Hash identifier: KPTNrWY2XlDEsPgLDUjguFW+z6ooLjC63NizYUzGvbE=
Subject key identifier: F0:77:E7:6A:D6:DF:9F:11:D2:CD:93:98:6F:E6:A0:29:3D:B4:B3:4D
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 018E
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
Signing time: Thu 27 Feb 2025 07:06:36 +0000
ROA not before: Thu 27 Feb 2025 07:06:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10235
IP address blocks: 164.53.0.0/16 maxlen: 16
164.53.28.0/24 maxlen: 24
164.53.29.0/24 maxlen: 24
164.53.42.0/24 maxlen: 24
164.53.43.0/24 maxlen: 24
164.53.44.0/23 maxlen: 23
164.53.46.0/23 maxlen: 23
164.53.65.0/24 maxlen: 24
164.53.67.0/24 maxlen: 24
164.53.70.0/24 maxlen: 24
164.53.71.0/24 maxlen: 24
164.53.78.0/24 maxlen: 24
164.53.92.0/24 maxlen: 24
164.53.97.0/24 maxlen: 24
164.53.98.0/23 maxlen: 23
164.53.99.254/32 maxlen: 32
164.53.122.0/24 maxlen: 24
164.53.124.0/24 maxlen: 24
164.53.125.0/24 maxlen: 24
164.53.139.0/24 maxlen: 24
164.53.152.0/24 maxlen: 24
164.53.158.0/23 maxlen: 23
164.53.160.0/23 maxlen: 23
164.53.162.0/24 maxlen: 24
164.53.164.0/23 maxlen: 23
164.53.166.0/23 maxlen: 23
164.53.168.0/23 maxlen: 23
164.53.170.0/24 maxlen: 24
164.53.171.0/24 maxlen: 24
164.53.176.16/28 maxlen: 28
164.53.182.0/23 maxlen: 23
164.53.192.0/24 maxlen: 24
164.53.192.254/32 maxlen: 32
164.53.193.0/24 maxlen: 24
164.53.195.0/24 maxlen: 24
164.53.204.0/22 maxlen: 22
164.53.214.0/23 maxlen: 23
164.53.215.254/32 maxlen: 32
164.53.216.0/24 maxlen: 24
164.53.218.0/23 maxlen: 23
164.53.220.0/23 maxlen: 23
164.53.222.0/23 maxlen: 23
164.53.224.0/22 maxlen: 22
164.53.230.0/23 maxlen: 23
164.53.232.0/24 maxlen: 24
164.53.234.0/23 maxlen: 23
164.53.238.0/24 maxlen: 24
164.53.239.0/24 maxlen: 24
164.53.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8
Validity
Not Before: Feb 27 07:06:36 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c00efc-71d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:b0:49:96:b7:21:39:3c:f7:89:56:2f:79:
c7:5a:0f:9f:1f:14:d4:ce:ac:4b:77:17:1d:90:81:
2f:f8:2a:65:90:2f:05:03:50:4f:6e:8a:0f:05:4d:
f2:f9:1b:57:0b:26:c6:9a:93:94:c3:18:30:e0:e0:
72:89:4a:65:6a:a4:f8:cb:c1:d7:5a:87:ff:6b:69:
f8:06:c5:08:4c:8e:a5:67:0c:50:79:ac:37:6a:42:
37:38:a3:ef:77:f0:69:bf:cd:dc:1d:1f:22:1a:e9:
e8:f0:19:e5:ba:06:a2:5b:bc:40:2b:8b:35:ae:d0:
11:5b:fe:6a:15:db:60:99:6e:af:1a:07:0e:9f:36:
c1:c9:4e:9e:53:5d:2e:54:fa:bd:d6:6b:4b:9b:5d:
50:4c:6a:62:6c:65:b6:7d:ad:a8:0f:cf:ed:6b:be:
54:19:70:fe:94:39:55:55:89:0c:35:8f:d7:f1:86:
20:85:d3:28:25:1e:1e:fa:07:a0:b6:bc:d6:c1:6a:
5d:11:3c:1f:84:9e:aa:e0:ae:8a:ae:8b:72:8a:57:
fe:9f:96:5f:53:30:6e:00:96:47:55:3c:80:b0:e8:
1f:12:20:a6:fd:c1:1c:6c:13:0f:20:98:6c:3c:16:
e9:5b:e2:80:1f:0f:83:7e:a7:c3:7d:ba:e1:66:b8:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:77:E7:6A:D6:DF:9F:11:D2:CD:93:98:6F:E6:A0:29:3D:B4:B3:4D
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:b4:47:32:9f:d0:05:61:6e:7b:2b:ba:a7:22:b2:39:62:d9:
91:ed:23:83:d4:d7:4a:bb:4f:78:9b:0f:1f:f5:f2:d6:87:bd:
fc:5c:a9:6e:d0:c1:d4:44:e3:9e:65:bb:bb:bb:ef:3f:92:a7:
40:df:32:b9:3e:73:22:61:13:7d:d6:c4:bc:07:4e:2c:f8:2f:
87:5e:69:f8:0c:2a:b4:55:cf:ee:a1:5a:ae:46:78:ec:bc:59:
6e:84:0e:87:b1:8f:30:92:58:9a:cd:7f:69:d2:35:fe:99:51:
eb:5e:30:ae:0f:34:37:6a:56:84:55:d9:0d:27:3d:bd:45:ee:
6b:39:8e:f2:ed:40:8f:16:62:b0:bf:35:8b:35:37:8e:59:af:
12:6f:05:42:d7:2e:b5:4c:6d:d7:26:f3:3f:0e:27:ae:30:e9:
63:c9:4c:ab:2f:56:70:88:16:c5:00:d9:a6:3e:23:60:a1:9f:
1e:5f:98:60:7c:a5:76:d8:d4:8e:83:07:32:5f:00:2b:55:e6:
e0:4a:39:5a:6f:8c:c7:c0:40:e4:b2:d9:9c:0a:ba:74:b5:9c:
50:3f:73:0b:97:80:54:9f:bb:5c:97:fa:d2:d8:ec:92:50:28:
f5:c8:91:f3:d9:49:7b:fc:ec:1f:ac:95:8e:47:16:35:4b:0f:
ab:a2:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:35:20 2025 by rpki-client