Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/A387341C1E5711EF8699973AC4F9AE02.roa
File: A387341C1E5711EF8699973AC4F9AE02.roa (raw, json)
Hash identifier: Bsj2aDoYijFFyXFZYIr18o766MCgiKnyLk67YCdq+AE=
Subject key identifier: 6D:32:03:70:A2:98:A5:42:18:E3:EF:8B:BF:ED:73:8E:C9:B6:0B:34
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0CCC
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/A387341C1E5711EF8699973AC4F9AE02.roa
Signing time: Thu 30 May 2024 07:38:43 +0000
ROA not before: Thu 30 May 2024 07:38:43 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 3758
IP address blocks: 151.192.0.0/18 maxlen: 24
151.192.64.0/18 maxlen: 24
151.192.132.0/22 maxlen: 22
151.192.160.0/20 maxlen: 20
151.192.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3276 (0xccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C
Validity
Not Before: May 30 07:38:43 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=66582d02-7a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:c8:4d:9e:4e:09:b2:d7:f6:3f:80:71:38:
2e:ae:65:16:04:95:ad:76:c1:2f:27:f6:7b:21:aa:
ff:43:b7:8c:5d:22:60:3f:fc:09:f5:58:78:cf:0f:
af:69:c2:bb:fa:ae:d6:d2:61:74:c6:46:d1:bb:fe:
05:8d:82:b4:02:ec:46:51:78:8f:f1:f9:5a:00:2e:
a8:12:1f:51:bb:e4:4a:49:4a:61:37:ef:38:63:cf:
38:cf:f3:2a:a9:d9:e3:1c:69:55:7b:77:b6:24:9f:
03:41:74:5c:47:79:0d:92:dc:fd:b2:f6:0a:bc:0c:
e7:cf:47:72:fc:6c:e7:52:ee:8f:d0:00:54:b0:b3:
03:bb:45:52:26:29:7f:d9:b4:24:f7:3b:35:54:a5:
97:5f:2e:90:fa:52:13:2d:7b:89:bc:7b:41:ba:a2:
65:81:80:9d:0a:c7:42:5e:16:a1:8e:b7:8c:58:01:
e1:b1:77:ba:bf:48:49:85:36:97:2c:14:21:1f:fd:
b8:5c:6b:d5:da:4a:b2:a4:f8:7b:d4:29:4e:c9:37:
db:6e:30:cf:a3:48:e0:3d:00:fd:45:90:c3:15:b5:
3f:7b:a6:94:e9:5d:81:30:80:71:4a:f7:f8:87:ab:
95:a1:ba:aa:f8:3a:96:23:e0:93:ed:79:5f:d1:8e:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:03:70:A2:98:A5:42:18:E3:EF:8B:BF:ED:73:8E:C9:B6:0B:34
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/A387341C1E5711EF8699973AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.192.0.0/17
151.192.132.0/22
151.192.160.0/20
151.192.192.0/21
Signature Algorithm: sha256WithRSAEncryption
34:29:8a:ba:fc:21:d3:55:88:29:9d:a9:f6:95:17:33:c9:68:
43:b9:61:e0:21:db:60:0b:30:e0:64:dd:76:8a:71:31:bf:7a:
66:fe:10:d8:c5:e1:6c:37:29:4a:9e:5b:20:5c:b2:a5:0f:e2:
ed:4c:7c:b6:f2:de:60:ef:9f:10:a3:c4:da:5f:07:48:c9:7d:
fc:45:cf:db:7e:03:c2:3e:91:9f:5a:70:ed:a7:cf:3c:5e:a9:
cb:66:bf:4d:cf:8f:5b:71:d2:04:d2:57:85:c1:6d:26:46:98:
7f:57:d3:cf:e8:2f:69:3a:15:86:fb:f9:64:e9:9c:3e:45:5f:
bd:06:0a:d9:c8:2a:4b:81:74:8a:cd:b5:9e:2e:21:9b:51:c3:
6b:ff:bd:69:26:bf:bc:05:da:91:c8:79:be:9f:ce:93:db:a8:
ed:cb:f7:09:82:96:65:ff:82:7d:91:8b:28:79:91:20:ca:68:
16:bc:19:ea:e3:52:3c:0e:67:91:5f:c0:b8:24:13:9c:f8:be:
26:c0:da:33:52:0a:58:b7:05:66:c9:aa:e3:b9:55:a2:e2:dd:
bb:8e:55:8c:a2:59:b7:ed:e1:8a:04:f2:53:38:1f:06:2b:0c:
1f:96:ba:ee:8d:8e:46:92:1d:bd:7e:2f:e2:12:09:ae:7b:78:
db:9f:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:51:09 2025 by rpki-client