Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/ACDC465C7AEF11EFA321CE80C4F9AE02.roa
File: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (raw, json)
Hash identifier: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=
Subject key identifier: BE:33:1C:BA:38:EF:1A:2B:5D:43:21:9E:17:03:A8:A8:11:FB:24:B3
Certificate issuer: /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial: 05A5
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/ACDC465C7AEF11EFA321CE80C4F9AE02.roa
Signing time: Thu 12 Dec 2024 23:13:30 +0000
ROA not before: Thu 12 Dec 2024 23:13:30 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136260
IP address blocks: 49.157.105.0/24 maxlen: 24
116.50.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161613
Validity
Not Before: Dec 12 23:13:30 2024 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=675b6e1a-5a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:08:61:33:e4:64:fb:c1:b7:18:1c:10:d6:
33:17:b3:f0:6b:f6:fa:4a:d2:13:7c:c2:bc:7b:92:
af:97:89:3f:06:a8:c4:1c:d5:3e:e1:5e:47:4a:3b:
6b:b1:60:70:66:2a:93:2a:00:87:c5:6f:27:5e:46:
03:25:6d:17:85:f6:5b:d8:5c:b0:56:82:3c:a2:9f:
04:5f:99:39:9f:08:c9:8b:39:ae:f1:67:74:45:47:
7c:92:3a:fd:f7:2e:f5:29:72:fe:3f:99:37:90:29:
25:46:dd:48:2a:f5:2e:38:0e:3d:cf:85:c9:18:1c:
17:72:c4:47:f7:f0:b3:8b:ca:0f:c8:70:28:5c:d7:
29:5d:b8:3a:6b:b8:d3:0b:56:03:42:f5:dd:48:ba:
44:78:05:06:f6:fe:49:7f:92:e1:b1:66:85:ad:65:
25:ab:79:5b:41:99:d7:48:d3:87:90:6d:ee:b6:a9:
aa:e0:34:f5:68:21:f0:d9:03:9f:15:0c:82:08:c4:
b4:5f:c4:3b:ca:67:bd:1c:95:6a:ce:f8:70:d0:f5:
c7:db:f9:86:4b:8f:4e:ca:73:ba:da:37:d5:d3:e7:
b0:e0:0c:e4:44:6e:fe:5e:ca:6b:b2:16:a0:69:de:
a9:87:97:b6:02:a5:cd:8e:a3:a7:e7:25:09:37:ed:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:1C:BA:38:EF:1A:2B:5D:43:21:9E:17:03:A8:A8:11:FB:24:B3
X509v3 Authority Key Identifier:
keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/ACDC465C7AEF11EFA321CE80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.157.105.0/24
116.50.149.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f1:78:a9:e8:8b:c9:e5:b9:73:fe:bb:51:f1:33:c9:d5:c4:
9c:36:a4:3a:4f:cb:b0:3d:eb:1b:4c:86:d4:67:6a:f8:3b:02:
ae:37:c0:d8:d2:90:33:08:53:e3:2d:01:2b:c0:10:e0:6e:b4:
65:10:9d:55:ea:54:5c:77:71:09:38:71:e8:6c:c1:39:cf:70:
cd:f2:b0:57:14:13:67:64:66:a8:66:0a:7e:4c:50:9c:4a:a0:
d6:2f:2e:8d:f8:b9:08:c7:89:be:bc:36:10:61:63:0a:c2:e5:
17:f5:15:18:5b:f9:b9:79:cd:ec:f0:6b:27:10:02:ea:96:0a:
0c:d1:66:c6:6c:9b:ff:c1:cc:de:66:eb:33:0b:d4:a3:9a:fd:
02:fd:b5:e5:f7:b4:ea:14:5e:93:27:d4:61:96:bb:3e:f8:02:
25:89:6b:37:1a:54:08:bc:4b:c4:b4:52:d0:88:70:c4:85:0c:
cb:08:51:c9:01:9a:89:a5:e3:7c:4e:67:d0:35:55:4e:1d:9d:
cc:ae:c4:5a:49:e9:04:72:36:79:b5:f4:7e:dd:15:4d:02:60:
9c:bd:1c:91:af:dc:1b:ad:7a:fe:51:73:98:f3:fd:89:de:50:
17:cd:af:4d:32:1a:2d:30:a5:76:80:a2:ad:a4:23:13:38:b8:
91:08:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:10:21 2025 by rpki-client