Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
File: 4B65B208288F11EFB3C88742C4F9AE02.roa (raw, json)
Hash identifier: r2GAe+G1s6g34WU+Ia+gD4xaBN9kiFwzFN+koW6QJQs=
Subject key identifier: D4:C9:C2:DE:1F:0A:52:30:D3:08:73:B5:88:8D:8F:CD:6B:7B:1D:CB
Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial: 287A
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
Signing time: Thu 06 Mar 2025 16:02:30 +0000
ROA not before: Thu 06 Mar 2025 16:02:30 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 17770
IP address blocks: 182.161.0.0/19 maxlen: 19
202.124.160.0/21 maxlen: 21
2402:4000:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10362 (0x287a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A447
Validity
Not Before: Mar 6 16:02:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67c9c715-b369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:3c:bd:61:f4:c1:2a:ab:5e:d1:56:09:90:
1c:6b:16:18:09:dc:d6:0c:9b:18:2e:af:b2:d9:ce:
78:6f:5c:27:be:49:7f:c0:1e:df:34:f1:4c:a3:15:
ea:37:24:d0:ec:4f:a8:e9:7b:52:58:66:d5:1f:28:
49:29:11:d0:88:f4:66:67:98:b8:ee:ca:db:cc:cd:
36:1b:70:51:d3:3e:7a:56:47:c2:f4:8e:d6:31:18:
da:f6:b5:54:f0:12:76:81:24:c3:6e:da:68:8a:17:
b9:57:e0:b4:b4:2a:1c:ca:5f:b9:2b:e9:21:4f:34:
ee:44:17:55:37:01:7e:63:c7:69:91:99:f3:35:66:
f9:75:ce:c2:9d:4a:00:c0:49:42:74:00:e4:95:1f:
35:67:47:9d:5a:0f:20:c3:98:f7:49:51:25:5b:40:
a9:08:04:40:2a:32:a1:df:8d:21:fa:0e:f5:f2:f3:
b6:37:06:23:d1:5d:92:8c:fa:88:57:c4:9d:2f:22:
7e:7e:3d:1d:74:b8:4d:9d:1c:c4:95:55:62:7d:63:
9f:a0:39:41:69:8d:54:d9:65:d5:e8:3b:a3:da:b8:
b6:a3:7a:ed:49:6e:de:2b:49:8b:5d:a6:f1:4b:78:
d6:31:8b:67:f4:b6:ec:dc:c3:3a:40:d4:96:e0:84:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:C2:DE:1F:0A:52:30:D3:08:73:B5:88:8D:8F:CD:6B:7B:1D:CB
X509v3 Authority Key Identifier:
keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.161.0.0/19
202.124.160.0/21
IPv6:
2402:4000:f000::/36
Signature Algorithm: sha256WithRSAEncryption
43:0f:9f:07:cf:41:19:02:19:2c:89:f4:e4:34:5d:94:0b:8d:
8d:d7:c0:de:c6:e9:d7:52:e4:f8:d3:52:65:1d:26:6d:c4:cd:
a4:3b:b0:1d:8a:ac:ba:bd:bf:09:4c:44:a7:05:04:5c:1a:cb:
5d:1d:4d:05:32:9d:f5:b0:79:11:80:ca:cb:d1:f1:73:99:72:
42:b1:e7:00:d8:dc:de:00:87:3b:f8:f4:dc:da:26:31:98:e7:
41:f3:8a:a7:ea:c7:67:0d:09:dc:2d:a0:26:1c:c4:a8:d6:9c:
86:70:6f:59:1d:14:a3:d0:cf:42:a4:58:c9:2c:1d:77:b9:23:
4f:0a:91:ec:98:01:a2:7a:cd:a8:fb:2f:bc:19:51:43:a8:1e:
f7:dd:f1:6a:d8:fe:8f:62:64:c7:8f:73:73:77:38:8b:7f:5d:
64:35:40:c6:2f:ad:f2:85:a8:f0:eb:00:d1:18:c5:69:93:d3:
0a:94:67:51:9d:ac:43:9a:4b:d4:3d:ff:9e:f0:49:f1:60:b5:
53:d8:53:8b:e8:4f:78:bd:b4:84:88:19:6f:37:65:2c:9e:e5:
59:a1:cb:ca:41:03:0c:07:a3:6a:93:5a:49:b7:92:7a:79:bb:
4c:d0:7e:43:6a:35:ba:4d:b0:2e:65:d9:e5:ed:3e:69:cd:12:
98:bf:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:34:04 2025 by rpki-client