Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa
File: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (raw, json)
Hash identifier: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=
Subject key identifier: 7A:11:73:57:BA:27:73:48:E4:96:52:8E:06:71:CF:DF:85:8A:7D:68
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 16B6
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa
Signing time: Sun 22 Dec 2024 16:54:08 +0000
ROA not before: Sun 22 Dec 2024 16:54:08 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137226
IP address blocks: 204.145.4.0/24 maxlen: 24
208.71.224.0/24 maxlen: 24
208.71.225.0/24 maxlen: 24
208.71.226.0/24 maxlen: 24
208.71.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5814 (0x16b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B
Validity
Not Before: Dec 22 16:54:08 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67684430-e219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e8:4e:9d:e3:3f:91:29:4a:17:e9:90:6b:29:
26:40:c3:e4:76:07:69:5b:bb:94:e5:59:26:88:4b:
56:0e:7d:a7:03:bc:0d:aa:bc:12:46:4b:38:97:49:
f2:60:d6:35:db:df:1b:f6:41:d5:b4:09:f8:99:bd:
99:fc:87:60:2a:23:4d:4d:dd:7f:c9:b8:36:ca:8c:
53:e2:45:96:8e:61:c5:e1:ba:76:73:9d:9f:82:33:
ec:a6:aa:c0:3d:01:81:6e:26:7a:fb:3f:8a:4c:23:
12:fe:f7:b3:e6:e2:34:42:84:cf:01:eb:e9:7e:a3:
ee:99:95:67:35:f2:b1:63:67:54:4e:8f:96:ef:2b:
65:de:c8:14:39:7d:75:0d:2c:5f:60:4c:9b:12:85:
31:05:c6:fb:19:08:5b:d5:cb:7b:54:c7:35:0a:b7:
1b:b4:82:48:6a:1e:8e:53:c9:c1:4f:fe:fd:19:96:
34:41:2d:f5:74:d5:0b:37:67:36:42:22:1f:29:8a:
69:64:e4:7a:86:62:3c:f0:38:f3:94:2f:fd:66:e5:
98:3b:0e:59:27:ae:37:e0:7b:d8:13:ab:b9:ca:77:
a3:9d:25:d9:ce:c3:6f:9f:52:83:1b:d3:0b:05:90:
4b:f2:80:b0:56:c7:66:26:47:0d:fc:e3:80:2a:f1:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:73:57:BA:27:73:48:E4:96:52:8E:06:71:CF:DF:85:8A:7D:68
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
204.145.4.0/24
208.71.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:92:e7:db:a6:05:e4:ff:0d:69:16:6a:31:96:78:7b:e7:0a:
a5:1a:3e:78:34:a5:66:bc:15:2a:ac:af:51:c0:f7:75:34:18:
c7:f4:d3:3b:f6:b6:dd:01:67:99:04:0a:47:ce:5e:96:5d:dc:
25:5c:8f:c1:76:23:db:de:a8:da:34:a3:70:ff:bf:cd:51:83:
3f:94:9a:c1:91:95:22:b7:26:80:5c:d7:fe:d0:fe:92:1e:14:
67:a4:ef:00:79:9c:55:f6:41:f0:d5:44:27:b4:df:67:55:fb:
27:19:e4:6c:e6:77:f6:14:ee:56:aa:c4:4b:b6:26:42:e0:9e:
3d:a7:55:15:2a:97:9f:9d:64:45:8e:38:e3:2e:ed:01:e1:21:
20:4e:b2:d4:14:c3:13:05:a2:0c:02:16:95:31:d4:47:73:c9:
63:ab:ce:de:c4:7f:9a:dc:b1:64:ff:3e:ab:2b:55:ec:08:15:
31:9b:47:5e:aa:03:ac:d6:4a:21:21:61:af:c2:80:b2:6a:71:
0e:e5:05:df:b4:b4:ee:e7:c0:67:82:ca:28:bf:f0:ec:a8:2d:
5d:33:55:01:da:87:e5:82:5a:53:d4:ef:93:bc:13:9e:b9:ff:
7a:45:58:af:67:1b:c0:3e:92:66:f0:62:8c:18:89:23:70:d1:
86:39:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:20 2025 by rpki-client