Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/65AF30D422D211EAB3ABA447C4F9AE02.roa
File: 65AF30D422D211EAB3ABA447C4F9AE02.roa (raw, json)
Hash identifier: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=
Subject key identifier: A7:31:CB:2D:EC:E8:76:4C:D0:59:EC:FA:5A:9A:B7:2E:B2:9E:E8:FA
Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial: 0CD5
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/65AF30D422D211EAB3ABA447C4F9AE02.roa
Signing time: Sat 08 Mar 2025 18:07:40 +0000
ROA not before: Sat 08 Mar 2025 18:07:40 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136255
IP address blocks: 65.18.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171560
Validity
Not Before: Mar 8 18:07:40 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67cc876c-0412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:fe:86:d4:c7:7b:b7:08:f2:33:fc:17:d0:
fb:b9:61:26:e9:da:d1:2a:ba:04:5d:6b:0c:3a:83:
3f:4f:e7:d5:ef:a0:e6:60:65:45:d6:df:66:77:79:
f1:a3:59:5a:1c:41:b8:c3:4a:ab:ba:37:b1:dc:18:
d3:7d:c1:23:b4:fc:96:d2:a1:95:f1:6f:7b:27:4c:
63:83:10:f4:2b:85:85:b6:ae:50:09:de:ab:e5:12:
d1:0c:c3:49:51:e0:31:6c:f6:6d:db:25:f3:b9:08:
f3:da:06:28:96:94:25:03:9d:27:8b:4c:fd:bc:f6:
dd:43:6d:fc:5d:93:79:06:c9:cf:f6:08:d9:77:ef:
10:d9:dc:72:6b:8f:56:f7:e4:59:4b:6a:e2:6c:13:
c5:48:7d:e5:4b:6b:80:8b:0d:cd:84:01:d3:30:6d:
0a:24:5e:b7:39:7c:50:e9:5b:85:02:21:71:59:e3:
6f:fd:8b:da:b5:13:ab:c2:cc:0c:8d:f2:8e:57:3a:
96:4d:18:db:a3:fa:bc:b1:b7:4a:48:d8:20:59:f7:
ef:3d:d2:f6:c1:db:d0:f8:c7:ab:a8:7c:1d:cf:b7:
3f:73:c2:0a:08:c4:77:76:7f:a1:12:b5:f9:7f:72:
94:00:84:94:0e:68:e0:7c:d8:9e:44:74:66:2b:49:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:CB:2D:EC:E8:76:4C:D0:59:EC:FA:5A:9A:B7:2E:B2:9E:E8:FA
X509v3 Authority Key Identifier:
keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/65AF30D422D211EAB3ABA447C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
65.18.112.0/20
Signature Algorithm: sha256WithRSAEncryption
72:f2:25:fe:77:c1:3f:85:3a:83:56:cd:9c:c3:19:28:f1:25:
fb:78:56:4e:62:34:a4:29:2c:e7:ad:d2:c0:79:71:6b:9b:02:
4f:bc:f4:8a:2e:b7:d5:42:a3:88:72:dc:4d:01:fe:c6:88:3f:
75:b7:88:a8:b3:8a:74:8c:b0:84:09:76:df:72:a3:18:8c:0e:
2e:25:2f:dd:03:48:fd:ce:3a:27:04:7d:85:f9:12:6e:b9:f6:
0b:9d:b4:34:2c:24:c7:7e:ec:53:02:a9:71:59:e0:d9:4d:4e:
01:f1:a7:9f:46:fd:f4:da:a1:6d:98:62:e1:9f:c2:f7:24:8b:
67:42:91:f0:d8:3e:a8:63:70:c5:9a:99:a8:97:0b:d3:8b:6e:
d6:a3:56:a9:51:fd:05:a3:3c:58:68:30:99:a6:19:6e:1b:4a:
bc:53:85:f8:e3:87:5c:75:b0:d8:91:30:e5:a7:a0:ea:9e:e5:
43:6e:56:dd:86:d3:d7:52:2f:05:6a:66:19:d8:40:3d:9b:13:
5d:9f:d9:ac:d7:f9:a7:c8:e4:1e:96:05:52:a3:6f:9c:5b:a6:
03:46:d4:26:8d:62:ce:c1:9e:1f:cc:91:7f:c7:b3:4a:50:07:
7b:74:b7:06:38:9d:2a:65:7d:80:45:03:24:2b:5d:eb:30:25:
50:8b:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:09:03 2025 by rpki-client