Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/887BE0D0405D11ECA642D813C4F9AE02.roa
File: 887BE0D0405D11ECA642D813C4F9AE02.roa (raw, json)
Hash identifier: qxVcUGlCZn4SUG82SOAXq9RSMSYslC+bAGjT3ytadTQ=
Subject key identifier: 12:F8:03:6C:BC:A7:81:50:D0:C3:21:A6:6E:93:CC:03:38:BD:C9:CA
Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Certificate serial: 046C
Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/887BE0D0405D11ECA642D813C4F9AE02.roa
Signing time: Sun 23 Mar 2025 00:15:50 +0000
ROA not before: Sun 23 Mar 2025 00:15:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 55433
IP address blocks: 196.1.1.0/24 maxlen: 24
196.1.109.0/24 maxlen: 24
196.1.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132 (0x46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3
Validity
Not Before: Mar 23 00:15:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67df52b6-8cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:1f:8f:ad:8a:88:d7:ed:52:af:4b:c5:15:
f7:fb:e5:e3:3c:98:84:2b:de:b9:e9:4b:c5:2c:c9:
26:37:c9:00:a3:7f:97:7c:b2:af:21:c3:39:64:dd:
b2:5d:09:a0:ac:e0:ea:de:19:11:82:bd:d2:54:56:
e8:7e:cb:48:00:32:eb:f4:54:8b:59:60:35:27:1c:
55:51:f2:76:d9:bb:3a:4b:95:8c:af:92:db:44:db:
a9:26:5c:44:4c:1d:9a:22:2c:27:e9:d5:9c:9f:e9:
a1:1e:2f:3d:bb:f4:45:55:71:3f:2b:27:9b:b8:d3:
e5:d5:22:d0:00:a4:ac:6d:86:18:87:70:86:3d:3a:
4d:df:ba:ab:bc:0b:42:77:84:9e:a9:84:6d:2e:9e:
23:ff:36:e5:00:86:60:f9:9e:a3:2e:03:0b:43:db:
2b:38:11:0b:9d:90:34:1f:de:2c:ea:c4:e3:ef:cf:
f1:78:6b:02:de:77:11:63:0d:94:e6:20:a3:e7:53:
df:d2:57:51:ac:a1:05:94:62:3e:5f:f7:95:9f:46:
a3:ed:5a:e4:e1:6c:ec:34:64:6c:32:b0:e1:c4:e1:
df:a9:1c:4c:12:14:61:f7:a4:a4:23:8e:5b:fa:f6:
30:9c:cc:71:66:e8:f6:9d:dc:30:53:8c:ae:78:2a:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:03:6C:BC:A7:81:50:D0:C3:21:A6:6E:93:CC:03:38:BD:C9:CA
X509v3 Authority Key Identifier:
keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/887BE0D0405D11ECA642D813C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.1.0/24
196.1.109.0/24
196.1.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:01:18:6a:24:3f:9a:31:fe:d2:de:0d:cf:6d:f2:81:4c:96:
00:7b:00:9d:55:de:2e:b3:42:38:59:d0:0d:a2:96:ca:d3:03:
16:94:e4:94:6a:5c:29:10:5d:ae:de:95:80:b8:8d:4c:e1:f9:
b8:e3:cb:1c:67:9f:79:7f:0c:01:d1:43:55:6d:f8:fc:46:52:
7a:b5:d3:01:cb:e9:ca:34:37:d5:0d:e5:01:95:56:48:5c:66:
fa:43:84:8e:90:fb:d1:3f:c6:f6:53:46:9f:7f:3f:71:ff:74:
60:4d:53:98:80:52:3f:6d:34:4a:95:31:a8:4f:13:c5:55:6c:
6f:cf:33:69:d0:b4:c7:38:6b:78:cf:24:bf:12:7d:d1:b3:62:
da:e7:94:78:4c:fb:ec:35:f4:9e:12:5a:62:48:3e:70:e9:ea:
47:46:e3:45:97:73:72:37:da:9f:77:1f:e7:30:a5:64:da:a6:
01:ae:34:0d:9f:5f:2f:90:f2:24:10:fb:89:79:64:1b:4d:30:
be:53:c9:ee:89:67:12:6d:66:d6:bc:46:d9:be:c2:08:ec:9d:
de:34:a7:a7:ff:04:3c:5c:aa:22:60:26:0e:6c:f1:31:f2:5d:
18:97:da:28:18:56:11:98:9b:a4:a5:ad:dd:3a:b0:59:c6:6c:
99:1f:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:59:03 2025 by rpki-client