Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BBAA5D0A746011ED890CA515C4F9AE02.roa
File: BBAA5D0A746011ED890CA515C4F9AE02.roa (raw, json)
Hash identifier: Ayx04+KgXYYUXrcLNt75oitx2LS6Iv0cmXB1bx5hlN4=
Subject key identifier: 08:17:A3:43:AD:2A:67:E3:AC:A2:EE:3D:D1:6E:0F:0A:16:A3:95:18
Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial: 073C
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BBAA5D0A746011ED890CA515C4F9AE02.roa
Signing time: Mon 05 Dec 2022 05:50:33 +0000
ROA not before: Mon 05 Dec 2022 05:50:33 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 137184
IP address blocks: 202.43.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852 (0x73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176190
Validity
Not Before: Dec 5 05:50:33 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=638d86a9-2c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:78:48:a2:e2:63:af:ff:05:1d:67:55:75:
a9:0c:23:f5:a2:0d:c7:dd:d5:58:c8:33:e6:1c:ec:
84:22:2b:41:6a:ae:c5:e4:75:bc:40:a5:79:9a:de:
b0:f5:b8:14:81:da:05:eb:e1:e6:73:b4:c4:51:22:
5d:4e:09:f1:21:ad:96:04:e6:8e:3a:62:80:5e:43:
89:75:de:b9:7e:18:f5:7d:56:8f:f9:f2:1d:3e:79:
6e:e9:49:34:c9:16:0c:35:2e:06:bf:39:2d:3c:f1:
57:6f:a0:d4:3e:e4:4a:3f:6a:d3:ec:04:34:48:1a:
6c:4e:62:52:61:ac:31:9d:cb:2e:2d:95:2b:ee:b8:
e8:be:40:ab:47:aa:ab:44:e5:56:ed:24:54:21:8b:
37:95:81:2b:f1:c8:ea:77:6d:2c:da:dc:ca:ea:be:
da:3c:ad:44:9f:2c:fb:95:7f:84:63:24:4a:fb:aa:
5b:c6:62:33:72:d9:08:68:c5:df:0a:93:48:41:0c:
2a:6b:c9:85:0f:18:55:ac:d6:3a:a8:b1:d1:f1:bb:
7b:6b:cf:40:8c:c4:74:a0:8c:a1:77:4c:b9:fb:3a:
31:86:0d:e3:9f:c1:e5:50:e5:22:38:3e:1f:07:5e:
83:92:d0:d9:28:2f:25:0b:b4:de:e1:00:50:27:ea:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:A3:43:AD:2A:67:E3:AC:A2:EE:3D:D1:6E:0F:0A:16:A3:95:18
X509v3 Authority Key Identifier:
keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BBAA5D0A746011ED890CA515C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.43.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:55:8c:1f:05:1d:a7:11:dd:e9:49:a6:10:53:9a:01:e4:c9:
5c:91:8f:d1:c4:81:f4:c9:8b:47:bc:36:41:61:86:4a:7e:04:
14:1f:c2:02:15:38:09:70:4e:31:73:2e:39:eb:16:ad:d0:d1:
76:cc:02:00:4b:6e:48:05:1a:1b:a5:ae:5e:e6:8a:11:bb:19:
6a:f5:a9:76:21:1c:8d:60:14:9b:46:f7:34:50:7e:09:ae:85:
54:51:61:9f:92:e6:14:db:6b:69:b8:1e:25:15:72:f9:f4:eb:
22:e0:c0:da:34:02:e6:eb:65:69:dd:19:a5:f2:d2:2b:35:24:
44:a2:3e:b6:6e:37:cb:da:fb:89:c2:1f:89:6f:e9:10:a1:8f:
7a:9b:79:b7:32:d6:45:f3:19:54:ef:d6:32:37:a3:fb:8f:2d:
73:d7:b9:c9:96:09:d7:94:21:91:9e:e8:fa:a1:1d:ae:46:a5:
db:85:09:e2:dd:59:89:e9:0f:55:30:bb:e0:11:1a:92:22:4a:
37:2f:ca:d0:5c:73:ac:c2:38:35:6e:ad:61:19:ff:94:fd:db:
36:6e:73:99:3d:4b:78:58:7c:cf:bf:83:4f:50:0d:24:89:a8:
7c:5a:12:7c:cc:e9:f8:c3:45:cb:c4:47:7a:37:a7:2d:64:a9:
00:1e:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:08:30 2025 by rpki-client