Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/30CC092AE53011EFA140503EC4F9AE02.roa
File: 30CC092AE53011EFA140503EC4F9AE02.roa (raw, json)
Hash identifier: +368O4g5op3NFEyPxMy/g2aKCfQYvcEtTWG1Z/mxGSQ=
Subject key identifier: A2:75:69:7F:6C:86:E2:95:1F:35:3F:30:F9:D1:5B:08:87:1B:B0:18
Certificate issuer: /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
Certificate serial: 07
Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/30CC092AE53011EFA140503EC4F9AE02.roa
Signing time: Fri 07 Feb 2025 08:47:41 +0000
ROA not before: Fri 07 Feb 2025 08:47:41 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 398704
IP address blocks: 163.61.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180838
Validity
Not Before: Feb 7 08:47:41 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a5c8ad-9c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:75:cc:b6:66:9d:70:c6:c4:a4:c6:9c:47:17:
37:58:0b:ab:eb:77:31:a7:28:ef:58:fe:03:d0:5e:
17:2e:2d:c9:d2:24:6e:26:78:d6:6c:b9:68:7a:9c:
d7:47:c3:0c:f0:02:ff:00:d8:cf:ea:09:b0:9d:40:
6f:fc:0d:e9:29:5e:57:4a:44:95:6b:7b:8c:65:d1:
0b:b4:4e:3c:3e:6b:39:75:7d:1f:4a:08:00:94:95:
8f:ce:e5:cc:c1:f3:aa:62:ac:26:fb:3c:26:db:f2:
7c:c2:e4:4c:83:aa:76:e9:fa:f4:d4:69:11:90:6e:
95:de:71:d5:b6:a0:6f:e6:46:b3:03:11:f3:2c:06:
40:9e:21:c8:b7:b6:57:4f:bd:c5:85:08:e1:4a:d1:
8e:b5:b8:61:3e:44:91:68:68:d2:65:a9:8f:e8:77:
30:4d:58:1e:4e:87:73:3c:6d:7b:b8:57:18:ea:b4:
cd:2e:bc:de:7b:69:c9:ca:f6:d3:94:8d:11:f3:86:
9c:86:7b:ad:67:b2:1d:05:30:59:95:fb:eb:7d:08:
3d:78:8b:32:38:20:6c:59:a9:b6:32:05:5e:9f:d7:
8b:2d:de:9b:8a:f7:6c:c3:80:c2:ae:dc:48:78:2f:
09:7d:50:1f:ff:85:84:7e:38:bf:ae:7a:db:91:8a:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:69:7F:6C:86:E2:95:1F:35:3F:30:F9:D1:5B:08:87:1B:B0:18
X509v3 Authority Key Identifier:
keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/30CC092AE53011EFA140503EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.19.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b4:b7:46:53:7a:ad:0a:7f:81:41:1a:41:48:83:8a:33:4d:
62:6c:ca:b6:ad:02:98:ad:5f:d0:17:39:db:1d:2d:1d:3c:e2:
b9:48:d8:27:9e:e2:4f:f4:4a:b5:c6:06:4f:c9:44:a0:91:24:
97:49:4f:4b:58:d6:64:08:17:17:f1:bb:ec:01:55:93:64:48:
7b:f2:38:53:90:54:72:7e:ad:26:5f:29:c7:fe:4e:3f:78:9d:
47:ed:ad:e8:26:e1:5e:d7:97:bb:24:9f:c4:98:88:2f:e6:ec:
a1:ca:2a:a3:1e:cb:2f:10:3d:a4:a2:33:67:ee:42:59:a3:94:
75:7f:f1:a3:6e:6f:20:59:a2:1a:d9:c5:a2:cf:a2:1d:1e:69:
ea:64:e2:f4:fa:99:d1:2b:87:e8:2c:dc:9a:76:3a:c5:9d:80:
60:3f:10:d2:32:bd:92:70:fa:3f:05:fa:e0:eb:8a:9f:76:2f:
1e:de:e4:1f:ab:cd:eb:e0:5c:e0:f9:eb:28:b1:d7:b4:70:0f:
ae:41:6b:55:a8:c8:ee:c8:93:0f:d2:69:a7:70:d8:a0:2e:00:
da:4b:eb:cc:f7:3f:6f:ee:e9:09:e5:c6:55:1b:83:01:c0:6b:
08:02:24:8d:73:27:90:7e:4f:10:fd:72:d1:65:5a:28:bd:bc:
e2:c3:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:04 2025 by rpki-client