Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa
File: DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa (raw, json)
Hash identifier: zY2HFqsbJ8/jLQBMjPpHRfGu9g3E8mXkzh/HPX8tacQ=
Subject key identifier: 14:F4:4E:2E:0D:94:C7:6D:2F:19:A2:F8:2B:56:E2:4A:39:F1:25:09
Certificate issuer: /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
Certificate serial: 05
Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa
Signing time: Fri 07 Feb 2025 08:46:26 +0000
ROA not before: Fri 07 Feb 2025 08:46:26 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153560
IP address blocks: 163.61.19.0/24 maxlen: 24
2401:eb60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180838
Validity
Not Before: Feb 7 08:46:26 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a5c862-496d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:b8:ab:4d:88:fc:9e:9f:1d:99:96:d0:c9:
e7:1e:87:30:82:50:c6:a6:c9:b5:fe:2b:70:af:82:
3d:1c:88:a9:f2:95:2f:12:eb:87:45:51:91:b9:b7:
e4:ad:56:13:98:ce:65:35:b9:7b:ea:30:cf:53:7e:
b9:f2:d2:e4:75:47:e9:3c:8f:68:ca:32:b8:cd:a1:
34:11:92:e8:b8:96:c0:c5:12:77:23:c0:2a:4e:bc:
b1:a9:7b:83:50:aa:55:90:9f:51:ea:50:b0:5f:6b:
6e:68:48:b8:02:2e:ec:69:64:5d:b5:36:53:46:6a:
bd:ad:02:17:2d:47:3e:3d:76:fa:d8:77:ff:00:57:
25:98:46:2b:df:73:af:54:a9:18:f4:6e:33:35:e8:
30:86:b8:90:11:38:16:90:4b:0f:db:e1:ff:ed:03:
75:22:c7:50:a8:bc:f6:66:1e:b2:22:50:3c:42:90:
05:a9:03:48:99:82:b8:d0:c5:f3:6c:97:ee:6c:b5:
b9:ac:d8:fd:09:e6:4c:6e:7c:50:7e:e3:bf:23:c3:
67:ab:9f:db:f3:1e:6a:72:24:c5:d9:d1:a9:89:b5:
f8:16:88:29:15:3c:38:94:cc:67:a4:d4:ba:15:00:
a9:ec:fd:09:20:94:8e:47:e5:81:68:48:e2:88:d7:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:4E:2E:0D:94:C7:6D:2F:19:A2:F8:2B:56:E2:4A:39:F1:25:09
X509v3 Authority Key Identifier:
keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.19.0/24
IPv6:
2401:eb60::/32
Signature Algorithm: sha256WithRSAEncryption
36:e8:59:84:c6:fd:e5:cf:34:53:5f:f6:62:e1:54:a4:d8:e5:
1b:ce:1b:bb:16:4b:e6:f0:f8:8d:64:ed:7e:26:e4:93:63:f1:
48:53:a7:f4:76:26:f4:18:1f:4c:47:5e:8d:87:60:08:67:81:
7a:bf:ae:cb:26:1a:37:21:9b:7c:26:af:a9:9a:47:8b:0f:a5:
ec:69:b8:f0:6c:a2:da:5d:14:5d:4e:9a:52:5f:a2:51:b2:55:
ef:1a:ea:62:40:c6:0a:b6:ac:9a:c6:b9:57:73:9b:20:66:c7:
dd:aa:70:79:e0:00:4f:a2:7a:21:f9:7f:5d:49:02:a8:b0:00:
87:ab:85:63:e2:8f:71:95:f6:58:84:dd:5c:a8:60:f3:ee:73:
71:7e:5e:e8:c2:21:a7:b1:99:fa:58:eb:34:71:d9:d8:73:51:
fc:73:0e:75:33:84:5a:f0:96:7e:2a:00:35:99:f5:f5:94:4a:
e2:1c:05:d8:ac:49:af:70:0d:bc:4d:c5:5f:36:dc:e6:3e:74:
cb:8a:0d:d2:76:c0:6a:89:7f:cc:6c:dd:e2:0b:27:ac:3e:5b:
94:83:6b:a2:87:84:b8:36:be:87:a5:f0:86:f1:b5:3b:43:25:
45:53:76:c7:0a:a1:d6:de:8f:5c:29:e5:6c:43:78:28:0e:0b:
0b:fb:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:33 2025 by rpki-client