Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
File: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (raw, json)
Hash identifier: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=
Subject key identifier: F9:63:EE:02:87:85:5B:DE:CD:7D:AF:C6:EB:0B:56:05:E8:1D:BB:32
Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial: 09A6
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
Signing time: Wed 08 Jan 2025 16:33:45 +0000
ROA not before: Wed 08 Jan 2025 16:33:45 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 45558
IP address blocks: 45.41.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA
Validity
Not Before: Jan 8 16:33:45 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677ea8e9-3970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:9a:7b:a1:54:02:c6:89:fb:c9:41:ac:be:
fd:5b:9b:1f:33:cf:bd:3d:7b:4b:ee:c0:21:e9:60:
bd:b8:1e:5b:e9:7e:64:c7:d6:ae:0a:a0:6e:62:f7:
ee:78:87:e7:4c:3c:96:e4:ab:51:8f:c1:a3:4d:c7:
0b:4e:a9:fa:5e:a6:3c:2b:9a:0f:4e:0d:d1:66:b7:
2b:2b:74:71:86:90:9b:de:72:88:b4:9d:bd:46:ab:
5e:6a:33:91:77:c0:2c:a3:b8:1d:50:88:65:cb:1c:
25:b9:24:1d:03:b1:a4:6e:a7:f1:49:50:22:e7:51:
ec:74:34:64:53:2f:cf:33:1f:ff:bb:96:87:24:f0:
8d:24:74:e9:d7:11:b2:be:14:58:fe:85:9c:bb:a7:
da:32:29:64:c5:82:d9:cf:84:af:72:26:d3:98:2c:
3e:c0:c1:bb:12:b6:66:b8:f3:22:d5:6e:a1:33:d2:
f1:e3:d3:9c:6e:e8:7a:14:66:4d:fc:f3:2e:87:a4:
41:fe:dd:2b:da:da:97:02:6d:47:29:7a:20:12:92:
a4:6c:53:4c:a1:0d:4d:52:8e:82:f7:19:89:31:e5:
74:15:96:b1:eb:2e:25:50:5f:45:e9:39:53:07:63:
f8:97:2f:5e:fc:aa:f3:e5:3b:8b:04:ee:5c:22:fa:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:EE:02:87:85:5B:DE:CD:7D:AF:C6:EB:0B:56:05:E8:1D:BB:32
X509v3 Authority Key Identifier:
keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.41.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:3e:48:fc:36:27:8f:25:a9:a2:f1:fb:5d:c2:54:df:5d:44:
cb:b7:14:02:5b:d6:e2:3b:c3:92:14:18:5f:2f:72:12:25:78:
b2:45:b1:f1:f4:70:8f:07:d2:29:c5:83:02:b2:8a:2c:f2:49:
e8:da:e7:53:f2:7d:01:f1:96:42:18:ab:fe:82:5d:27:ba:62:
24:c0:a2:22:91:a7:f5:35:01:84:70:0c:29:63:c8:22:08:6a:
2b:e9:f4:55:6c:d1:32:f8:50:4f:9b:a4:14:6a:bb:61:89:e9:
ec:6c:2d:af:41:72:54:fd:bd:ef:ff:44:49:11:07:19:0e:05:
a3:36:52:11:bb:25:5c:a3:10:b0:99:1d:cd:7f:f6:bd:81:45:
49:69:a9:14:eb:31:b5:3d:23:88:79:78:5b:2e:70:ba:2c:33:
28:2c:42:c2:46:ac:05:33:6b:16:ed:61:2b:87:d5:2a:69:a8:
44:5d:8a:64:f0:96:c1:5d:f0:02:00:64:ec:60:ec:12:d4:b1:
51:1e:e9:c8:c5:46:d1:73:b8:a8:0d:31:55:19:a8:3f:12:af:
9e:76:f8:8b:00:e9:33:5d:4d:5c:d7:08:4b:6a:6b:58:51:90:
2e:be:1d:de:b4:7c:1a:e2:64:e6:b5:01:3c:0a:55:1d:ba:ab:
3e:31:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:18:05 2025 by rpki-client