Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa
File: 13702C3EE15B11ECA05C9236C4F9AE02.roa (raw, json)
Hash identifier: QPyPuuXiEoxMRcuvSgY9i0fqsHr66Z613AzBKY7x8bA=
Subject key identifier: D2:DC:38:2A:5B:AE:1E:EC:0A:B7:44:FA:20:80:E3:BB:F5:53:2F:0F
Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial: 0488
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa
Signing time: Thu 23 May 2024 02:05:52 +0000
ROA not before: Thu 23 May 2024 02:05:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55824
IP address blocks: 144.16.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3
Validity
Not Before: May 23 02:05:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664ea47f-067a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:31:4a:c5:28:13:64:8e:39:8d:46:6b:fb:
81:af:cb:06:38:55:46:28:7b:3b:18:90:ff:db:38:
c4:ec:67:6e:c9:08:9e:fc:d4:3f:6f:4d:61:a0:a4:
36:99:55:0d:b9:e3:96:83:c9:8d:26:a5:b1:0f:6d:
22:ef:a2:92:55:5d:3d:dc:fe:39:49:ee:a6:11:fd:
6b:4a:19:70:32:e4:64:79:e3:28:d3:5b:1e:19:c3:
00:7b:d7:43:46:66:6a:f6:4b:08:3c:91:c7:6d:10:
8f:e2:68:21:f9:3b:c4:9a:06:ae:86:01:04:ec:36:
2e:a8:26:90:a3:85:55:de:da:ec:51:a7:93:72:05:
9a:45:45:92:11:f4:ef:82:4f:5f:31:9f:a8:19:04:
a0:9b:5c:ce:cf:aa:52:84:91:de:3b:f4:6b:5f:8f:
7b:03:e4:c0:0f:ab:2a:4b:25:00:01:10:33:7e:c0:
20:66:d0:6d:c4:d6:35:83:cb:be:82:99:bd:50:0f:
a7:20:3d:67:8a:0d:fd:0c:6c:4d:55:92:38:58:b2:
1e:d3:55:3e:25:fb:48:06:6c:0e:d4:5f:36:f3:03:
e7:68:a6:65:0c:92:a9:28:04:29:1a:2a:24:88:62:
48:da:30:0e:87:42:74:ac:ec:c4:b0:d6:a2:95:ca:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DC:38:2A:5B:AE:1E:EC:0A:B7:44:FA:20:80:E3:BB:F5:53:2F:0F
X509v3 Authority Key Identifier:
keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.16.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c4:7b:33:54:59:c4:bd:74:3d:ce:fb:c4:44:8d:69:71:51:
c8:0b:23:d4:68:41:91:8c:81:30:7b:bd:11:cc:3a:ca:fc:c4:
3d:ec:97:9d:e3:7d:1a:05:f2:23:8d:02:75:1a:19:cc:23:1d:
89:62:a8:b9:04:c7:10:8f:cb:39:74:ce:1c:0b:77:57:6c:20:
bc:c8:35:a7:c6:92:95:cf:f4:a4:95:38:3c:c5:a1:2f:8b:08:
b5:dc:82:31:52:1a:cc:0c:17:f3:59:68:39:63:11:78:53:af:
45:fe:16:32:08:dd:07:17:f4:00:34:83:87:2c:35:b5:5e:5f:
05:82:5b:7b:c4:0f:c8:1f:70:85:fa:a8:00:0e:f5:c6:bd:9b:
76:57:d7:f2:62:bf:99:ea:da:f4:c3:9f:2e:4b:13:d1:5d:02:
dd:1b:81:8c:ca:3d:23:30:99:05:71:40:f1:11:45:23:e1:3d:
31:d9:83:57:2f:78:12:cc:ea:64:d1:54:75:f5:6f:d5:2d:42:
ab:13:d9:29:54:2f:e3:d1:70:c1:5e:63:36:2d:1d:10:53:a6:
44:84:cc:7a:6a:a7:77:45:be:24:24:49:3d:2e:4a:be:0d:f0:
4c:18:02:2f:a4:bb:79:08:dc:b5:98:3c:a6:26:7e:6c:84:e2:
a8:c5:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:04 2025 by rpki-client