Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16C36C48B92B11EF98BB2E81C4F9AE02.roa
File: 16C36C48B92B11EF98BB2E81C4F9AE02.roa (raw, json)
Hash identifier: j/aVCH6GjaZuEJKUFb+miYo92/wVQva7pOXufv1fq/0=
Subject key identifier: 4C:77:B7:B9:4D:86:5A:B7:C9:61:53:82:8C:7B:2A:BC:80:5D:1E:E8
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1C2E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16C36C48B92B11EF98BB2E81C4F9AE02.roa
Signing time: Fri 13 Dec 2024 08:20:19 +0000
ROA not before: Fri 13 Dec 2024 08:20:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137085
IP address blocks: 157.66.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7214 (0x1c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 13 08:20:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675bee43-d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:4b:88:2e:1b:a3:36:ac:40:82:78:aa:ba:
8f:85:77:c9:30:40:23:70:94:c5:f9:52:81:1f:24:
1d:43:7b:30:8a:26:e5:d4:13:52:0a:9b:d1:36:7e:
8b:aa:6c:69:7d:a7:68:f0:dc:90:b2:d2:28:a4:70:
7e:c4:84:d0:f1:b8:b9:78:c8:1b:b9:e8:65:a7:28:
14:04:ce:e2:de:76:80:64:e5:47:7e:d1:07:16:d1:
91:ad:58:87:d8:79:6c:bc:6f:bf:8f:42:26:26:55:
62:fc:b0:e8:38:fb:23:a7:09:f3:b2:7e:59:8a:88:
7b:72:98:97:94:01:6d:75:64:b6:bd:3b:ff:74:6d:
9f:4f:81:7f:0d:1b:5c:c7:4d:ca:63:e1:44:97:08:
f7:82:23:72:06:a7:af:43:40:ee:65:e7:1e:9b:8a:
5e:b0:bf:d4:0a:4a:79:c6:ef:04:75:3c:6b:96:69:
c6:3a:78:20:68:07:cc:de:8c:12:28:cd:2c:20:86:
38:a2:ab:59:a3:de:e4:f4:68:58:3d:23:1f:fa:07:
b5:aa:5e:72:4a:11:e9:fd:58:cc:e6:25:35:2c:d8:
9d:6b:0e:92:a1:4f:3d:df:f9:a6:5a:b7:83:a2:5a:
d8:56:2a:f6:b5:a4:46:a5:e2:43:9b:55:be:dd:34:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:B7:B9:4D:86:5A:B7:C9:61:53:82:8C:7B:2A:BC:80:5D:1E:E8
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16C36C48B92B11EF98BB2E81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.74.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:64:03:50:de:e0:45:4f:92:64:89:24:32:aa:f0:25:b0:e8:
50:0d:c9:bf:8d:7e:16:0b:3e:4d:0d:b5:2a:de:1f:f4:8b:3e:
6a:27:6e:3e:ba:f1:78:95:99:d7:55:6d:4c:a2:28:db:fd:80:
04:ef:ae:19:52:74:ca:e0:d5:b2:eb:16:ec:9b:30:85:bc:9a:
3e:00:45:34:70:20:ed:c8:c6:29:54:14:74:b0:d1:9e:7c:d0:
b9:c7:bd:7d:b2:8f:07:3b:b1:99:bd:c0:09:a1:c8:e9:43:ef:
3c:36:24:da:1b:bc:68:77:c8:68:ba:60:21:89:ce:77:7a:1d:
d7:76:82:01:ed:33:68:16:ad:30:79:26:b0:9c:57:14:21:09:
f5:54:b6:52:0a:97:d5:35:67:ef:bb:b6:06:ad:79:43:3b:65:
62:91:ca:5e:d5:1c:c3:f3:ca:21:18:95:cd:37:c1:29:50:41:
0c:94:98:59:e1:2c:bc:1e:80:1d:4b:82:5d:cb:0b:d2:e6:94:
95:14:33:c0:ea:5e:40:27:17:66:92:85:09:85:4f:1f:60:88:
ba:24:dc:47:32:5c:4c:9a:2b:37:a5:50:3b:fe:5d:f0:28:23:
78:69:25:19:bf:20:31:d7:c7:a3:a9:2a:de:86:92:65:44:ae:
25:7b:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:37:01 2025 by rpki-client