Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/26ADC496DFA011EFBF99BE3FC4F9AE02.roa
File: 26ADC496DFA011EFBF99BE3FC4F9AE02.roa (raw, json)
Hash identifier: vA1tREhFwAFrLzZZPIjCSsKDdbBRg7KeZIVMjvb4dKI=
Subject key identifier: 90:C9:A3:77:49:1B:05:67:D6:07:F5:BE:FF:D5:42:DD:C0:0E:80:E6
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1CA6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/26ADC496DFA011EFBF99BE3FC4F9AE02.roa
Signing time: Fri 31 Jan 2025 06:54:01 +0000
ROA not before: Fri 31 Jan 2025 06:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153302
IP address blocks: 161.248.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7334 (0x1ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 31 06:54:01 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679c7389-81f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:8e:f2:5a:ec:50:21:ca:b9:98:fd:6b:8d:
93:e2:27:e3:59:58:2c:01:df:81:44:99:22:2f:6e:
13:1a:3f:d5:c0:3f:28:80:27:1d:34:e5:26:97:ac:
51:e1:cb:13:45:2b:4f:ae:4b:cc:31:98:c2:5a:01:
a6:f5:e5:86:f6:da:4f:9b:46:2f:3a:9c:83:50:3a:
12:3d:1e:77:35:26:07:bc:8c:84:ff:db:66:aa:84:
41:3d:02:99:a1:fe:82:f9:b4:a2:1f:9e:9d:29:d2:
fe:d1:08:c1:90:21:ef:a7:21:25:b2:c7:d6:45:1a:
0b:c3:d0:5a:35:e6:7c:2e:8e:09:09:9c:0a:51:40:
86:87:e1:19:64:26:91:38:cc:c7:fe:70:f1:80:8c:
21:50:14:6c:f7:bc:4f:5b:07:ec:59:a3:ab:64:ae:
b8:71:e0:31:36:7d:c2:ae:cf:06:ae:6c:a1:be:24:
3f:0d:2d:9b:57:94:97:a2:60:01:15:cb:6e:f8:b8:
93:33:8d:a6:01:46:e4:ee:58:ce:8d:e5:9f:2d:5c:
55:dc:26:ca:c9:cd:7a:71:f4:29:bc:5d:5e:c6:6a:
28:f2:66:60:01:09:f7:e5:11:89:ac:a6:35:8a:96:
17:23:1e:6b:d3:a1:05:05:0b:00:f9:5f:72:8c:99:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:A3:77:49:1B:05:67:D6:07:F5:BE:FF:D5:42:DD:C0:0E:80:E6
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/26ADC496DFA011EFBF99BE3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.176.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:00:1a:3d:96:91:6d:0c:63:48:d4:75:e3:f0:a2:5a:76:a1:
72:c4:c8:19:09:cf:80:2d:eb:71:a1:2b:5d:4b:75:13:4a:17:
18:bd:4a:38:b2:df:43:62:38:ab:0b:d9:ab:aa:6c:ea:fd:58:
fe:3c:e3:1e:f5:1a:5e:0a:94:f6:73:f3:27:ac:a1:ea:c9:55:
a1:f9:50:80:1f:aa:f8:65:5c:4a:2d:43:cb:9f:36:d5:2a:af:
2b:1b:6c:ce:0b:b5:af:20:8b:1c:e1:97:5f:e8:e0:94:60:f1:
7d:38:cb:3c:c2:8d:93:1c:e4:ab:62:a3:c0:da:ec:76:6d:e6:
81:22:ca:2d:79:43:29:a2:0b:d4:5f:ac:60:45:41:83:28:ec:
01:11:ed:97:80:ad:ae:e2:32:f8:97:cb:19:6c:3e:8e:d2:e9:
a2:67:43:6b:c6:db:13:9b:b2:65:41:58:5d:e2:5b:29:7a:0f:
e9:66:78:81:0d:e3:6a:9c:a0:9e:1a:7a:56:b4:d4:07:13:ca:
f1:76:09:12:36:13:c0:91:d8:45:3b:7b:17:52:1e:c3:a3:d3:
e4:be:53:ca:cc:0d:6f:80:b6:ae:04:09:20:74:80:66:c3:2a:
d6:85:6f:1d:dc:3b:be:a1:8c:79:fe:bf:02:a8:f6:8c:4f:92:
53:15:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:10:46 2025 by rpki-client