Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/312BDD0AC34811EFA066ED69C4F9AE02.roa
File: 312BDD0AC34811EFA066ED69C4F9AE02.roa (raw, json)
Hash identifier: YxLXh2hcfSII9zm33F+VBCd4fxf+Ll/sfFGgoEAQQzA=
Subject key identifier: B4:CA:0A:73:1A:5A:34:01:98:5E:DE:4D:01:FE:5C:7D:A9:D3:30:D0
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1C4D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/312BDD0AC34811EFA066ED69C4F9AE02.roa
Signing time: Thu 26 Dec 2024 05:13:50 +0000
ROA not before: Thu 26 Dec 2024 05:13:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153290
IP address blocks: 161.248.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7245 (0x1c4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 26 05:13:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676ce60e-4872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:50:10:27:d1:b9:f0:fe:94:6c:f4:00:ab:
b6:f5:a7:39:c4:e4:8b:8b:6d:4d:93:08:6f:b6:48:
03:65:a4:32:6d:84:aa:29:69:b4:07:98:83:ea:0e:
d7:14:ba:11:b9:a3:b6:5f:6f:88:08:1f:a1:57:86:
39:fb:3b:aa:4d:76:04:14:b0:e6:be:a8:c1:11:73:
b1:5f:46:71:01:e9:a1:22:87:91:29:71:e0:bc:b5:
59:74:c2:df:11:b2:a3:9d:6b:27:a3:bf:be:c9:ad:
2c:e6:45:a6:59:87:af:8f:15:14:8b:d3:88:f1:31:
0a:d1:a6:98:4a:16:d8:f9:55:68:8d:5f:ba:31:55:
8e:6f:75:bc:25:c3:8a:4d:5e:6d:87:cb:9d:f7:f2:
fa:29:f7:1f:f4:90:68:ff:9e:66:83:51:42:06:e3:
77:6a:fa:4f:fa:4f:6f:d9:e2:d3:ac:25:68:29:5c:
3a:32:3d:1c:0d:32:a1:ee:a9:82:1c:16:01:c9:97:
3d:fe:4f:05:9a:87:9b:18:bd:ce:08:c3:a6:2d:32:
ea:a9:4e:d0:10:57:e8:26:49:c9:d8:b3:01:5e:ee:
2c:a2:11:11:34:51:00:a3:03:bf:ad:c9:8d:8f:f0:
f0:9e:4b:f7:92:fa:3e:f7:4c:1e:20:bd:1d:b7:cf:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:0A:73:1A:5A:34:01:98:5E:DE:4D:01:FE:5C:7D:A9:D3:30:D0
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/312BDD0AC34811EFA066ED69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.24.0/24
Signature Algorithm: sha256WithRSAEncryption
96:90:c3:8d:be:7b:14:37:bb:46:22:06:6c:da:4a:e7:9d:27:
7e:e2:38:e3:07:40:90:09:2e:ec:69:71:2d:dd:78:b9:cc:24:
00:a7:ab:fa:66:1e:27:d0:56:9d:67:27:c6:29:70:85:e3:0f:
48:ce:e0:fa:40:51:c9:73:06:2b:64:56:64:28:d1:50:ae:0d:
6c:11:4a:a8:ed:46:ab:11:78:c9:a4:4b:f2:92:84:76:2d:f4:
70:0d:5b:59:c0:87:0d:2d:fd:2e:c0:83:e6:15:69:79:19:1d:
07:67:07:73:3f:32:d7:70:5d:9d:59:a2:38:df:9f:73:3d:f7:
e6:bf:23:84:8d:59:44:a6:c0:08:78:bc:46:71:02:60:ea:fe:
5f:f1:73:b8:dc:17:7b:ff:ad:c3:a7:79:54:d7:6e:93:1a:85:
8d:40:ad:80:32:78:74:8c:97:5b:c8:49:e6:d8:fc:42:44:05:
91:2e:2f:a6:6b:59:9c:fe:82:1c:b4:cb:0f:83:8b:ce:8f:e9:
58:e8:99:fb:c2:f0:0b:3f:6e:e6:43:4b:02:07:27:db:ad:ab:
8e:d8:42:03:44:82:a8:26:77:88:03:d3:c9:6c:a3:ea:32:a1:
f9:6f:d0:0a:a3:02:70:a0:7d:a4:69:8a:03:70:26:08:12:7e:
e4:98:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:18:35 2025 by rpki-client