Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa
File: 33938662E2EF11EF9827146DC4F9AE02.roa (raw, json)
Hash identifier: hx629hgs2YM3P2VXmt+bniWMddCGwEZjcknZoDHrlNU=
Subject key identifier: D7:64:18:E4:65:F8:C9:5E:17:AF:E5:B6:80:93:3F:CD:83:C4:77:29
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1CB2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa
Signing time: Tue 04 Feb 2025 11:57:26 +0000
ROA not before: Tue 04 Feb 2025 11:57:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153263
IP address blocks: 161.248.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7346 (0x1cb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 4 11:57:26 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a200a6-aa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:67:1b:11:80:c8:23:cd:4f:de:76:e8:9c:
a4:87:f3:ff:07:0c:91:16:90:ee:6e:d8:52:31:b2:
b9:42:44:25:8f:71:f5:d6:7d:99:e0:77:44:a8:69:
8f:7f:2a:f3:de:43:a8:f9:02:45:bb:4e:04:6c:b7:
c9:fe:22:9d:d7:bf:41:f1:21:10:e3:87:7b:02:d3:
7b:1d:5e:54:31:20:57:43:b9:63:43:10:3f:de:16:
a3:24:6d:ce:09:8d:75:40:0f:5d:89:7f:5f:c1:09:
a8:5f:89:1c:9d:53:1d:b3:bb:b2:a3:5b:40:7a:e0:
45:9d:1e:3b:23:1b:45:c1:40:06:e9:12:ec:db:34:
f6:44:f8:4e:17:9d:02:94:10:b8:04:c4:db:a2:e5:
4d:7f:40:37:b6:ed:4d:c6:62:da:ef:25:07:f5:64:
d0:35:ff:c9:cc:af:aa:ad:20:01:12:97:c0:b0:a8:
a6:2c:41:30:06:86:89:f8:68:4e:99:1a:bb:b0:e1:
a5:a9:6d:63:eb:be:4c:03:42:0a:70:55:19:93:89:
9c:a1:a7:55:c2:6e:cc:64:74:fa:a7:10:2a:94:0b:
73:9b:1c:63:06:ac:0c:1f:9b:b5:59:34:34:e0:c6:
ed:5a:20:ec:e1:83:7e:0a:42:26:3c:64:28:29:77:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:64:18:E4:65:F8:C9:5E:17:AF:E5:B6:80:93:3F:CD:83:C4:77:29
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.228.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:03:2e:b8:90:0c:58:5b:11:cd:79:57:8a:77:0f:6b:bb:50:
b3:79:7f:49:e7:49:00:f3:fc:7d:61:1e:d3:be:04:2c:49:cf:
a3:1e:ab:51:e8:06:56:9a:a0:ca:28:50:68:9d:8f:3d:f0:f8:
1d:c6:e8:74:56:f0:1e:e5:17:36:a8:ee:44:13:74:08:d7:64:
72:b7:ee:1c:a9:4b:82:56:b9:d8:d1:0d:e4:96:6c:d9:b6:5e:
64:e8:a7:32:d5:bb:c9:95:95:36:b2:88:9f:52:69:fb:5b:48:
e8:4b:dd:53:3b:22:46:f1:df:a4:5e:64:9e:dc:9d:96:4f:c9:
45:76:99:4b:69:20:d9:b3:05:8e:7d:a6:00:08:58:be:bc:8c:
72:57:81:20:97:d0:dd:de:13:e3:52:a8:ba:0f:3b:34:18:71:
99:6d:36:f3:dd:dd:f1:89:0f:ec:8e:a8:0c:6b:a4:2a:63:be:
a0:db:9d:53:17:8b:2c:ba:2d:30:1c:ff:7c:51:e2:23:ff:e0:
76:f0:43:fc:a8:7f:94:2e:5b:fd:8a:c9:00:03:9c:f6:5e:ad:
24:57:f6:19:f2:df:ec:f3:70:b7:35:8a:1a:3a:eb:36:a0:8d:
e2:25:87:c7:8a:49:bc:92:92:3b:2c:13:17:0e:4c:01:60:0a:
10:4d:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:01:39 2025 by rpki-client