Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa
File: EE6978B848BF11EF96563826C4F9AE02.roa (raw, json)
Hash identifier: wcj8Xa0MII0Eg7JxuPw/Zp7neWWUojHh/h8WCwRHBxA=
Subject key identifier: 6A:A9:B1:42:A0:83:28:D1:23:9E:33:75:A2:29:AB:80:0B:DE:08:7F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1C3A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa
Signing time: Tue 17 Dec 2024 06:30:20 +0000
ROA not before: Tue 17 Dec 2024 06:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9829
IP address blocks: 158.144.183.0/24 maxlen: 24
160.30.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7226 (0x1c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 17 06:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67611a7b-f8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:8c:95:6b:0e:da:11:34:a9:27:cd:c3:f0:
f0:5a:9d:e9:cd:77:69:ab:fc:5d:4e:44:28:d2:9d:
ae:ad:a1:07:a2:4a:23:ee:ea:43:1c:80:13:55:ec:
48:e2:b7:74:20:36:34:ae:6a:16:f9:57:16:12:88:
7c:40:8d:39:e1:c3:90:8b:2a:0b:49:e2:95:35:04:
af:61:fc:43:01:6e:60:d9:4a:00:8e:22:a1:e2:04:
c1:05:19:6c:7b:6a:95:2d:53:59:e5:9e:4a:19:a6:
10:ef:7c:02:bd:97:2f:ca:0a:2f:fd:c8:d8:bb:bd:
31:af:f1:0d:d5:08:6f:0c:97:63:1f:a2:b4:fa:95:
46:27:f9:b4:4b:d9:3d:ac:75:46:f4:19:03:2b:49:
25:28:85:3d:48:c4:47:bb:23:1c:76:e3:44:27:59:
2a:79:03:d1:48:cc:bc:a1:56:c7:67:76:1b:01:4b:
65:83:98:f2:bb:c3:8d:e6:ef:40:30:4a:ac:99:20:
e1:62:27:fa:26:92:5b:d6:90:a0:e8:08:fd:c2:8f:
7e:84:87:b8:3f:01:80:85:d9:70:24:3a:1a:9c:ba:
0c:f4:88:1d:fd:47:3d:82:88:83:fa:30:d0:8d:ba:
c6:7e:84:29:58:fa:1b:a0:da:65:2e:ea:c8:fe:4f:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A9:B1:42:A0:83:28:D1:23:9E:33:75:A2:29:AB:80:0B:DE:08:7F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
158.144.183.0/24
160.30.8.0/24
Signature Algorithm: sha256WithRSAEncryption
74:36:65:02:be:1f:89:53:f9:47:1d:6a:ea:57:02:47:92:2e:
6d:1b:66:4e:2a:e9:fa:19:b7:dd:2d:f6:fe:7c:ad:3f:31:a9:
12:53:59:90:3f:1d:12:b4:35:cb:21:87:73:a8:ee:72:85:ea:
69:02:50:2e:ed:98:fa:26:e3:28:c6:e2:8d:9d:87:11:69:2f:
55:f1:13:c9:6f:80:fd:cb:9f:1f:23:91:aa:ea:33:d9:d8:f8:
ef:a5:a7:e8:08:ed:c3:58:8a:ce:68:7e:41:d1:77:02:97:b2:
f4:5d:20:2c:b6:9e:4e:1b:31:7b:61:f9:fe:fd:82:a7:d6:17:
ee:3c:c3:f0:91:52:d4:ad:1d:76:99:d6:09:08:cb:55:89:b1:
ab:f3:1d:76:3e:da:18:b9:cb:db:ff:da:e6:df:80:9c:9d:ad:
58:f3:ed:1a:5f:2e:2e:ad:70:ce:78:83:03:d5:f0:a5:32:79:
22:8c:9f:3d:0f:6a:0c:85:80:6b:82:11:2b:71:b5:9f:1d:1b:
89:5c:d8:45:4c:bf:07:7b:39:3c:dd:1e:37:f5:65:40:5c:40:
52:bf:21:da:c9:3d:ad:06:a8:32:86:fb:96:b4:3b:c6:bf:d6:
9e:36:e6:40:70:a2:08:fe:e0:4c:90:0c:f7:4e:9f:24:41:12:
05:88:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:45:56 2025 by rpki-client