Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa
File: 60FCDED2F48F11E89651151FC4F9AE02.roa (raw, json)
Hash identifier: sBWfqMdrbgHXkc/ZfAmcs+ee3JGLkHqnwdG8y4HuuaQ=
Subject key identifier: 9F:E6:76:B0:F9:AB:F7:C7:9A:77:17:C8:EA:BF:8A:D7:27:D9:B6:5F
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 10F6
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa
Signing time: Fri 12 Apr 2024 17:55:50 +0000
ROA not before: Fri 12 Apr 2024 17:55:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135273
IP address blocks: 167.179.48.0/20 maxlen: 20
167.179.48.0/24 maxlen: 24
167.179.49.0/24 maxlen: 24
167.179.50.0/24 maxlen: 24
167.179.51.0/24 maxlen: 24
167.179.52.0/24 maxlen: 24
167.179.53.0/24 maxlen: 24
167.179.54.0/24 maxlen: 24
167.179.55.0/24 maxlen: 24
167.179.56.0/21 maxlen: 21
167.179.56.0/24 maxlen: 24
167.179.57.0/24 maxlen: 24
167.179.58.0/24 maxlen: 24
167.179.59.0/24 maxlen: 24
167.179.60.0/24 maxlen: 24
167.179.61.0/24 maxlen: 24
167.179.62.0/24 maxlen: 24
167.179.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4342 (0x10f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646
Validity
Not Before: Apr 12 17:55:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661975a6-b783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:32:d4:4f:08:65:b2:c4:93:0e:cb:9d:cb:
7e:1a:c0:5a:05:ee:b2:b8:01:e3:75:a8:0e:13:0d:
08:45:52:5f:ae:b7:f5:3d:08:9d:da:88:55:11:48:
fd:c0:34:e3:db:da:f9:4f:5a:4c:fb:77:71:dd:fb:
56:a5:51:40:45:81:73:27:18:ef:76:41:fd:3e:f3:
30:d3:64:4b:6a:21:7b:ef:b8:de:4d:c6:6e:06:f4:
b3:c9:1e:31:d3:37:bc:c6:d5:c9:84:ff:f8:09:28:
af:20:f3:79:92:99:38:f2:24:60:c7:02:d9:c1:de:
f8:5d:a0:19:aa:27:7e:10:ac:eb:40:d0:65:bd:c5:
ab:65:0a:cc:a5:18:ed:49:50:16:75:30:05:de:10:
ac:22:e9:3d:bc:b4:e4:2d:ea:a7:f8:f3:ba:74:e9:
09:17:a2:80:19:52:70:c9:e2:ef:ab:52:64:50:cf:
e2:e5:5e:6f:e5:52:a3:de:ea:58:0d:d0:9c:a8:4e:
86:1b:d2:c7:62:66:e8:e8:70:1d:50:ec:b8:28:9c:
f8:fb:5b:93:9c:d1:04:4c:6f:fc:cd:f1:b6:73:38:
cf:ef:39:eb:da:4a:00:76:65:4e:0b:bd:5b:60:2c:
d5:2a:fd:1a:dc:08:0d:1b:87:97:84:2f:c1:68:dc:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E6:76:B0:F9:AB:F7:C7:9A:77:17:C8:EA:BF:8A:D7:27:D9:B6:5F
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.48.0/20
Signature Algorithm: sha256WithRSAEncryption
76:06:e0:d4:11:57:a5:3b:84:72:fc:c2:6e:d1:4a:6d:06:88:
ba:63:c8:df:42:de:51:1e:f5:13:98:cc:76:45:34:55:93:3a:
d0:ad:97:ac:9f:d8:bb:81:78:69:d5:4a:6b:0e:f3:22:2e:af:
88:aa:78:e5:d2:f8:ff:49:14:68:8b:83:bf:5a:74:75:24:10:
4b:f6:36:ae:23:2d:55:8f:86:44:cb:fc:ea:fc:b1:4d:b0:fe:
9a:1a:40:20:02:0b:93:37:a8:f9:c4:5c:34:25:3f:75:bc:ba:
2e:af:da:95:44:85:52:25:00:6e:dd:fd:1b:31:26:16:43:15:
47:9e:07:85:68:41:01:9e:51:4a:57:8e:b2:06:72:88:a8:5b:
46:ea:f7:fc:91:09:d3:af:a8:3f:c4:f4:51:48:7e:52:22:ac:
f3:10:ce:75:61:7a:0b:14:f0:81:fc:7b:5d:c8:3e:9d:5b:4f:
7e:ab:79:f1:ad:4a:0d:d6:b7:a8:50:e5:ed:9c:db:25:cc:c4:
8d:f0:2e:c4:61:f2:33:7d:2f:39:51:6a:39:94:53:c5:d7:6c:
4d:94:f7:bf:dc:33:a5:55:bc:c3:9c:4b:ee:2f:ee:dd:fb:61:
dd:f1:ae:ad:43:bc:0c:43:71:90:e1:76:92:05:51:90:2d:de:
d5:70:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:34 2025 by rpki-client