Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
File: 9C06E51EE37A11EA84A20810C4F9AE02.roa (raw, json)
Hash identifier: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=
Subject key identifier: 3F:6E:6F:08:F2:99:E2:8B:60:4B:A1:01:01:28:BD:FE:6A:0E:27:49
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0D8E
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
Signing time: Thu 30 Jan 2025 15:00:42 +0000
ROA not before: Thu 30 Jan 2025 15:00:42 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 24492
IP address blocks: 185.175.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3470 (0xd8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09
Validity
Not Before: Jan 30 15:00:42 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=679b941a-6ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:51:6c:01:70:e0:03:c1:97:00:22:30:14:
86:a6:24:0b:6d:16:75:14:be:1c:cb:40:6b:ee:f3:
3d:c0:b2:b3:1c:05:29:ac:df:5b:ec:da:71:63:60:
7c:be:59:61:7c:1b:53:68:c1:57:dd:1b:43:22:ac:
8f:fd:8b:0d:91:8b:a2:90:e3:6c:ec:4c:29:0d:c2:
cd:60:b1:0f:7f:05:62:8a:a6:6f:a0:f7:2e:31:cd:
c0:49:d5:05:37:68:d6:69:6b:6a:03:fd:33:45:b3:
e2:0e:30:5b:44:d6:7e:0a:9d:c5:ac:b9:00:19:b8:
23:27:81:a2:12:25:91:b1:c4:5c:65:b8:fa:97:27:
73:6b:d4:6b:4d:2a:5a:50:67:d0:b9:42:1f:30:d4:
d3:98:5c:40:c4:9d:a7:37:b9:c5:c4:91:35:ef:da:
75:fe:22:90:0a:c2:4f:aa:4f:38:8b:f9:02:2f:96:
3f:ad:fd:a0:d5:b0:d5:8a:ad:85:4d:37:c5:d1:dd:
c1:ba:fa:00:79:50:d7:44:74:45:83:55:03:de:53:
78:35:09:4b:a7:c5:7d:67:97:a0:6c:f6:ee:70:51:
ba:64:f0:d3:08:47:9c:d6:a8:13:51:99:ae:d7:a4:
2b:25:0b:c8:a5:9d:cb:5b:72:50:29:52:f5:d6:67:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:6F:08:F2:99:E2:8B:60:4B:A1:01:01:28:BD:FE:6A:0E:27:49
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.175.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:00:72:a2:d4:86:df:2a:c3:c1:88:13:35:08:c9:bf:e2:23:
db:d2:47:1e:10:58:3b:61:06:01:f6:b9:44:ae:4b:18:9b:e9:
fb:ab:45:aa:76:f9:6d:15:ab:23:7c:cf:d6:52:e3:b2:c1:16:
3a:62:ea:a7:82:ac:57:41:75:6e:c7:cc:47:d1:ad:f8:e7:7b:
b0:0d:23:3b:5c:d2:65:01:6d:ed:c4:f4:30:66:e6:ea:51:49:
27:55:b7:ab:61:2f:91:91:4f:62:95:5a:3f:7b:0e:86:d2:ef:
00:70:8c:b5:42:ca:61:7e:42:ad:85:74:6e:37:60:a0:8f:8d:
f7:99:e7:b2:4f:f8:70:d2:9a:4c:01:c5:79:c3:10:70:8e:b5:
6e:1e:fa:71:99:8a:2d:ee:3e:a5:d1:b1:ee:00:7c:11:64:16:
fc:c4:b1:bd:6f:ee:7c:8f:18:ae:04:36:cf:a4:fc:3d:63:f1:
a5:b8:35:da:58:18:d7:25:6a:e9:4f:7d:86:63:2e:f7:cd:83:
32:09:fe:f0:2c:f9:7f:df:37:e2:54:7e:ca:50:1f:94:63:ba:
e9:52:7b:84:cd:4d:3f:bd:f5:c2:58:e5:29:2d:1e:6e:eb:f2:
31:2d:73:14:f3:49:4a:01:13:a2:56:de:2c:9a:4e:47:11:8b:
fc:1e:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:44 2025 by rpki-client