Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
File: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (raw, json)
Hash identifier: 4Ah/QLfJHlIj6dW20RpkEQlUiHl1IpCVTVGIN9SKd94=
Subject key identifier: 17:C3:E3:5A:E3:0F:79:67:17:6C:93:72:4F:A1:27:0F:E3:85:46:BD
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: F8
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
Signing time: Tue 20 Aug 2024 03:38:08 +0000
ROA not before: Tue 20 Aug 2024 03:38:08 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 152915
IP address blocks: 83.118.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C
Validity
Not Before: Aug 20 03:38:08 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66c40fa0-d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:ad:9a:cc:b3:c0:1b:49:c8:13:c2:2c:1a:
8a:c2:9c:7c:6d:f6:04:60:81:1d:2e:6b:c0:b3:f6:
0d:43:f5:6e:c0:bc:2b:f7:e4:e3:a3:ee:2f:d5:f8:
4a:67:a3:24:e1:89:b6:d6:db:c5:0d:e1:36:ed:28:
49:4c:79:93:4f:ae:d7:c3:f4:c8:bd:20:06:bb:ca:
a8:98:11:3f:2f:af:fe:2e:fb:19:35:8f:c8:11:37:
a7:33:0d:7a:04:3c:9f:cc:a3:bd:57:3f:dd:6a:dc:
91:51:82:10:a5:7e:7b:c0:3d:81:be:0c:38:65:ec:
3c:4a:17:ce:13:15:30:d8:05:8b:88:c1:05:79:49:
d4:3a:6a:9d:14:dd:e0:1b:c5:59:9a:aa:69:96:3c:
20:a1:50:83:ef:a2:41:28:2d:91:ec:bf:8e:63:3d:
8c:c9:fe:8d:0c:76:0e:d4:5e:67:ed:be:60:12:eb:
b4:88:80:67:c0:f1:5f:cc:4d:2c:6a:7e:06:20:e1:
51:a7:2c:0b:14:30:12:5d:0e:7e:04:61:e4:bc:e5:
ba:55:62:ed:55:74:04:de:f9:f1:8d:85:c1:53:fd:
ab:9b:01:f8:5a:89:e0:29:06:f0:8e:c0:87:20:d0:
de:99:cb:ee:13:3e:61:92:31:42:9c:5b:3c:6a:38:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:E3:5A:E3:0F:79:67:17:6C:93:72:4F:A1:27:0F:E3:85:46:BD
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
83.118.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:50:8f:7f:75:a8:68:88:8a:25:69:f2:db:3e:d6:fd:a1:7a:
a7:6b:56:ff:a4:0a:a3:80:b1:28:31:13:57:bc:e9:20:6e:4d:
1b:a3:41:d5:4e:4b:1a:f1:40:da:4f:ab:02:a6:b2:18:74:c8:
a2:66:da:de:87:b6:d5:96:87:d4:99:9a:f0:37:64:b8:d0:dc:
a7:85:ef:87:3a:76:9c:81:39:0e:f3:69:ce:89:20:d1:06:39:
1a:b7:57:9f:e0:a5:86:f7:80:60:70:08:be:8f:a6:1e:fb:e2:
25:36:74:1a:9d:b3:75:d5:1b:59:c4:aa:88:10:4c:7b:6f:f8:
c9:b2:61:d6:3d:68:dc:63:75:cd:e7:89:b1:79:93:33:91:2c:
20:9b:70:2e:1a:da:e4:95:01:d3:8d:7d:5d:4f:63:d7:df:e2:
af:ae:05:b6:71:7c:e3:a8:58:1f:08:65:73:f3:b5:0f:c2:73:
3b:4b:0d:87:23:14:09:25:e3:b6:9c:08:34:96:04:4d:85:0c:
19:47:0b:cc:79:b3:14:d5:4c:c0:5d:5d:d3:56:ba:34:c8:10:
39:fa:a8:73:79:01:a3:5c:34:e0:67:53:eb:27:72:6b:18:85:
da:29:f6:23:19:84:be:97:ae:59:71:47:89:b3:26:32:d6:39:
31:3c:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:51:39 2025 by rpki-client