Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/1558B1D0CE4611EF99178F2EC4F9AE02.roa
File: 1558B1D0CE4611EF99178F2EC4F9AE02.roa (raw, json)
Hash identifier: VQQOfe7+RP/ivZPkjk5N5ReTjzFGVxITONYLJrIA49E=
Subject key identifier: 82:E8:FA:7A:E9:DF:6C:88:97:7D:4A:BD:0D:1D:AD:29:32:AA:C4:35
Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial: 1DBF
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/1558B1D0CE4611EF99178F2EC4F9AE02.roa
Signing time: Thu 09 Jan 2025 04:56:28 +0000
ROA not before: Thu 09 Jan 2025 04:56:28 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58424
IP address blocks: 146.88.202.0/23 maxlen: 24
146.88.204.0/22 maxlen: 24
167.179.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7615 (0x1dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC
Validity
Not Before: Jan 9 04:56:28 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=677f56fb-d206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:0e:13:2f:ec:1e:50:52:c9:eb:d3:b8:17:
e2:f7:c7:36:6c:59:f4:fd:e7:84:80:a3:53:df:55:
e8:16:c3:08:0f:52:02:cb:92:9d:f9:42:ca:35:b3:
48:f9:4a:fd:7c:09:49:39:07:8a:e5:69:48:d0:c4:
69:30:5e:cd:d2:82:b9:d1:bd:2b:0a:80:ad:df:58:
7e:6b:95:fb:bf:25:35:4d:ba:9f:bf:92:86:38:52:
35:63:a3:27:86:99:d9:5a:79:32:de:97:3c:94:d5:
f7:7c:f4:fe:8c:cf:3d:51:27:e4:bf:1a:26:57:7e:
c8:73:00:03:e5:9d:0c:83:d6:b4:b9:21:e0:b5:6b:
77:63:e3:c6:a0:23:1f:70:cb:01:02:8a:ee:5f:fe:
fd:9b:91:3c:f6:98:d9:b0:5b:22:bf:47:ff:38:68:
20:ad:84:db:bc:59:3f:08:6c:66:99:7d:57:a8:64:
de:cb:da:5b:ca:aa:92:80:8e:7b:65:4b:4d:98:2c:
48:ca:32:76:4e:5d:f4:2c:7b:05:96:11:35:bb:ad:
66:59:6b:5e:0f:b2:8b:b2:c6:47:ab:41:ef:61:01:
a3:48:59:54:d1:c2:ff:85:4f:70:ae:7e:37:1e:9f:
e1:0b:81:54:06:17:fd:17:58:ea:ec:ec:47:68:43:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:FA:7A:E9:DF:6C:88:97:7D:4A:BD:0D:1D:AD:29:32:AA:C4:35
X509v3 Authority Key Identifier:
keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/1558B1D0CE4611EF99178F2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.202.0-146.88.207.255
167.179.0.0/23
Signature Algorithm: sha256WithRSAEncryption
75:44:52:92:03:e9:3e:20:78:10:1b:98:02:6e:82:eb:08:5f:
af:61:82:19:6b:2d:a9:b5:de:1a:63:bb:42:29:15:c2:0b:ae:
ec:a6:92:0e:2b:ad:e4:21:0f:ee:46:41:f0:c3:d8:ef:f4:6c:
ae:d2:4d:18:8f:7b:82:0a:b2:78:1b:76:1f:a1:32:08:1f:75:
45:92:5a:c5:fd:ba:f8:56:96:ae:cf:31:0e:5b:63:fb:04:5b:
22:78:51:72:a8:bb:15:2d:55:2b:02:ab:1b:73:8a:29:46:e6:
27:26:05:f4:03:35:5d:68:ef:3c:58:ad:00:a3:6b:59:55:0f:
48:98:46:f2:d6:68:06:e9:d2:f4:68:73:dd:c4:5b:3a:72:21:
43:9d:10:df:52:99:60:80:7c:01:1b:af:c9:44:27:86:82:51:
6b:4f:cc:30:4b:76:20:1e:f3:47:66:ed:6c:4c:ca:1e:dc:d5:
d0:36:84:dd:e4:46:81:1b:bc:46:ed:95:a5:c1:3b:29:67:ab:
b0:de:57:52:14:06:2a:8c:66:61:0f:38:7c:2f:b2:75:4a:28:
a2:86:b7:f0:23:c7:b8:eb:35:cc:7d:f2:e5:05:c6:9e:28:b0:
1b:17:d0:a3:c2:54:71:cd:e0:b1:83:c4:9f:da:de:e9:f6:79:
b2:d1:41:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:56 2025 by rpki-client