Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/6540388ECD8911EF98CC9B46C4F9AE02.roa
File: 6540388ECD8911EF98CC9B46C4F9AE02.roa (raw, json)
Hash identifier: 2vHjgD9n4xYi+JPafDOZ/GvBpuWcUb8ghrvca9NKBds=
Subject key identifier: C7:AA:37:0E:A3:FA:53:7D:1D:42:F9:C4:60:AE:AA:93:CF:47:2B:53
Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial: 1DBB
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/6540388ECD8911EF98CC9B46C4F9AE02.roa
Signing time: Wed 08 Jan 2025 06:26:59 +0000
ROA not before: Wed 08 Jan 2025 06:26:59 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58424
IP address blocks: 146.88.202.0/23 maxlen: 24
146.88.204.0/22 maxlen: 24
167.179.0.0/23 maxlen: 24
167.179.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7611 (0x1dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC
Validity
Not Before: Jan 8 06:26:59 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=677e1ab3-a511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:14:2f:c6:11:64:fa:5f:a2:b5:16:7c:39:
a5:1b:96:b0:ce:67:e8:bd:f9:44:9c:c1:48:b8:89:
24:ce:ab:1a:45:95:5a:13:0c:cf:3f:4f:1c:6e:70:
95:61:29:12:d0:a8:1a:de:cd:59:c2:71:e7:d1:cd:
99:87:1a:9e:d6:62:69:11:42:e8:0d:26:9d:8e:8c:
87:62:8e:d7:0e:df:d1:38:12:1b:5d:59:81:d8:6d:
6f:21:99:05:91:47:c0:2f:8f:1e:b7:0a:e4:f2:94:
4a:e8:10:ed:79:f6:3b:4e:07:50:73:5f:51:30:5d:
26:5c:f4:ec:91:ae:c3:35:6a:6c:38:7b:b9:16:da:
5b:63:88:22:a9:7e:64:11:4a:99:1e:a7:c1:fb:15:
c3:1b:2f:a6:db:e5:ed:2a:15:5c:5f:ca:93:9b:52:
6b:47:78:f2:41:c7:02:16:90:d5:d3:ba:5c:2f:90:
b6:64:73:20:d0:7d:f3:8d:75:42:0e:69:40:8e:00:
7f:f3:f8:2c:3c:42:f7:dd:59:86:a2:36:bf:7a:be:
a7:3a:fd:14:fb:49:08:f2:73:bb:9b:04:3b:4a:7d:
a7:6f:b0:78:f1:bc:ba:8e:64:9f:3c:24:8a:8f:ca:
29:80:7a:cb:bf:11:c8:c6:ce:b4:0b:03:63:d1:1b:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:37:0E:A3:FA:53:7D:1D:42:F9:C4:60:AE:AA:93:CF:47:2B:53
X509v3 Authority Key Identifier:
keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/6540388ECD8911EF98CC9B46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.202.0-146.88.207.255
167.179.0.0/23
167.179.20.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:9e:d6:54:7a:36:7c:53:34:c6:8a:c1:6e:d5:9e:a3:51:9a:
bd:56:ee:e6:06:ca:1e:d1:54:3c:2a:6f:6e:eb:48:94:1e:3a:
6c:4c:e9:cb:bd:02:28:da:b5:5b:4a:ce:8c:6e:c9:c3:27:d3:
36:1c:f4:77:4e:9a:cb:49:6a:66:f8:62:9b:44:50:c4:09:76:
57:3c:13:e3:c2:b2:5a:6c:08:22:12:8a:a2:c1:8c:9c:a4:8a:
fe:c3:55:63:f0:12:76:27:3e:4e:36:e2:19:68:bf:5a:4d:d9:
e4:a8:37:5d:1e:75:9a:2f:da:19:a2:0b:6b:3d:6c:89:14:9c:
70:cd:9c:90:c0:ad:dd:c9:5c:d1:fc:5a:f7:dd:49:35:7a:f6:
a2:3e:9b:dc:da:65:6e:19:62:0e:e8:24:57:6c:a4:ec:5b:a5:
c3:70:42:1f:03:85:b1:0c:6c:04:09:cf:ce:9d:5f:f1:e2:0f:
c9:8c:ca:91:01:94:88:4d:32:6a:59:ea:6c:ad:32:d9:d2:e5:
24:a3:ed:98:c4:5c:b5:3e:57:11:11:b2:0b:71:17:46:5a:5a:
de:7c:75:0d:1e:ea:bd:6a:e9:73:47:39:75:26:b8:79:75:ac:
49:7f:38:c8:28:df:bd:37:1b:d0:59:b3:e9:f8:43:fe:71:7f:
71:b9:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:16:59 2025 by rpki-client