Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/19DE7DB0FA3011E9BF5A291EC4F9AE02.roa
File: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (raw, json)
Hash identifier: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=
Subject key identifier: 7A:1C:FC:56:D5:7C:5D:6D:78:16:A8:18:D9:93:83:9F:2C:79:94:77
Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial: 34A0
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/19DE7DB0FA3011E9BF5A291EC4F9AE02.roa
Signing time: Thu 24 Oct 2024 14:30:34 +0000
ROA not before: Thu 24 Oct 2024 14:30:34 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 132801
IP address blocks: 118.179.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13472 (0x34a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFDE
Validity
Not Before: Oct 24 14:30:34 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671a5a09-d5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:5a:99:b1:ce:2b:83:eb:fb:3f:d6:9d:eb:
04:7f:e4:30:a9:0f:6b:eb:b7:c2:43:21:59:e9:31:
46:d2:57:06:49:78:d8:61:de:24:cc:8a:6e:3a:b2:
23:65:6d:33:bc:94:15:83:d8:72:11:35:fa:96:26:
49:ad:07:b5:a0:c7:72:4e:ba:22:15:f7:4b:80:2a:
67:e1:14:62:eb:fe:fd:07:95:54:30:fd:d9:79:ec:
f8:93:3c:9b:2b:78:f1:6a:3e:4e:79:ab:06:fd:d4:
8e:32:28:b1:2e:50:59:07:69:c1:a8:5b:7d:12:44:
d1:4c:a6:04:03:e4:c3:15:16:43:07:b3:86:98:e6:
f2:f4:7b:97:a0:8e:7e:7c:34:40:82:de:89:61:10:
9e:da:ee:dc:36:c8:6f:5c:a3:ff:2b:a8:e5:be:6d:
17:3b:17:b1:07:35:0f:22:b3:d3:7e:9a:26:2b:c8:
89:d2:50:1e:23:8c:2d:23:e7:e3:a0:db:ff:af:f0:
e5:8d:2f:8f:51:7f:26:d6:f6:99:db:da:22:0c:89:
90:d4:23:44:f5:75:ee:d7:eb:49:4c:fc:ec:35:68:
1d:9d:02:52:67:b6:2a:ac:6f:b1:c6:bf:47:64:a0:
ae:56:43:f5:a4:af:a7:4b:cc:45:15:ec:c4:ad:bc:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:FC:56:D5:7C:5D:6D:78:16:A8:18:D9:93:83:9F:2C:79:94:77
X509v3 Authority Key Identifier:
keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/19DE7DB0FA3011E9BF5A291EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.179.140.0/23
Signature Algorithm: sha256WithRSAEncryption
50:53:87:d7:ad:0d:37:37:cb:95:6e:9b:c3:2e:6a:04:81:78:
5b:c4:6b:cb:f9:66:0f:27:7f:28:03:c0:fd:c7:11:e5:f3:34:
34:3f:27:eb:6f:78:a0:a7:b4:f7:52:ce:2d:26:fe:50:db:94:
4c:59:fa:f9:eb:4a:5c:28:09:32:92:53:ea:fe:56:f0:7f:94:
34:78:88:19:34:f8:34:ab:b8:9b:fe:d9:54:63:e8:7b:dc:db:
cb:40:88:a0:88:bc:c6:5c:63:19:d1:fe:26:23:79:5e:8c:03:
14:73:b7:7d:e4:1f:aa:49:00:1b:50:24:c2:11:ce:13:10:3d:
a3:81:36:d7:cb:ce:23:f6:b2:ee:0c:24:7c:53:c4:e8:fb:9a:
a9:9c:31:8b:e6:18:ca:fd:b6:98:d7:13:d9:da:62:ac:6c:12:
1a:36:df:7f:81:a2:61:24:8d:b0:01:85:e6:98:2e:2d:f2:ad:
fb:cb:c8:6c:9f:02:29:9f:8b:6f:66:a6:f0:96:a3:d1:b4:25:
3f:af:f1:5e:db:85:49:41:0b:f1:22:65:8d:a3:27:2c:19:70:
d7:93:17:12:e4:1d:e0:f0:56:7f:21:27:02:7c:a0:63:72:6f:
45:92:9c:31:85:ef:76:87:6f:71:b8:90:3e:b1:4d:95:42:54:
14:d6:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:27:11 2025 by rpki-client