Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/733DF7D6E76111EFA6202269C4F9AE02.roa
File: 733DF7D6E76111EFA6202269C4F9AE02.roa (raw, json)
Hash identifier: 80JOJrcvnMsrwg2wQU7BspDE2LY414hW2T+F7bx+zjg=
Subject key identifier: 53:B2:D2:D2:9D:B7:6C:94:62:89:1C:95:DE:AC:DC:95:BF:C4:4D:BF
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0526
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/733DF7D6E76111EFA6202269C4F9AE02.roa
Signing time: Mon 10 Feb 2025 03:45:20 +0000
ROA not before: Mon 10 Feb 2025 03:45:20 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153535
IP address blocks: 161.248.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1318 (0x526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Feb 10 03:45:20 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67a97650-c59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:0b:52:26:c0:eb:86:0f:c3:d3:60:be:d8:
73:9b:6e:ac:79:67:07:cb:ea:23:2f:a6:21:8c:69:
85:c8:70:70:d2:90:26:5e:00:62:1d:e7:c7:3e:87:
34:d4:b7:2e:44:f0:87:7c:ee:ae:96:ea:ce:3d:5d:
1b:83:b3:32:49:77:66:7a:a0:7d:70:86:25:31:73:
9b:5b:35:52:eb:a1:75:53:d4:18:44:d1:de:f9:c4:
da:45:74:06:f7:f2:e3:ef:f2:d6:b3:70:27:5b:59:
3d:4f:e7:86:3e:a7:92:c6:55:8d:49:58:28:5e:6b:
56:b2:46:59:fb:61:27:b4:43:55:b0:23:4f:71:2a:
ac:61:b7:64:66:fc:a3:1b:17:db:91:3c:56:90:f5:
4b:39:0e:2f:f2:0d:a4:f0:d9:31:e1:00:70:65:f0:
2e:6e:7e:56:a2:c0:01:1e:69:23:38:e9:9a:9b:2c:
ee:91:85:4c:7e:e9:95:8d:d1:05:9c:fe:82:08:29:
54:54:4e:bb:b8:e9:bf:cd:b4:2f:cf:bc:9d:63:eb:
a0:e0:89:d2:1c:d3:f7:90:d5:da:6e:c5:94:e7:a8:
13:02:3d:6b:f2:00:dd:3e:65:c6:e2:6e:6c:f9:52:
4c:72:bf:9d:3a:5f:be:44:5c:76:08:08:15:ec:30:
50:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:D2:D2:9D:B7:6C:94:62:89:1C:95:DE:AC:DC:95:BF:C4:4D:BF
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/733DF7D6E76111EFA6202269C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.198.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:8b:b2:8f:3c:df:0e:1e:34:21:80:13:f0:bd:d2:57:17:47:
e0:f7:8b:ca:8c:d0:b7:45:0a:63:4a:ab:49:f6:11:94:7c:42:
4e:b3:d8:1c:6d:ac:a4:65:3a:c0:c5:ea:b9:8d:60:eb:81:4d:
9b:b1:c1:36:35:84:a6:9f:06:e8:10:39:02:50:4c:c9:de:e5:
db:63:4f:3d:d1:d0:7c:f5:9c:a8:db:1c:ef:d8:3e:91:19:7d:
09:38:e7:32:56:96:ba:a4:f5:8b:d9:f7:d9:46:70:df:0c:bd:
02:da:9f:5d:c6:45:9a:b6:89:45:b0:c8:3d:82:07:4f:a2:77:
f0:7d:c1:58:8b:10:54:2e:d9:08:d8:96:51:51:5e:2b:fe:02:
f0:d7:1e:01:e7:31:34:56:64:69:1e:92:c9:60:8d:45:a7:11:
58:3a:e7:c2:bd:ef:51:6a:8a:7b:4b:8c:bb:bf:1d:31:26:1d:
06:46:46:2c:67:7e:13:28:60:22:0c:c8:f3:12:12:d4:d5:80:
a5:7f:63:47:0a:54:95:16:16:98:82:7b:05:58:dc:9c:14:d3:
4e:d1:46:8f:98:54:94:97:f7:7b:cc:82:75:20:f7:97:43:92:
89:f4:75:0c:e2:28:a0:7d:af:dd:1c:a0:e3:45:14:e7:41:48:
e0:b4:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:30:23 2025 by rpki-client