Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
File: F693F2689CB811EB97F77E14C4F9AE02.roa (raw, json)
Hash identifier: U3tQJQlcyfHM4FE2g1sFZHo1n5O210FCbrxqZ5WoAEg=
Subject key identifier: 38:46:A2:C4:C7:33:40:95:6A:D3:0D:4C:82:15:BB:A8:F4:9B:7C:E4
Certificate issuer: /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial: 1443
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
Signing time: Tue 18 Feb 2025 17:35:12 +0000
ROA not before: Tue 18 Feb 2025 17:35:12 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 9443
IP address blocks: 139.216.0.0/16 maxlen: 16
139.218.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5187 (0x1443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D
Validity
Not Before: Feb 18 17:35:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b4c4d0-2039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:fd:55:0f:bd:4a:44:dd:c9:75:27:8d:37:
cd:1e:9f:db:e6:49:d0:41:c4:a7:4d:87:99:d6:2e:
87:3e:82:fd:57:12:d9:50:6e:6c:47:fe:66:33:9a:
c7:de:89:13:e6:7b:bc:6c:83:5b:b9:7e:d1:74:b0:
ce:9e:d4:63:44:72:fb:ad:25:cb:7a:32:6b:0a:c7:
51:db:e9:bb:6d:71:21:ce:52:2e:66:b9:db:00:9d:
b2:7f:02:7e:d9:b4:b0:66:f2:98:c8:b6:8c:1a:33:
d0:26:10:28:91:60:25:93:af:11:13:1e:e9:be:10:
e2:b7:53:e9:55:55:35:b1:b3:93:55:26:4b:91:69:
20:d7:79:cf:e8:43:57:68:8f:0d:69:71:a5:9b:94:
e3:49:db:be:e1:a0:1b:57:bb:ff:48:62:bf:e7:73:
22:64:4c:c0:c8:d2:30:58:b7:ca:0d:cb:cb:28:0e:
ef:c9:95:bc:3b:99:56:27:96:c7:31:0d:61:14:b6:
06:f1:3b:78:28:aa:e8:66:c1:23:6a:33:32:49:4b:
63:8d:79:6a:9c:ec:88:11:56:63:06:5e:09:7a:af:
3d:07:a3:61:00:7c:9f:30:ec:75:72:16:70:fd:56:
65:63:7b:97:9b:0b:4d:12:46:30:cd:d0:b4:56:25:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:A2:C4:C7:33:40:95:6A:D3:0D:4C:82:15:BB:A8:F4:9B:7C:E4
X509v3 Authority Key Identifier:
keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.216.0.0/16
139.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:f7:8b:72:9e:52:ff:ef:fc:58:d3:2a:88:fe:61:47:e1:f2:
b8:15:a3:60:59:f8:c3:20:67:a5:d7:45:66:79:5d:8e:23:e5:
b2:58:09:d9:6b:a5:bc:fc:46:2f:f6:7e:7c:68:d5:33:a9:51:
15:bb:59:18:0d:95:02:21:e0:f8:6c:25:a2:b7:53:5e:b3:96:
8a:bb:b7:b5:01:1a:90:24:c0:ee:f9:76:07:12:85:cb:fa:0c:
c3:28:6b:9b:0b:9f:79:ff:6d:eb:ac:42:d8:f8:9f:98:74:99:
4a:01:91:a3:20:09:36:3c:11:f2:23:dd:ef:65:ca:ee:df:23:
7c:ae:44:41:75:10:59:7e:ff:27:d9:de:ab:f4:ec:16:5d:43:
60:d5:ff:f9:65:e4:8e:69:20:52:e3:e0:c5:d8:02:91:59:e9:
1e:fc:b5:a4:d0:71:f0:5f:43:7d:78:cc:e7:f8:16:b1:8a:bb:
71:1a:2b:96:79:b4:ae:55:22:67:66:9e:50:20:ba:e6:f3:cf:
a4:16:70:47:3d:ea:49:a4:51:9c:87:a1:44:33:4b:2f:fa:b4:
18:56:a4:e3:aa:e5:3a:9e:5f:73:d9:33:37:d0:36:b1:56:df:
1e:b5:fb:6b:b2:ba:e8:c5:30:ab:8c:3c:41:e7:e1:6b:79:08:
63:d3:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:10 2025 by rpki-client