Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa
File: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (raw, json)
Hash identifier: l07tjxXOW5W/2ScqMlop55RYrcHfEI0FUxe52uM7aKU=
Subject key identifier: 00:47:CD:8D:46:DB:75:3F:6D:60:94:23:5F:5D:AD:5D:FB:3A:40:E3
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 068B
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa
Signing time: Thu 19 Dec 2024 06:04:18 +0000
ROA not before: Thu 19 Dec 2024 06:04:18 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 32787
IP address blocks: 162.128.3.0/24 maxlen: 24
162.128.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37
Validity
Not Before: Dec 19 06:04:18 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6763b762-3dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:f5:c4:e9:5c:04:45:42:5a:17:9d:2b:04:
a9:74:3d:0b:2d:a7:7c:87:db:bd:66:82:0e:21:c7:
09:14:b4:d6:74:d1:f0:9e:79:aa:d3:00:69:07:9c:
90:71:67:9e:19:1d:c2:bc:cc:63:15:69:10:1f:33:
a9:11:79:93:79:a9:c6:c9:94:69:64:bf:8f:4f:38:
9e:38:a2:ba:14:b8:7c:b3:30:8d:14:e1:0b:e2:a9:
3d:a7:06:6b:f0:79:8d:3a:4d:91:8a:e1:d6:a6:ff:
2d:7d:b5:d6:d5:5a:86:c1:c6:57:4f:63:90:5a:c8:
72:ab:c1:27:dc:50:eb:1c:66:ed:cf:ee:4a:aa:2c:
37:59:bd:94:19:f1:86:1c:97:c2:82:c8:1e:34:4a:
cf:bc:83:2c:81:4f:46:bb:7d:ab:37:a2:2e:f8:29:
6a:07:cf:d9:83:2f:5f:54:7f:d0:a0:4f:6a:fa:c6:
9e:73:85:b4:1a:39:a4:cc:7d:fb:72:e7:e2:4f:0d:
d9:17:65:bf:5e:aa:3d:da:7d:b2:04:e7:d8:91:8e:
10:32:72:46:30:88:d9:46:b4:72:8f:69:64:f1:3c:
e3:f2:c8:d2:e8:06:86:d4:b9:9a:bd:de:63:1d:03:
0b:7c:5e:99:02:c7:a7:b0:cb:41:12:7d:c0:42:9f:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:CD:8D:46:DB:75:3F:6D:60:94:23:5F:5D:AD:5D:FB:3A:40:E3
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.128.3.0/24
162.128.156.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bb:16:cf:95:d6:22:26:12:11:31:44:5e:60:4b:0b:5e:91:
76:33:33:8b:86:1a:ec:c8:08:5b:db:47:39:62:3d:26:ea:0c:
7b:b6:65:0f:27:ed:5b:cd:63:32:be:d3:03:83:f7:2d:d8:1e:
e5:a8:3e:a1:5c:fb:0b:92:c4:4c:d5:fc:71:ce:c6:da:c5:f2:
c1:bf:7c:0d:bc:82:a7:30:bd:20:a5:82:30:dc:4e:4b:1e:a7:
3b:e2:fb:4e:f6:ef:cc:ab:6c:08:6c:9f:de:58:6d:24:e9:33:
b7:a9:f6:60:bc:5d:a8:e2:b2:36:cb:0b:42:ce:6b:46:aa:8b:
81:25:33:34:6b:1b:a0:2f:4e:f4:fe:94:99:d0:8a:39:37:42:
c6:4d:af:2e:c7:eb:46:c9:56:92:df:45:3a:fd:12:96:2f:2d:
ef:b1:31:aa:c1:b3:f3:ff:0b:37:19:34:86:7f:23:11:78:78:
f9:ed:e4:a4:f5:42:0c:c6:da:65:c8:95:a3:aa:27:94:eb:f1:
80:cb:0f:4d:7d:bf:6d:c9:dc:f6:56:d0:0b:c8:44:f0:af:7a:
68:cb:b7:32:fe:66:e1:ae:99:97:5b:24:cb:22:b8:16:61:75:
57:a3:0f:a0:f5:38:0b:39:ae:8a:15:39:9e:3a:28:a8:0a:6e:
b5:ea:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:57 2025 by rpki-client