Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa
File: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (raw, json)
Hash identifier: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=
Subject key identifier: B7:8A:DB:F5:B2:20:E2:C2:9F:2F:F7:E8:C4:87:59:9D:DE:7D:98:54
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 0222
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa
Signing time: Wed 05 Mar 2025 03:48:07 +0000
ROA not before: Wed 05 Mar 2025 03:48:07 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140217
IP address blocks: 166.120.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47
Validity
Not Before: Mar 5 03:48:07 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c7c977-de0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:b8:85:48:af:20:ef:ba:76:48:ad:41:82:
05:cb:93:3b:47:33:5c:88:53:7d:fa:ac:48:3d:d4:
6c:4a:5a:5c:df:f3:66:67:e3:ea:e2:fa:4d:af:85:
97:80:a8:8a:ea:b8:a3:8f:4d:c0:77:06:82:31:2d:
f3:ee:7d:48:84:c8:da:3b:89:7a:cf:46:07:fa:51:
63:9f:4a:0b:75:45:9d:57:8d:13:7d:d8:52:79:5c:
5e:f4:cb:d6:c2:17:40:35:ad:35:5a:fa:44:bc:df:
01:32:4a:27:3e:2f:43:34:d3:36:54:3d:a9:0b:ed:
e9:53:c9:9b:5c:a4:82:a1:a3:bc:9f:c0:2d:99:ef:
91:fc:20:2d:79:2c:e9:de:f9:40:5b:3f:79:b3:2b:
49:73:4f:66:38:fe:e4:12:07:50:bb:06:74:66:51:
fe:8b:b2:9e:a3:d2:b5:e9:af:d7:a2:80:53:13:1b:
56:7b:c9:5b:2f:e3:83:90:1f:ca:df:86:f5:42:bb:
b5:3d:9c:28:0e:b1:a9:99:b4:6f:dc:c5:f7:c6:b4:
28:b7:97:10:1e:51:b7:6e:53:37:59:82:34:15:88:
40:b7:76:4a:2d:64:8a:dd:a9:73:bb:8c:a5:fc:83:
d8:67:79:03:02:59:73:1a:c6:b0:87:3c:b5:68:0e:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8A:DB:F5:B2:20:E2:C2:9F:2F:F7:E8:C4:87:59:9D:DE:7D:98:54
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.120.192.0/22
Signature Algorithm: sha256WithRSAEncryption
88:08:13:c5:fb:eb:c2:1e:1e:1b:54:9e:b2:92:20:35:29:40:
53:9f:4f:b2:2a:b4:26:92:36:a8:96:c6:69:c7:ec:8f:f7:eb:
55:59:3b:6a:b0:0b:9c:83:cd:28:14:0c:06:78:b3:72:8d:7f:
82:89:4e:d5:e6:23:f9:9d:21:f0:3f:53:af:79:60:73:80:81:
0a:6f:ad:7e:6e:d3:49:f7:31:e5:87:40:df:30:d1:83:d9:67:
3a:23:07:f2:47:13:51:7a:3f:f6:83:2a:18:49:36:01:57:cf:
04:76:5d:b8:53:11:c0:e3:18:de:c9:9a:17:e0:52:2d:85:7f:
73:1f:da:4a:36:4d:19:98:b4:53:ee:a3:ad:3f:b2:9c:e4:b2:
38:7c:2c:29:c5:51:33:67:59:dd:7c:88:7f:20:b0:b4:63:0d:
d0:8e:8d:22:0b:06:9d:18:7d:b3:92:15:0d:80:59:e0:25:10:
78:dc:87:c8:30:da:07:a2:cd:f1:c3:fe:03:76:1f:ec:88:26:
f7:19:45:af:55:7e:47:b6:48:c7:bb:60:9a:4d:1c:98:25:fe:
d9:d1:9e:31:e7:f5:47:fb:c7:2b:5e:71:dc:3d:e3:ec:e6:1d:
ed:fe:c1:ae:74:18:79:79:52:0e:dd:d5:1d:41:74:2f:ad:ce:
18:3c:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:18:56 2025 by rpki-client