Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
File: 552292460F1A11E9B3F2A713C4F9AE02.roa (raw, json)
Hash identifier: NlRxG3SgenSihBb1Uz1mdp6In7PIY3SWzoat7OXr7O8=
Subject key identifier: 0B:27:1F:5D:5E:7D:93:C7:F2:64:19:A8:C8:E8:08:2D:22:38:A1:59
Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Certificate serial: 10F2
Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
Signing time: Tue 10 Dec 2024 17:45:29 +0000
ROA not before: Tue 10 Dec 2024 17:45:29 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 56300
IP address blocks: 66.96.192.0/24 maxlen: 24
66.96.193.0/24 maxlen: 24
66.96.194.0/24 maxlen: 24
66.96.195.0/24 maxlen: 24
66.96.196.0/24 maxlen: 24
66.96.197.0/24 maxlen: 24
66.96.198.0/24 maxlen: 24
66.96.199.0/24 maxlen: 24
66.96.200.0/24 maxlen: 24
66.96.201.0/24 maxlen: 24
66.96.202.0/24 maxlen: 24
66.96.203.0/24 maxlen: 24
66.96.204.0/24 maxlen: 24
66.96.205.0/24 maxlen: 24
66.96.206.0/24 maxlen: 24
66.96.207.0/24 maxlen: 24
66.96.208.0/24 maxlen: 24
66.96.209.0/24 maxlen: 24
66.96.210.0/24 maxlen: 24
66.96.211.0/24 maxlen: 24
66.96.212.0/24 maxlen: 24
66.96.213.0/24 maxlen: 24
66.96.214.0/24 maxlen: 24
66.96.215.0/24 maxlen: 24
66.96.216.0/24 maxlen: 24
66.96.217.0/24 maxlen: 24
66.96.218.0/24 maxlen: 24
158.140.128.0/24 maxlen: 24
158.140.129.0/24 maxlen: 24
158.140.130.0/24 maxlen: 24
158.140.131.0/24 maxlen: 24
158.140.132.0/24 maxlen: 24
158.140.133.0/24 maxlen: 24
158.140.134.0/24 maxlen: 24
158.140.135.0/24 maxlen: 24
158.140.136.0/24 maxlen: 24
158.140.137.0/24 maxlen: 24
158.140.138.0/24 maxlen: 24
158.140.139.0/24 maxlen: 24
158.140.140.0/24 maxlen: 24
158.140.141.0/24 maxlen: 24
158.140.142.0/24 maxlen: 24
158.140.143.0/24 maxlen: 24
158.140.144.0/24 maxlen: 24
158.140.145.0/24 maxlen: 24
158.140.146.0/24 maxlen: 24
158.140.147.0/24 maxlen: 24
158.140.148.0/24 maxlen: 24
158.140.149.0/24 maxlen: 24
158.140.150.0/24 maxlen: 24
158.140.156.0/24 maxlen: 24
158.140.157.0/24 maxlen: 24
158.140.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4338 (0x10f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB
Validity
Not Before: Dec 10 17:45:29 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67587e39-baa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:25:71:3a:69:53:6a:d9:75:39:fa:ec:52:94:
3c:f1:e6:98:e6:78:bc:6e:82:c6:1a:f9:77:d7:e5:
9a:b9:aa:ef:1b:e9:ea:36:37:72:22:17:16:a3:72:
26:68:4e:b1:26:16:a2:33:2c:bc:75:d8:42:9b:a0:
d2:3b:08:b3:64:98:86:5f:f3:96:64:a8:ca:7b:e7:
fe:10:4f:72:22:6d:4e:80:c1:0c:1f:19:e8:21:f8:
9f:f9:8d:5e:ad:5c:6d:5e:83:82:2c:d0:48:ab:66:
eb:0f:ef:2a:1d:ee:8a:ff:86:80:c1:cb:71:69:62:
46:d6:4b:f1:3f:98:a3:3c:8f:49:e3:b6:42:cc:ce:
0f:24:88:76:5f:c0:52:7b:5f:a9:68:a2:65:b5:aa:
2d:5e:67:71:77:41:58:bd:92:d6:13:63:c2:88:fa:
5d:20:0b:e0:bd:24:24:ab:77:fb:62:4f:d0:a1:0c:
74:76:b4:a0:91:52:b5:51:d7:ca:3b:d7:51:75:8c:
28:8c:6b:4d:e4:de:af:64:b5:8f:43:28:79:3e:66:
c3:77:29:7b:c8:fd:a8:bc:a1:c2:a8:c1:c4:58:23:
6f:7f:53:bf:d0:02:7a:93:8b:6e:00:78:bc:b8:57:
ca:94:4e:2d:17:ae:12:7b:eb:f4:e1:ac:18:67:eb:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:27:1F:5D:5E:7D:93:C7:F2:64:19:A8:C8:E8:08:2D:22:38:A1:59
X509v3 Authority Key Identifier:
keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.96.192.0-66.96.218.255
158.140.128.0-158.140.150.255
158.140.156.0/23
158.140.159.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:3e:e4:6a:92:f4:75:b3:b4:71:28:2d:c6:10:7d:27:ff:51:
bc:77:9c:77:a9:9e:44:31:f2:10:b3:85:40:09:c1:4c:cd:09:
0f:c4:20:9f:17:f0:db:b2:e9:21:47:70:37:19:3a:36:99:e1:
b7:1b:71:82:f3:4a:4f:78:36:b5:62:36:8d:b3:f9:fa:ea:c4:
fe:0b:5c:15:85:03:86:2d:9a:c6:52:2d:ec:83:b9:02:7b:b7:
3d:03:4e:fe:f8:d3:4d:c2:8c:9f:16:fd:29:58:1c:8d:d3:c6:
8c:53:9f:fe:71:65:33:18:3c:1b:5f:89:fe:45:5e:c0:99:f4:
25:22:a3:df:2e:05:b1:d5:d4:9b:3f:df:4d:07:95:6c:dc:d1:
ee:e9:97:3e:9d:93:3c:bb:0b:d5:80:8c:83:71:1d:b9:c6:9e:
25:30:9d:95:38:1b:14:3f:8f:61:b1:75:0b:1b:a4:e4:95:a0:
e4:db:56:88:1d:a8:10:3b:00:1d:1b:82:55:fe:5b:e6:ce:b4:
cf:fc:93:07:d4:13:b4:97:64:cb:53:1d:41:fc:d8:e9:85:15:
1f:f3:c0:1d:65:00:c5:c3:a6:aa:c3:97:dd:6c:d0:21:9e:66:
b9:b4:1f:e1:67:0b:74:48:aa:72:2b:58:c6:0d:95:6d:6f:34:
27:56:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:28:01 2025 by rpki-client