Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/D1F346DAFC8011EFB251DF67C4F9AE02.roa
File: D1F346DAFC8011EFB251DF67C4F9AE02.roa (raw, json)
Hash identifier: J8PBkBjnUQWDp55ZK4Px5kI8+gf5ZLFdYuyEaWigFmk=
Subject key identifier: DF:29:B2:A0:6C:B5:E4:5B:DC:51:E3:2F:47:B6:2B:F8:FE:C5:02:1E
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 02BF
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/D1F346DAFC8011EFB251DF67C4F9AE02.roa
Signing time: Sun 09 Mar 2025 00:52:48 +0000
ROA not before: Sun 09 Mar 2025 00:52:48 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 4515
IP address blocks: 218.33.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18
Validity
Not Before: Mar 9 00:52:48 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67cce660-7c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:cc:80:52:dc:aa:de:c2:96:2e:56:95:2d:
2b:46:c7:e3:9d:35:1b:c1:c2:ac:83:ca:19:9b:4b:
96:b1:9b:c2:a9:d1:8b:e5:c4:94:0f:36:fc:f2:d5:
bc:9f:07:ff:25:92:68:aa:5d:93:6f:70:7a:1f:2f:
a5:ac:ca:c7:60:3f:f7:e3:6e:9f:87:ee:85:e9:12:
17:97:6f:75:46:c6:1d:9a:82:04:6d:7b:ec:93:b6:
65:3c:b0:8b:a3:cc:9a:34:39:57:64:6c:fa:06:ab:
6f:b5:da:68:37:89:c2:4f:12:f7:b8:d5:be:01:4e:
b1:a1:2b:30:3f:ea:59:37:46:db:a6:6b:4c:72:91:
7d:66:dc:4a:bd:12:e5:08:ba:69:c1:e3:32:9a:99:
fd:8c:e9:08:79:53:73:73:99:fc:f5:5e:f1:94:15:
1e:81:8a:69:71:08:2f:41:15:c2:fd:59:bc:c1:c1:
96:14:e9:ef:ab:b3:6c:f0:ed:6d:0b:f3:50:ca:16:
a8:18:e3:e5:ad:a8:4a:8f:91:01:93:2e:cf:82:8f:
09:31:74:68:b3:73:65:e2:f8:c7:ae:1d:a5:50:2a:
05:60:c1:1d:72:ec:27:37:bd:9a:82:d6:48:c3:35:
7d:9f:6b:4a:e6:5f:15:86:b4:7a:8e:9c:c4:49:7f:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:29:B2:A0:6C:B5:E4:5B:DC:51:E3:2F:47:B6:2B:F8:FE:C5:02:1E
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/D1F346DAFC8011EFB251DF67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:a9:b8:97:40:56:79:3f:12:30:9b:ae:7a:41:ff:3b:98:7e:
c4:9d:2e:ee:ba:f0:73:b0:88:75:10:57:27:c5:b7:4d:1a:8d:
48:ec:60:2c:ab:6b:88:27:f6:57:6d:40:d7:5b:14:75:31:9f:
67:4f:e7:aa:8c:a8:f3:67:df:8a:12:fa:fd:56:cb:8b:33:78:
4a:28:3f:82:5f:15:f6:f7:b9:2f:d0:d3:70:4f:b2:61:6f:43:
40:78:0e:4c:da:e1:5d:cd:10:04:15:0b:51:8a:10:2c:e5:d4:
9d:d1:46:63:e7:fe:1b:53:4b:98:10:d4:ae:84:7a:ba:9e:47:
b1:92:79:e5:1c:bf:f5:c5:e1:8e:43:36:27:33:60:fb:1e:ed:
3a:da:1f:8f:66:98:70:32:1f:82:30:3d:d5:0b:1c:e5:a0:d3:
ea:62:c2:2a:2b:3d:21:b5:9d:1e:fb:d5:1e:45:9c:ad:2f:dc:
f5:f5:0a:ea:46:0c:06:93:ef:b7:fc:2d:e7:d8:53:56:4c:3b:
f5:97:e5:94:ee:d7:09:2b:e0:4a:d0:66:20:ab:59:71:bd:a2:
e8:52:08:db:05:03:8a:6b:a4:cc:75:fb:57:70:86:05:56:89:
27:80:37:4d:51:5c:10:a0:99:ae:ce:41:1a:80:89:fe:d6:cf:
8a:c8:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:40 2025 by rpki-client