Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/F3FC2758892211EC88B4E72CC4F9AE02.roa
File: F3FC2758892211EC88B4E72CC4F9AE02.roa (raw, json)
Hash identifier: XAAs1Vgvj1xbzal8cUQKfuMNXySwUWRweTq8YrRviFE=
Subject key identifier: 5B:DA:9A:38:4E:8F:F5:0F:2F:EB:C0:6E:45:28:DE:A8:AE:37:AA:9A
Certificate issuer: /CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Certificate serial: 0AD6
Authority key identifier: 41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/F3FC2758892211EC88B4E72CC4F9AE02.roa
Signing time: Sun 28 Aug 2022 19:56:06 +0000
ROA not before: Sun 28 Aug 2022 19:56:06 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 9790
IP address blocks: 131.203.0.0/16 maxlen: 20
131.203.29.0/24 maxlen: 24
131.203.48.0/24 maxlen: 24
131.203.49.0/24 maxlen: 24
131.203.78.0/24 maxlen: 24
131.203.79.0/24 maxlen: 24
161.29.0.0/16 maxlen: 20
161.65.0.0/19 maxlen: 20
161.65.64.0/18 maxlen: 20
161.65.128.0/19 maxlen: 19
161.65.192.0/18 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE0C4
Validity
Not Before: Aug 28 19:56:06 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630bc856-ff90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:2e:b9:b4:3d:55:e0:3a:d4:d5:18:ab:a2:
af:ad:a8:5e:d6:73:f7:21:16:c5:23:76:a4:17:06:
0d:9e:7f:7c:6b:71:03:d6:78:e7:c1:65:b1:26:2f:
bf:ac:35:f3:b9:ae:9d:f3:e2:9c:51:dc:7c:00:4b:
b3:d4:3c:22:1e:63:af:d9:ac:49:4a:a3:82:e6:70:
68:94:c6:28:f0:75:7b:b0:fa:42:2c:ab:65:cf:48:
16:95:66:0d:bb:3e:3c:76:c7:4c:90:30:fe:06:69:
17:bb:d8:ba:41:dd:95:73:75:33:bd:dd:47:59:4d:
c7:d2:53:33:e6:fd:0a:a3:79:2c:38:c9:07:eb:ae:
64:8a:53:20:be:86:65:b9:5a:b6:78:a9:87:5e:77:
de:af:3e:17:f3:26:65:2b:a0:cf:b7:af:6a:2e:14:
09:e0:88:5e:ec:a3:f5:b1:78:26:9b:43:52:15:9f:
3a:d5:47:5b:12:b7:d0:fe:86:6c:98:7d:6b:0b:a9:
36:65:66:56:9e:9d:bc:fd:b0:3c:d2:78:36:f7:0f:
42:81:f8:2d:10:bd:ac:f4:14:cd:64:b3:17:b0:10:
1b:6e:65:0a:49:af:db:54:e2:2e:8e:3c:b4:f4:3c:
3f:ad:ac:20:cb:68:71:97:48:e6:f7:0a:01:12:d9:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:9A:38:4E:8F:F5:0F:2F:EB:C0:6E:45:28:DE:A8:AE:37:AA:9A
X509v3 Authority Key Identifier:
keyid:41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/QStIAXYSTgiEYCaJYCwq5XTwuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/F3FC2758892211EC88B4E72CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.203.0.0/16
161.29.0.0/16
161.65.0.0/19
161.65.64.0-161.65.159.255
161.65.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:21:6e:b8:bd:91:96:d6:19:67:10:52:e5:48:d1:2b:28:dc:
6b:16:b8:6b:65:81:15:c9:03:b7:c2:1b:27:26:a2:6d:1c:53:
1e:a3:7f:52:b2:38:31:ef:56:f1:f0:34:d8:d4:97:8a:3d:97:
c7:01:be:8b:8f:91:49:20:ff:65:3a:9c:5c:de:7b:89:26:86:
a2:3b:54:e9:a7:0e:4e:02:8e:da:5d:ea:58:ce:5b:c1:7d:45:
be:7f:b5:8c:24:cc:6b:af:8d:ae:cc:ff:99:a2:1f:0e:84:44:
5d:64:04:c0:dd:a6:71:e2:15:b6:a4:fb:2d:38:12:91:1d:13:
bb:9e:d0:44:5c:f6:d9:48:57:a2:c7:3d:e1:61:bd:a2:20:36:
a7:d1:91:cf:c9:4e:49:c7:e1:82:97:76:7a:77:a6:f9:1f:c6:
31:7a:fd:a8:80:8b:d9:e2:61:6b:7c:c2:16:e6:a7:a0:e6:67:
2b:c4:b1:81:f8:98:f0:48:e0:6d:a7:28:f4:15:fb:b9:a5:6b:
6f:30:13:59:99:47:76:24:b1:8a:3b:28:b3:ef:cd:48:97:f1:
e7:87:64:ca:56:45:65:fb:47:95:40:3c:96:5a:26:a2:56:8c:
ec:98:b3:3f:8f:43:7d:9e:51:13:68:a3:d0:ca:23:d5:35:2f:
6f:d7:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:52 2025 by rpki-client