Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa
File: 99D4FC3212DC11EFB2470B7FC4F9AE02.roa (raw, json)
Hash identifier: E6NCI4JuiZoY4K+zXIld9/zlqD6qc3HulCUWdCEuTgY=
Subject key identifier: F3:80:1B:53:EF:0E:66:93:06:F4:DE:E1:82:47:B6:28:AD:ED:98:0D
Certificate issuer: /CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A
Certificate serial: 018E
Authority key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa
Signing time: Fri 13 Dec 2024 02:35:57 +0000
ROA not before: Fri 13 Dec 2024 02:35:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139070
IP address blocks: 152.65.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8EDF
Validity
Not Before: Dec 13 02:35:57 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675b9d8d-8355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:ef:73:c2:c4:38:c5:bb:3b:51:23:82:c6:
ee:fa:f8:91:aa:a1:c5:b7:7a:38:36:31:a4:1f:93:
30:06:0e:68:e1:4a:88:b5:e6:f9:04:ea:3c:8d:97:
78:6d:44:0f:71:03:ff:82:18:b4:d8:01:44:1d:8a:
f1:14:ef:03:c6:0c:cd:6f:af:27:80:76:e4:53:6e:
4e:88:86:cc:86:e4:18:ac:a8:76:f3:5f:a9:b3:57:
22:63:30:1f:d4:6f:0f:51:e3:05:0d:50:4d:11:51:
58:2b:2c:a9:01:81:3a:d7:a5:d4:ea:fd:27:26:62:
d8:1f:03:e0:7a:c9:cf:fb:d5:22:7c:06:2a:f2:d7:
b3:2b:1e:96:54:6c:ec:3d:fa:ad:42:d5:68:cb:b0:
25:f7:1d:39:6b:88:59:50:23:10:e0:f3:4d:2b:ef:
f4:b3:71:4c:fb:75:5d:a8:ae:cd:09:86:1e:e2:80:
7d:52:30:3b:4f:af:4c:0f:3d:00:c4:5f:a9:8a:db:
e6:50:48:14:95:6d:6f:e6:62:f6:73:2d:6d:30:69:
38:7d:4a:8d:31:7c:2f:61:b9:0f:87:bc:26:05:01:
46:72:12:f9:d2:27:54:4c:36:e1:4a:b4:cc:7f:94:
7c:3a:0e:a2:55:ba:c0:1b:cf:94:16:95:e1:7f:fb:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:1B:53:EF:0E:66:93:06:F4:DE:E1:82:47:B6:28:AD:ED:98:0D
X509v3 Authority Key Identifier:
keyid:05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.65.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8e:48:80:9b:8b:20:23:16:3b:cc:18:4c:0f:ec:69:eb:6e:
16:78:4e:43:1b:b9:3f:1a:48:97:a8:0f:11:57:04:ac:7b:33:
bf:a7:28:03:fc:44:91:c7:01:19:49:33:ac:3c:ea:59:05:d8:
d7:18:49:20:10:b0:f8:64:15:6c:b6:60:53:2a:69:d1:a0:76:
06:86:eb:db:58:9d:1a:01:68:ad:a2:d4:89:9b:5e:75:cb:ec:
de:c3:2a:20:9c:c2:2b:c9:db:25:d8:fd:d4:ff:d2:2f:c4:ee:
3c:3c:11:d3:3e:b5:b5:99:c2:3d:0b:79:49:e2:87:fa:19:b9:
b2:54:2f:3b:ee:ce:35:8e:6f:37:b6:33:02:db:fc:f0:00:d3:
e0:80:75:0c:ed:f6:5a:13:ea:11:1d:aa:98:e2:a2:4d:be:3b:
89:08:fe:06:b2:16:4b:9d:19:4e:a1:5a:b0:8f:1a:76:b4:6f:
1a:da:ae:29:1c:bd:47:3e:72:27:b1:b7:db:74:06:6b:5b:84:
60:43:af:bf:c8:8e:df:25:79:d6:9c:4a:8c:87:d3:c9:16:a0:
9c:0c:a9:c1:97:a3:4b:ef:56:58:1e:15:9a:35:b6:22:3d:93:
8b:d4:2f:8a:68:9f:1e:a8:a5:69:fd:37:2f:20:d5:17:23:c5:
21:bf:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:32 2025 by rpki-client