Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
File: ED46632AC75311EFAA7A9E0BC4F9AE02.roa (raw, json)
Hash identifier: BSkyIsVjsqkIP2UcdowW92UsoE0+ROg3QmqK9i77vAQ=
Subject key identifier: 3F:7B:37:43:64:B3:5B:55:B3:62:FA:9F:99:6F:F1:98:72:E1:A7:64
Certificate issuer: /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial: 28
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
Signing time: Tue 31 Dec 2024 08:48:16 +0000
ROA not before: Tue 31 Dec 2024 08:48:16 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 153453
IP address blocks: 160.250.10.0/24 maxlen: 24
160.250.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Validity
Not Before: Dec 31 08:48:16 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6773afd0-3d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:96:31:26:3e:41:2f:c9:fe:39:35:b2:88:
28:86:43:a0:59:c6:32:64:d8:6c:1c:dc:17:67:e6:
a9:1a:ac:4a:53:d4:1d:6f:55:76:78:42:c5:16:a4:
ef:c7:b4:0a:06:c2:ff:0d:46:7e:d7:de:e6:58:82:
7d:b6:fa:2c:35:f7:0a:8b:87:e0:30:25:73:5a:17:
03:2f:59:78:e6:b8:29:4b:0a:0e:3e:02:17:2d:c0:
ad:91:0c:1e:d7:dd:64:82:bc:e7:71:20:50:1a:e2:
2d:e6:81:b9:cb:bd:f0:dc:c3:d3:68:67:17:ef:be:
92:7d:12:66:4a:18:23:19:d2:ed:20:4f:fe:81:9a:
5f:d8:11:b6:73:cc:49:7e:9a:78:a1:7c:35:d1:65:
0d:2b:06:7c:fc:0d:b6:fa:39:82:be:9f:e8:42:61:
cc:f9:8c:f7:36:9d:d5:17:25:ac:66:ae:95:e3:a6:
aa:08:82:c2:09:47:d2:14:96:97:f1:95:4c:56:16:
55:e0:76:78:f9:5f:e5:7a:51:1d:d6:f4:b0:d2:eb:
6a:ab:13:16:f3:83:45:b1:ab:e1:65:59:61:95:08:
26:7d:d4:1b:88:ed:9b:61:f0:f4:90:0c:c7:70:d5:
83:a7:f3:fb:14:16:7e:1a:78:17:8f:e0:a3:84:d4:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7B:37:43:64:B3:5B:55:B3:62:FA:9F:99:6F:F1:98:72:E1:A7:64
X509v3 Authority Key Identifier:
keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.10.0/23
Signature Algorithm: sha256WithRSAEncryption
33:25:b6:0e:04:64:e4:57:86:18:21:57:f6:8a:f4:6b:7c:5c:
5f:7e:ed:e6:32:ac:30:1f:bf:96:b7:cd:d2:24:8b:66:0f:9f:
50:dc:92:ce:e0:45:50:86:7b:87:85:13:55:09:a8:3c:fa:10:
47:e8:2b:97:a5:ee:cb:70:c7:93:0e:01:8f:e0:f6:88:e7:ab:
6c:20:2e:86:f1:7f:23:a4:7c:37:03:90:12:22:7a:fb:54:04:
70:cb:02:d1:d5:d9:e8:b9:fc:ff:07:e9:e7:8e:f0:9d:30:09:
46:01:92:7e:92:cd:d3:50:e6:ba:fd:37:f4:06:0b:4f:ab:b3:
3a:1a:d2:54:3a:9d:a4:f9:27:c0:0d:dd:49:a9:95:09:fe:1d:
99:46:15:c6:fd:93:2a:0f:3b:fc:67:f1:2c:95:b3:bc:89:11:
42:b9:c5:f0:ec:2a:e5:06:7c:f6:7b:d6:f4:e1:37:4f:2f:67:
8c:95:a5:01:33:82:d5:b5:12:19:32:3a:f3:aa:bc:a2:73:4f:
8e:7d:90:8f:6b:f4:bd:df:71:bc:1e:fb:7d:6b:7f:fe:dc:01:
22:2b:43:49:bf:f5:23:5a:8a:da:70:fc:00:c4:fd:ec:1f:f9:
0c:e0:7b:cb:eb:77:00:80:84:95:0d:6a:1e:27:30:0e:6c:85:
90:5c:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:26:47 2025 by rpki-client