Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa
File: 887E73265B9A11EF80F47C41C4F9AE02.roa (raw, json)
Hash identifier: CexljjC7wRSe/lloivtx612T1a6cjKsaqz6uhDTMArU=
Subject key identifier: 86:1C:E4:48:AB:36:F0:52:23:AC:EF:7F:E6:59:49:30:97:9B:F9:DC
Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial: 16
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa
Signing time: Tue 10 Sep 2024 00:35:14 +0000
ROA not before: Tue 10 Sep 2024 00:35:14 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 10143
IP address blocks: 160.30.95.0/24 maxlen: 24
160.187.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Validity
Not Before: Sep 10 00:35:14 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66df9441-8f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:88:bd:a8:85:bc:5f:5e:b7:a8:77:dd:c4:
b4:e5:79:85:00:73:9f:e1:08:ea:9a:61:99:c5:aa:
55:d3:92:52:91:5e:e8:b0:cb:90:1f:1a:60:05:00:
d3:d5:30:2f:31:23:be:51:e3:3d:a2:41:40:e5:c6:
f5:b8:ec:e2:e2:92:0d:21:22:aa:d5:36:12:62:0d:
7b:f0:ae:74:4a:46:4c:94:54:c4:e3:c8:38:9e:24:
4a:99:b6:73:b8:39:3b:cc:2a:d4:7b:30:48:ff:79:
8f:73:e8:5e:12:88:5a:c4:cf:ad:27:4b:c8:68:ee:
0b:33:54:28:c3:4e:ee:48:ed:89:2a:89:fe:41:b5:
4e:35:83:e3:40:42:45:8b:55:cd:68:0b:77:06:5e:
fe:68:6b:7a:79:13:62:45:8c:4e:64:ac:ee:f3:48:
6e:8f:54:35:25:ae:6c:bf:eb:5c:a3:72:09:08:7a:
dc:62:56:36:92:8d:22:de:ed:c1:38:7c:6f:cc:bf:
ff:b6:af:c9:74:21:61:40:89:d4:e0:5b:56:76:f8:
43:21:cd:c8:ed:31:51:c9:34:c4:2d:2c:24:65:7e:
92:b6:97:08:71:78:12:3c:6f:8f:c6:c8:47:f1:06:
73:f0:13:06:1f:8f:a8:7e:9f:8f:8f:1d:d8:32:23:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:E4:48:AB:36:F0:52:23:AC:EF:7F:E6:59:49:30:97:9B:F9:DC
X509v3 Authority Key Identifier:
keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.95.0/24
160.187.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a7:81:b4:31:58:d4:26:90:34:fb:eb:81:13:6a:b6:1b:7d:
97:d7:e6:2d:52:8d:ad:63:37:b9:a5:a5:98:cc:bc:55:06:0e:
e7:4a:c1:64:c0:68:8d:b3:84:0c:65:33:51:b0:e0:79:6c:f9:
60:27:4c:21:20:0a:bb:6c:85:fe:08:a5:f5:2c:a5:68:64:6f:
da:df:8f:e1:20:b8:77:d3:69:18:ba:ac:34:00:37:db:d7:20:
05:6d:b5:9b:da:d6:c7:1a:38:f8:6f:82:73:0c:12:99:38:e5:
ae:25:3b:9f:ed:a1:66:8f:36:39:df:0e:bb:77:73:85:17:cd:
1b:f3:c1:ba:46:e4:d1:7d:e6:53:d3:5f:ed:69:08:91:1d:13:
b1:8d:0b:71:e8:31:c8:9c:68:4f:9a:cd:bd:db:b3:59:d6:26:
d5:98:cb:31:f3:68:08:3a:aa:25:6c:21:a8:ae:5c:e8:11:ce:
b3:ca:c5:b0:fa:16:8a:a9:8b:ae:0b:4a:e1:24:d9:39:64:40:
14:a5:c8:1c:fa:49:10:a4:d0:68:28:c1:d6:c7:be:5f:ff:2a:
14:b3:7e:50:fa:b3:4a:98:8a:0a:97:c9:ec:18:8f:d4:95:37:
a0:18:3e:bc:4a:f6:cc:c1:3b:af:53:20:c8:83:fb:1c:b7:95:
99:9a:fe:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:11 2025 by rpki-client