Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
File: E010D234AC8D11EF93B1CB46C4F9AE02.roa (raw, json)
Hash identifier: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=
Subject key identifier: 08:8C:EA:9B:73:A2:D8:31:56:26:0C:4F:6C:32:B2:3E:37:C3:79:1A
Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial: 02
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
Signing time: Wed 27 Nov 2024 07:04:42 +0000
ROA not before: Wed 27 Nov 2024 07:04:42 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 206216
IP address blocks: 160.187.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Validity
Not Before: Nov 27 07:04:42 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6746c48a-1785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:54:c9:b4:62:22:79:ee:77:e1:8f:61:10:
df:4c:30:cd:58:94:85:80:54:aa:01:d1:32:41:c9:
fe:d7:57:d1:e6:cb:8d:ed:07:a6:6d:d4:4d:56:11:
20:ea:30:a7:68:08:6c:df:99:6c:2d:91:50:cf:1b:
de:d7:43:76:b6:a8:e6:e4:d5:17:1c:9d:3c:58:a7:
bd:9b:b3:95:a8:aa:6f:49:08:86:e9:f5:78:70:b9:
d5:cb:41:b1:f6:96:9b:df:89:44:12:11:e7:a6:61:
29:f1:ad:dc:fe:5b:9b:5f:a6:e8:b0:a6:19:de:b4:
29:b0:75:09:5b:2f:b0:1b:bd:a1:fa:de:7a:8c:de:
07:87:f0:5e:c5:6a:3c:4f:c2:44:96:a1:15:8a:74:
ae:26:df:72:b3:5e:e9:33:b7:fd:92:31:7b:47:f8:
e5:44:fd:a3:7f:90:7a:b7:9f:3c:6d:28:61:57:45:
7e:52:14:1e:38:8b:4d:17:8f:87:4d:c0:dd:cb:d4:
3f:54:0a:92:a1:c9:f8:96:15:3c:40:3c:ef:a5:07:
1f:fd:eb:c5:82:a1:48:00:07:03:04:1b:cc:c5:ee:
42:53:7b:ed:4f:d1:74:a6:29:4f:a5:3a:8e:21:02:
8b:f2:ec:23:98:70:8b:a2:86:14:7a:ea:d5:31:4a:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:EA:9B:73:A2:D8:31:56:26:0C:4F:6C:32:B2:3E:37:C3:79:1A
X509v3 Authority Key Identifier:
keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.210.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:c2:40:c4:dc:18:86:d0:df:31:93:6b:a8:4c:3c:cd:7d:74:
45:1a:ab:4e:10:56:af:e9:b2:23:2f:f7:33:8b:a6:14:be:de:
b5:7f:e2:b4:c8:0a:8a:18:41:03:77:0c:ac:94:5c:8e:de:43:
d8:c1:88:f1:71:d8:bc:ca:c3:2a:10:ad:a8:82:fa:82:0e:4b:
39:a5:4f:f8:f2:16:87:cf:61:04:10:bc:9e:30:37:b7:a1:d3:
25:bf:87:c5:63:50:53:75:33:0b:c8:91:ee:f4:c7:a0:4c:30:
80:7e:b5:df:53:15:54:b2:ae:db:47:19:75:3d:81:b4:45:0a:
73:3a:3a:23:48:bf:c0:df:74:8e:07:53:bf:0f:8e:5e:40:4b:
65:29:7b:13:84:c1:52:59:4f:0a:bd:80:a4:67:43:84:1a:87:
19:65:65:7f:5b:8a:26:fb:1b:11:60:36:cd:d4:9b:b7:9f:f4:
86:f5:de:6d:48:00:e0:15:4e:7b:e2:d1:36:14:cb:e8:36:e2:
69:0b:df:ff:3a:7a:13:db:ed:6d:85:45:10:54:8c:39:5d:2f:
22:5a:dd:81:41:5a:0b:2e:09:6f:84:38:cf:ac:3d:42:71:3a:
d7:e9:de:7e:de:34:25:de:00:8c:a8:b7:27:5c:3e:0a:2a:92:
cd:44:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:57:45 2025 by rpki-client