Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/557F3136DCA511EF98B72959C4F9AE02.roa
File: 557F3136DCA511EF98B72959C4F9AE02.roa (raw, json)
Hash identifier: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg=
Subject key identifier: 25:A5:33:37:C2:F1:AF:24:29:3D:C3:56:60:B0:72:A7:4E:0C:F5:C6
Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial: 77
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/557F3136DCA511EF98B72959C4F9AE02.roa
Signing time: Mon 27 Jan 2025 11:53:34 +0000
ROA not before: Mon 27 Jan 2025 11:53:34 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45905
IP address blocks: 160.22.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Validity
Not Before: Jan 27 11:53:34 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=679773bd-9cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:59:24:df:68:0b:0e:7f:69:3b:04:95:92:
f1:15:86:04:30:0e:7c:78:27:3f:b7:9d:cf:ab:f9:
3a:f5:a3:13:34:b3:5b:1f:c1:09:a6:fb:58:60:63:
45:46:a2:0c:ba:77:80:bc:5a:d8:ab:37:c7:a3:b5:
9b:15:63:ee:dc:bb:f2:b0:ff:70:38:b4:60:bd:52:
6e:a0:8e:53:54:eb:9f:6e:44:7a:ca:72:81:8e:b0:
85:20:8b:a1:50:a9:59:be:8f:d9:9c:85:6f:c7:4d:
42:9a:5a:2f:13:b2:73:c2:da:7e:44:94:51:f7:8b:
e0:be:24:74:61:a5:1c:9e:cc:6e:72:55:af:93:1b:
7e:1b:bd:30:3d:7c:aa:ee:82:2a:65:a4:ce:89:89:
b7:51:1b:46:73:25:5d:ef:ce:bb:77:39:54:75:02:
89:e1:e4:e0:00:7e:62:e0:e4:03:01:69:02:57:ba:
70:5a:31:1a:ce:90:02:48:50:4d:2b:18:a6:92:7a:
d4:03:c4:1c:ce:bc:d1:ef:0c:4a:57:43:cc:e5:46:
1e:3a:60:df:ec:f0:3c:ba:3f:86:88:07:21:d4:52:
ed:dd:47:0c:41:b3:9e:b8:4f:a4:8c:e9:fa:85:9f:
ee:ef:27:8b:7d:cd:61:df:d0:10:b2:38:d4:03:4f:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:33:37:C2:F1:AF:24:29:3D:C3:56:60:B0:72:A7:4E:0C:F5:C6
X509v3 Authority Key Identifier:
keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/557F3136DCA511EF98B72959C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.150.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2b:48:23:b5:4c:ef:84:83:27:38:b3:08:61:8a:29:25:80:
83:a6:e9:e7:63:cb:db:2a:7d:0a:36:39:98:99:a9:c9:9a:f5:
a7:24:35:8f:b9:69:ad:25:68:f0:06:a7:85:a2:96:f5:33:3e:
78:54:9f:25:77:5a:99:0b:dc:1d:17:f3:34:36:98:73:b4:9e:
63:81:73:cc:4b:26:0f:44:5c:37:1d:60:9b:ad:24:6b:c6:d6:
de:67:de:12:11:15:61:66:71:24:d4:af:0a:3f:3d:25:69:fd:
03:b7:74:ec:48:14:12:fd:be:77:9a:00:06:c8:e6:41:5a:9a:
f9:5e:1f:8c:df:3c:a4:b5:6e:76:88:fc:82:6f:ff:4c:ef:57:
e4:49:b0:3d:53:9d:c4:78:50:8f:c7:59:7e:86:37:79:c4:99:
ad:cd:18:f3:16:1e:95:10:7b:94:36:ff:ad:72:08:ef:77:3f:
16:ff:d7:f3:01:a8:57:64:a9:27:a6:7a:9e:d1:5f:b4:8d:bc:
de:12:52:c6:44:60:cc:cd:5d:49:3b:11:ce:60:98:b8:e1:42:
fb:1c:01:d0:d2:b4:bf:6a:ae:9b:79:b5:77:60:9c:ee:37:da:
69:60:7c:b7:4b:49:4f:8f:af:af:a1:cf:8e:d7:3f:f8:18:b5:
af:6e:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:39 2025 by rpki-client