Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa
File: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (raw, json)
Hash identifier: jwyDhO2AKzS24hZPtz7MMlmo1w5QqA8KZe3aiJpN8lw=
Subject key identifier: 47:40:A5:0A:EB:46:B6:3B:78:EB:0A:4B:7F:A1:55:FF:80:C5:A0:29
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 341B
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa
Signing time: Fri 16 Aug 2024 14:40:14 +0000
ROA not before: Fri 16 Aug 2024 14:40:14 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 14618
IP address blocks: 160.30.106.0/24 maxlen: 24
160.30.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13339 (0x341b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Aug 16 14:40:14 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66bf64ce-0601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:a1:61:f0:c1:b2:08:be:c1:97:13:da:79:
00:96:7c:d6:fd:a6:11:65:15:42:8a:92:7e:cf:1a:
27:2b:c9:ef:c2:20:1d:b0:dd:45:99:23:b9:72:d8:
e0:52:c6:39:a8:57:f6:47:22:a1:ea:b6:af:bf:7e:
88:fb:2c:10:09:24:b1:a6:76:34:67:ed:40:05:e1:
1e:40:d5:f3:b3:30:59:94:a8:98:f2:7b:80:d8:06:
02:64:72:10:1d:6d:17:77:ab:c4:31:59:28:b0:d4:
6b:4c:52:e6:24:bd:c4:41:e5:81:1c:7f:2b:fc:9a:
57:d3:91:fd:fc:19:d7:04:dd:1a:84:52:f0:9a:02:
d9:23:51:82:cf:ef:f2:06:83:44:50:df:e1:4d:f5:
2a:1a:69:cf:61:72:72:6e:69:f3:fe:7f:fc:82:ff:
e2:c0:9c:9f:1b:3f:e4:bf:fe:76:8b:d6:68:16:6e:
ed:44:ab:dd:1f:00:08:52:b6:49:71:f3:a2:ea:70:
83:b1:41:fa:41:bc:11:60:44:7e:22:8c:33:b4:ba:
36:72:53:3b:c0:c8:da:86:4e:82:31:98:07:04:1d:
03:80:cf:72:49:03:9f:e7:49:8c:27:27:11:c3:b1:
b1:61:ad:85:e6:c5:db:92:f2:11:60:b1:e5:94:86:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:A5:0A:EB:46:B6:3B:78:EB:0A:4B:7F:A1:55:FF:80:C5:A0:29
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.106.0/23
Signature Algorithm: sha256WithRSAEncryption
00:66:88:04:3a:e9:2b:d0:f0:8d:39:a1:8a:ee:96:a7:a4:95:
17:bc:fd:14:a1:7d:e9:e1:ee:4a:19:ea:d4:93:60:7f:b7:08:
d9:5b:27:f9:ca:68:d2:59:75:10:b2:ff:e7:fb:dd:fe:68:f3:
28:3a:c8:82:31:c5:21:03:5f:55:2a:98:7d:1e:db:98:29:2c:
54:7e:5f:6e:1a:03:c2:d4:8f:71:7d:51:a4:4e:28:8c:e0:18:
1c:d0:09:5a:02:fd:57:a0:15:ad:a2:09:b9:cb:5d:ac:6c:4c:
fe:82:da:8b:00:dc:2c:d1:65:a0:aa:96:5a:03:ca:f0:59:d0:
c5:a4:36:d1:31:42:ae:c8:d2:b9:2e:ac:02:0f:af:73:c4:8f:
c7:79:f6:21:f1:f9:08:f3:21:ee:0d:89:dd:4c:c5:f5:ce:f3:
a9:37:7e:7f:1b:d7:62:4c:b2:ae:47:13:22:db:44:04:69:b8:
7c:a2:01:5c:2e:86:f1:dd:7f:cd:7e:e3:29:d6:d4:40:96:86:
7f:1f:b1:99:38:65:a3:2f:80:2f:d0:09:ca:8b:f5:07:05:27:
3b:1b:0a:eb:72:34:a7:c8:48:6b:68:2c:c7:d1:3f:02:17:78:
82:22:c4:b6:0c:6b:af:c2:50:00:25:3b:55:46:3b:df:da:53:
24:09:a9:e1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4
N0FBNTc1OUYwHhcNMjQwODE2MTQ0MDE0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJmNjRjZS0wNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2imhYfDBsgi+wZcT2nkAlnzW/aYRZRVCipJ+zxonK8nvwiAdsN1FmSO5ctjg
UsY5qFf2RyKh6ravv36I+ywQCSSxpnY0Z+1ABeEeQNXzszBZlKiY8nuA2AYCZHIQ
HW0Xd6vEMVkosNRrTFLmJL3EQeWBHH8r/JpX05H9/BnXBN0ahFLwmgLZI1GCz+/y
BoNEUN/hTfUqGmnPYXJybmnz/n/8gv/iwJyfGz/kv/52i9ZoFm7tRKvdHwAIUrZJ
cfOi6nCDsUH6QbwRYER+IowztLo2clM7wMjahk6CMZgHBB0DgM9ySQOf50mMJycR
w7GxYa2F5sXbkvIRYLHllIaWWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEdApQrr
RrY7eOsKS3+hVf+AxaApMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvOUE4NUJCNTAxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNjY2RUU3MDI1
QjcyMTFFRjhDMUE4RTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHmowDQYJKoZIhvcNAQELBQADggEBAABmiAQ66SvQ8I05
oYrulqeklRe8/RShfenh7koZ6tSTYH+3CNlbJ/nKaNJZdRCy/+f73f5o8yg6yIIx
xSEDX1UqmH0e25gpLFR+X24aA8LUj3F9UaROKIzgGBzQCVoC/VegFa2iCbnLXaxs
TP6C2osA3CzRZaCqlloDyvBZ0MWkNtExQq7I0rkurAIPr3PEj8d59iHx+QjzIe4N
id1MxfXO86k3fn8b12JMsq5HEyLbRARpuHyiAVwuhvHdf81+4ynW1ECWhn8fsZk4
ZaMvgC/QCcqL9QcFJzsbCutyNKfISGtoLMfRPwIXeIIixLYMa6/CUAAlO1VGO9/a
UyQJqeE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:10:40 2025 by rpki-client