Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
File: 2F02BC96718D11EE97E3E022C4F9AE02.roa (raw, json)
Hash identifier: DzBCpboud2zLxpVF1ilPsGBCQ+/vZr9mk3HLW2SW1Ug=
Subject key identifier: 8C:A7:12:5E:AA:BD:21:E7:0A:CC:5C:8B:03:91:77:6F:09:FE:9A:15
Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial: 8E
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
Signing time: Wed 31 Jan 2024 06:46:40 +0000
ROA not before: Wed 31 Jan 2024 06:46:40 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 19905
IP address blocks: 157.120.160.0/23 maxlen: 24
157.120.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Validity
Not Before: Jan 31 06:46:40 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b9ecd0-2576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e2:a6:21:de:cf:ab:45:45:b2:91:27:3a:88:
cd:55:8f:f7:2e:09:40:65:ee:ce:ca:d3:e0:ed:89:
ab:1e:93:9a:f2:62:0c:fa:90:13:59:8f:58:40:2f:
0d:2b:df:09:d1:d8:0a:a9:43:90:fb:93:54:bc:fd:
bc:fd:18:9e:10:a4:fa:4a:ff:63:18:d1:88:c4:92:
47:3f:aa:d7:08:21:0d:95:fa:4d:30:5d:18:e6:12:
42:cd:fe:94:e5:0a:8a:27:2e:5a:73:2c:68:93:62:
00:a2:68:fa:ee:12:9e:c7:05:4f:14:b4:38:07:48:
bf:0a:2b:d3:ad:9f:ae:64:63:f4:fd:7f:40:e1:18:
47:21:87:d7:2a:42:93:9b:a0:a9:f8:5f:46:3f:a9:
3d:b7:5b:f5:b6:f1:3a:0e:29:93:58:1c:b7:51:a1:
48:ff:76:66:51:44:60:9d:51:b8:19:04:a2:d1:ac:
7d:22:96:77:1a:b6:89:b0:48:97:68:f0:18:ea:b8:
29:00:fd:af:f0:68:c1:33:8d:ea:79:d0:51:eb:f3:
b2:35:44:1c:ee:6d:98:e1:25:63:75:1d:89:2a:c6:
1e:c2:98:7c:f0:93:74:c8:99:68:28:6c:d5:42:f6:
b7:c4:41:04:38:3e:1f:b4:2e:bd:3e:c4:fe:c6:f1:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:12:5E:AA:BD:21:E7:0A:CC:5C:8B:03:91:77:6F:09:FE:9A:15
X509v3 Authority Key Identifier:
keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.120.160.0-157.120.162.255
Signature Algorithm: sha256WithRSAEncryption
08:7f:9e:d7:f7:a0:09:dd:94:2a:ee:d2:1a:4f:a9:42:a9:72:
f6:18:20:ae:21:c7:ab:10:10:5b:5d:d8:00:32:34:85:a9:fc:
f3:40:84:b1:80:9d:78:9a:a0:b6:56:70:e7:4f:36:82:0f:d5:
fd:b9:a3:26:26:b2:9e:31:97:ce:f2:f1:bf:ab:e2:1e:e5:08:
62:2a:97:b6:73:b0:68:0a:6d:d5:cb:8e:ad:1d:71:94:16:17:
05:2c:a1:c6:f5:f6:a3:4c:5b:fe:2b:b5:e3:6c:60:ba:d1:16:
2c:ec:3a:36:45:0b:69:f1:9c:db:34:07:b6:71:a3:1c:cc:c8:
85:ce:35:48:17:79:ef:b3:71:0d:df:9d:41:f5:7c:a0:c4:74:
6f:70:c5:fb:2c:0a:ab:3a:2b:89:2b:97:61:f4:6d:ac:4e:d7:
db:3b:40:56:bb:ad:25:db:0b:08:10:35:d2:cd:9f:e3:90:37:
ef:15:af:24:1b:32:ed:92:58:10:bb:a8:da:c2:b1:34:2c:f9:
7c:cb:03:40:54:ae:2a:ac:16:8b:e8:22:78:5a:07:f1:81:49:
2a:99:a5:b8:29:44:02:6f:e7:a5:80:bc:97:35:85:02:2d:20:
61:71:96:8d:e8:6a:8c:ae:2c:90:de:39:09:a1:34:e1:46:7a:
8e:e7:84:6c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3
NEI3Qjk2MjIwHhcNMjQwMTMxMDY0NjQwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI5ZWNkMC0yNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9+KmId7Pq0VFspEnOojNVY/3LglAZe7OytPg7YmrHpOa8mIM+pATWY9YQC8N
K98J0dgKqUOQ+5NUvP28/RieEKT6Sv9jGNGIxJJHP6rXCCENlfpNMF0Y5hJCzf6U
5QqKJy5acyxok2IAomj67hKexwVPFLQ4B0i/CivTrZ+uZGP0/X9A4RhHIYfXKkKT
m6Cp+F9GP6k9t1v1tvE6DimTWBy3UaFI/3ZmUURgnVG4GQSi0ax9IpZ3GraJsEiX
aPAY6rgpAP2v8GjBM43qedBR6/OyNUQc7m2Y4SVjdR2JKsYewph88JN0yJloKGzV
Qva3xEEEOD4ftC69PsT+xvG21wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFIynEl6q
vSHnCsxciwORd28J/poVMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0
OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjYxMjMvMTBCRTlFMjJGNDhDMTFFREE4ODk1NDUzQzRGOUFFMDIvMkYwMkJDOTY3
MThEMTFFRTk3RTNFMDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEBZ14oAMEAJ14ojANBgkqhkiG9w0BAQsFAAOCAQEACH+e
1/egCd2UKu7SGk+pQqly9hggriHHqxAQW13YADI0han880CEsYCdeJqgtlZw5082
gg/V/bmjJiaynjGXzvLxv6viHuUIYiqXtnOwaApt1cuOrR1xlBYXBSyhxvX2o0xb
/iu142xgutEWLOw6NkULafGc2zQHtnGjHMzIhc41SBd577NxDd+dQfV8oMR0b3DF
+ywKqzoriSuXYfRtrE7X2ztAVrutJdsLCBA10s2f45A37xWvJBsy7ZJYELuo2sKx
NCz5fMsDQFSuKqwWi+gieFoH8YFJKpmluClEAm/npYC8lzWFAi0gYXGWjehqjK4s
kN45CaE04UZ6jueEbA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:41 2025 by rpki-client