Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/762CACD0B04311EF95390327C4F9AE02.roa
File: 762CACD0B04311EF95390327C4F9AE02.roa (raw, json)
Hash identifier: O0fu0v3WPuED8cBOoy32AaYeWLhEaTHf+1HtAp2psVc=
Subject key identifier: 58:C0:0E:73:D6:56:43:B4:53:10:2A:7D:99:7A:B9:37:4C:21:77:32
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: CD
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/762CACD0B04311EF95390327C4F9AE02.roa
Signing time: Thu 09 Jan 2025 02:12:20 +0000
ROA not before: Thu 09 Jan 2025 02:12:20 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 135660
IP address blocks: 157.10.226.0/23 maxlen: 23
157.10.226.0/24 maxlen: 24
157.10.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Jan 9 02:12:20 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=677f3084-dbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:0c:de:78:50:16:60:bf:9d:6d:59:fa:f6:
42:cc:08:63:4f:54:d8:1f:0e:5a:11:89:60:a1:85:
14:27:ff:98:e8:ca:f3:d1:d8:53:6f:2a:59:12:0e:
68:39:18:ba:27:cf:f5:2d:1e:53:ab:b1:61:f6:03:
b6:9a:b4:4a:dc:ce:b9:bc:df:8f:ff:a3:d6:b9:97:
84:1a:b6:1e:8b:99:b1:26:ae:58:81:62:90:29:30:
0a:c3:13:a2:23:35:da:b4:b1:b8:c6:05:9c:bd:50:
c7:fc:f3:f7:b4:eb:22:65:82:c3:be:b5:f9:9b:0f:
83:09:d4:4f:73:b5:07:94:fc:3f:3a:67:bf:e8:53:
c2:8b:f9:56:e8:b5:09:0f:f9:67:ac:27:7f:1a:49:
89:d3:ea:f1:5e:a6:69:59:93:40:a2:cf:b9:99:f3:
0e:17:57:0f:99:fb:cf:65:94:ab:bf:7b:d7:ef:80:
e1:71:49:74:f4:cf:9a:72:1d:41:35:c9:ff:c3:07:
e8:9a:e7:63:61:8c:00:c2:64:81:ca:28:25:48:08:
4d:c2:2b:98:cd:d4:00:eb:a8:9e:cc:20:19:d7:4b:
16:70:7f:bf:44:34:1d:91:86:83:b6:4d:74:45:b0:
27:3d:1a:d8:72:e6:14:b6:d1:0d:c3:ac:df:c6:76:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C0:0E:73:D6:56:43:B4:53:10:2A:7D:99:7A:B9:37:4C:21:77:32
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/762CACD0B04311EF95390327C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.226.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:87:e4:80:8a:d9:59:ed:82:76:6d:26:ee:3c:e8:3c:01:34:
b2:ca:19:a8:f0:dc:ab:6c:3d:52:f7:fd:07:3b:d6:24:b6:99:
1b:dd:64:04:63:50:d0:cc:cd:72:cd:eb:bd:55:38:d0:f9:c9:
e9:5c:c0:9d:36:64:7e:a8:55:b8:71:8e:7d:c9:6d:1b:36:a2:
9a:27:08:29:39:50:3c:ff:ef:36:31:b2:32:ec:a5:cd:17:85:
66:33:1c:9f:f0:2d:c3:0e:ba:60:31:c7:26:ca:6f:db:de:82:
ec:38:0b:0f:6d:26:39:db:3a:31:a2:e4:88:72:90:b5:46:95:
d2:34:df:9f:4f:d6:f8:f8:d4:66:6d:81:5c:bf:02:b4:c3:bf:
15:f7:7b:f3:f2:7c:4d:98:6d:6a:37:f5:19:e8:42:64:40:b3:
45:8e:05:f0:10:77:46:ed:c3:97:3a:13:40:7b:4c:e5:cb:6d:
d6:6f:cc:57:3d:43:39:10:12:2f:98:7c:4d:c1:ac:f1:aa:ec:
1e:77:84:b0:60:e2:61:68:91:1f:86:3a:75:54:77:ce:ff:83:
44:df:6a:72:12:11:46:a4:8c:3f:54:f0:b0:23:c5:5f:40:80:
a8:4a:62:34:74:14:c6:0d:66:92:60:22:df:50:51:bb:df:a0:
6d:5a:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:25 2025 by rpki-client