Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
File: 426E71C25B1511EF95122A62C4F9AE02.roa (raw, json)
Hash identifier: iVgLpNzw9WvLZDCrNCeZKcdKAVuHQLIqgkettJkRmpw=
Subject key identifier: 6B:06:EB:A4:7A:1F:94:84:3B:03:57:7F:90:6B:03:AD:7A:21:60:6D
Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial: 02
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
Signing time: Thu 15 Aug 2024 14:47:14 +0000
ROA not before: Thu 15 Aug 2024 14:47:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131582
IP address blocks: 160.25.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Validity
Not Before: Aug 15 14:47:14 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66be14f2-18c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:bf:bd:35:14:8d:1e:ee:4c:5a:76:93:ff:
5c:4f:59:ea:ae:3d:ac:28:75:98:b1:fd:a2:cb:23:
be:7f:a5:b5:be:e5:ec:42:1f:0e:d8:5c:5c:12:fd:
11:4e:25:cb:c9:06:bb:3b:5c:25:99:1e:3b:92:14:
0d:69:b4:d4:b5:46:b3:4f:8a:ff:bd:9a:6b:f8:47:
df:ae:a5:42:b5:29:4f:56:9f:8b:71:9e:3e:fc:f0:
c2:70:0f:41:69:61:4b:5d:fd:1a:58:79:59:b6:c0:
75:38:17:c1:79:87:c6:2e:14:7c:11:37:ad:f3:d5:
6c:ad:3d:91:2d:02:a4:bd:a7:cd:02:e6:f0:a2:a0:
c4:e4:bb:b6:01:8a:44:5e:8b:f1:37:28:12:86:d2:
91:6e:63:f5:97:f2:1c:1f:81:2e:d1:99:75:0c:97:
09:fa:2a:0c:a5:69:4b:f1:b1:60:8b:74:6f:00:7d:
2c:57:4c:1b:9b:e1:58:7b:5d:c4:5d:8e:d5:3c:ce:
e6:da:6a:78:c9:fc:55:8b:82:1a:de:85:f7:83:53:
aa:0c:40:19:c3:36:fd:1d:c5:d7:70:8e:4c:7f:3a:
13:d6:fb:02:db:61:86:5e:6d:1c:bc:75:ca:86:74:
78:fe:8f:49:a0:3a:be:cd:ee:a0:64:e8:70:de:c3:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:06:EB:A4:7A:1F:94:84:3B:03:57:7F:90:6B:03:AD:7A:21:60:6D
X509v3 Authority Key Identifier:
keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.173.0/24
Signature Algorithm: sha256WithRSAEncryption
61:23:b4:2e:52:04:a6:7d:8c:14:38:91:66:fd:1b:3a:4a:6d:
58:b4:35:38:14:18:ce:ba:16:13:c0:ed:d4:7c:29:a7:a3:c3:
68:b6:2c:12:73:b9:6e:fe:1b:92:69:e2:bb:d2:97:2d:99:ce:
cb:82:d2:dd:41:52:7e:e5:39:e5:01:54:5e:ba:ce:f6:f7:3d:
bb:65:7b:94:45:b5:f6:0e:cc:dc:c9:4d:11:c9:15:ac:4f:20:
f7:2e:f7:37:ed:2e:12:3e:f4:2f:23:3f:1e:7a:f7:50:c1:8c:
3b:18:b6:cd:24:61:ab:fb:e7:34:f8:c7:53:30:32:56:bf:b0:
0d:b4:14:ba:11:a2:e0:45:c5:02:9c:fd:41:a2:c6:82:cc:2b:
b7:5b:3c:c8:8c:07:a5:0b:23:89:f4:40:36:7c:14:94:dc:d4:
f9:c7:40:f3:1f:73:66:7b:c0:26:eb:64:d6:eb:5c:40:56:e0:
cd:6d:52:50:2f:84:4a:02:3a:c8:9a:19:23:47:b5:65:fc:60:
bd:e9:17:2a:27:5f:9a:50:ca:df:34:2b:03:d0:85:db:b3:c2:
80:22:74:67:e0:4d:00:59:c7:f3:03:d0:7e:db:82:bc:cc:87:
8b:bf:81:0d:47:62:62:dd:a1:51:61:88:20:cd:86:fb:11:ff:
10:3a:aa:8b
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NTk2NDExMC8GA1UEBRMoMTE2RjBBMkE2QTRCOTI0MkQ3N0EyNTBCNzE3MDA4MTVE
Mjk4RERCOTAeFw0yNDA4MTUxNDQ3MTRaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YmUxNGYyLTE4YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPPL+9NRSNHu5MWnaT/1xPWequPawodZix/aLLI75/pbW+5exCHw7YXFwS/RFO
JcvJBrs7XCWZHjuSFA1ptNS1RrNPiv+9mmv4R9+upUK1KU9Wn4txnj788MJwD0Fp
YUtd/RpYeVm2wHU4F8F5h8YuFHwRN63z1WytPZEtAqS9p80C5vCioMTku7YBikRe
i/E3KBKG0pFuY/WX8hwfgS7RmXUMlwn6KgylaUvxsWCLdG8AfSxXTBub4Vh7XcRd
jtU8zubaanjJ/FWLghrehfeDU6oMQBnDNv0dxddwjkx/OhPW+wLbYYZebRy8dcqG
dHj+j0mgOr7N7qBk6HDew+g1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUawbrpHof
lIQ7A1d/kGsDrXohYG0wHwYDVR0jBBgwFoAUEW8KKmpLkkLXeiULcXAIFdKY3bkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OTY0L0Y1MzFFREU0NUIx
NDExRUZBQzk3NDQ2MUM0RjlBRTAyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNi
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRVc4S0ttcExra0xYZWlVTGNYQUlGZEtZM2JrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi80MjZFNzFDMjVC
MTUxMUVGOTUxMjJBNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAZrTANBgkqhkiG9w0BAQsFAAOCAQEAYSO0LlIEpn2MFDiR
Zv0bOkptWLQ1OBQYzroWE8Dt1Hwpp6PDaLYsEnO5bv4bkmniu9KXLZnOy4LS3UFS
fuU55QFUXrrO9vc9u2V7lEW19g7M3MlNEckVrE8g9y73N+0uEj70LyM/Hnr3UMGM
Oxi2zSRhq/vnNPjHUzAyVr+wDbQUuhGi4EXFApz9QaLGgswrt1s8yIwHpQsjifRA
NnwUlNzU+cdA8x9zZnvAJutk1utcQFbgzW1SUC+ESgI6yJoZI0e1ZfxgvekXKidf
mlDK3zQrA9CF27PCgCJ0Z+BNAFnH8wPQftuCvMyHi7+BDUdiYt2hUWGIIM2G+xH/
EDqqiw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:58:54 2025 by rpki-client