Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa
File: B21985725F3711EFA108CA0CC4F9AE02.roa (raw, json)
Hash identifier: qWDPCZUNoXxLfCTQ51artmgIDTxez9EecMCL2qvkzMg=
Subject key identifier: 7B:8C:19:37:C1:0B:33:0D:0A:D1:AC:1C:03:E5:82:71:4E:C2:DB:2B
Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial: 02
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa
Signing time: Tue 20 Aug 2024 21:03:49 +0000
ROA not before: Tue 20 Aug 2024 21:03:49 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 135559
IP address blocks: 160.30.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Validity
Not Before: Aug 20 21:03:49 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66c504b5-766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:f9:0b:5b:16:34:58:0e:25:d5:4a:95:3c:
41:ff:43:dd:f1:8d:a2:83:b9:90:f4:db:38:e1:c9:
1f:be:a5:15:d7:3b:88:b2:30:56:3e:d8:bf:30:1f:
be:13:09:26:d4:20:4e:de:97:44:1e:4c:eb:ba:c4:
45:01:63:37:a1:2b:3c:48:9e:72:0b:eb:2f:ca:84:
98:7a:0e:13:c8:89:6d:8e:a2:ba:1d:bb:b6:25:68:
08:b3:3d:5b:12:33:e8:c6:ff:42:6e:75:df:82:92:
02:86:6d:8a:0a:11:63:08:f4:b8:b6:f5:7d:4f:88:
76:02:38:95:a3:7a:db:f8:6c:3e:93:7b:3b:fd:6d:
db:45:0b:dc:3a:05:b0:2b:5c:22:23:b7:7c:12:bd:
2b:03:e6:3e:d8:ea:7a:1a:1d:4e:c4:10:33:f3:71:
e3:f6:90:bb:93:3e:d2:a7:60:a0:69:1c:74:c6:2a:
39:79:a1:52:56:80:0a:a8:8c:8a:13:17:a6:54:90:
54:5d:69:38:46:99:79:fc:13:a6:f0:f3:75:de:88:
07:a2:f3:23:f6:98:01:75:99:32:33:50:5d:44:34:
71:28:1c:55:af:6e:d0:90:f5:d3:1b:ec:38:56:9d:
1e:81:22:49:ca:cb:5d:35:bb:01:88:0c:3f:6d:f4:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:19:37:C1:0B:33:0D:0A:D1:AC:1C:03:E5:82:71:4E:C2:DB:2B
X509v3 Authority Key Identifier:
keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.37.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:df:28:8a:94:31:3a:36:6b:64:4d:96:61:97:db:89:5c:81:
06:b6:bc:fb:4a:d0:a9:04:5d:e0:2f:8f:a6:3d:c5:d1:6e:d8:
81:61:59:e1:1c:d1:08:26:13:ca:21:b7:8b:11:83:de:25:ae:
bd:5f:45:6a:98:34:75:4c:ff:f7:a8:5f:a5:43:bb:4e:49:4d:
5e:fb:99:b8:4f:6d:1b:80:02:4c:a4:63:aa:92:d1:39:a3:93:
4c:73:58:50:99:d8:0a:96:3a:3a:74:c7:b9:f8:e1:6d:fe:76:
83:82:47:c5:0b:a9:ef:ed:37:33:fa:11:0a:0a:e8:58:2d:0a:
95:35:cc:4a:7d:22:8d:08:74:f0:a0:83:d0:64:4b:79:b7:58:
33:df:40:ab:3f:20:f2:26:f1:26:0c:4d:7b:80:1e:7f:db:35:
6e:23:35:83:c9:00:70:27:e8:2b:34:50:41:0a:d8:69:88:29:
f8:92:a7:0f:25:67:35:3d:13:50:83:98:2a:82:7b:16:11:de:
1a:e7:41:16:98:8e:1b:2d:63:e4:1f:01:1d:b9:7d:5e:64:ed:
26:51:da:92:4a:0c:d9:cd:2f:f8:ff:c8:76:8e:c0:77:96:27:
79:19:8e:13:69:a3:e1:9c:8b:e4:e7:13:e5:e7:9a:32:a7:57:
34:e8:c0:5c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTNFRDExMC8GA1UEBRMoREYyNEI0RDUxQzY3ODQxREQ2MDBERDJBNjE3ODZCQ0U5
ODg3ODY2NzAeFw0yNDA4MjAyMTAzNDlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YzUwNGI1LTc2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/F/kLWxY0WA4l1UqVPEH/Q93xjaKDuZD02zjhyR++pRXXO4iyMFY+2L8wH74T
CSbUIE7el0QeTOu6xEUBYzehKzxInnIL6y/KhJh6DhPIiW2Oorodu7YlaAizPVsS
M+jG/0Judd+CkgKGbYoKEWMI9Li29X1PiHYCOJWjetv4bD6Tezv9bdtFC9w6BbAr
XCIjt3wSvSsD5j7Y6noaHU7EEDPzceP2kLuTPtKnYKBpHHTGKjl5oVJWgAqojIoT
F6ZUkFRdaThGmXn8E6bw83XeiAei8yP2mAF1mTIzUF1ENHEoHFWvbtCQ9dMb7DhW
nR6BIknKy101uwGIDD9t9E8BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUe4wZN8EL
Mw0K0awcA+WCcU7C2yswHwYDVR0jBBgwFoAU3yS01RxnhB3WAN0qYXhrzpiHhmcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxM0VELzY3N0FBQTNDNUYz
NzExRUZCRjM2OUU1OEM0RjlBRTAyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGht
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvM3lTMDFSeG5oQjNXQU4wcVlYaHJ6cGlIaG1jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi9CMjE5ODU3MjVG
MzcxMUVGQTEwOENBMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAeJTANBgkqhkiG9w0BAQsFAAOCAQEAu98oipQxOjZrZE2W
YZfbiVyBBra8+0rQqQRd4C+Ppj3F0W7YgWFZ4RzRCCYTyiG3ixGD3iWuvV9Fapg0
dUz/96hfpUO7TklNXvuZuE9tG4ACTKRjqpLROaOTTHNYUJnYCpY6OnTHufjhbf52
g4JHxQup7+03M/oRCgroWC0KlTXMSn0ijQh08KCD0GRLebdYM99Aqz8g8ibxJgxN
e4Aef9s1biM1g8kAcCfoKzRQQQrYaYgp+JKnDyVnNT0TUIOYKoJ7FhHeGudBFpiO
Gy1j5B8BHbl9XmTtJlHakkoM2c0v+P/Ido7Ad5YneRmOE2mj4ZyL5OcT5eeaMqdX
NOjAXA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:40 2025 by rpki-client