Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa
File: 9B741CFE0C3411EDB8619843C4F9AE02.roa (raw, json)
Hash identifier: oJYEoaEThRMxBGvil27GsNiveOB+RhewFzQDnOZyafM=
Subject key identifier: EB:71:64:1B:03:9B:43:AE:4F:28:37:BC:22:B2:53:BC:DD:6D:D5:93
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 0488
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa
Signing time: Sat 05 Oct 2024 00:34:46 +0000
ROA not before: Sat 05 Oct 2024 00:34:46 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 47856
IP address blocks: 160.32.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Oct 5 00:34:46 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670089a6-aee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:34:61:c5:1b:22:94:9f:10:44:03:a6:af:
d3:d2:4f:d6:d3:e0:b7:1e:e8:93:82:88:5d:86:18:
01:97:62:27:a1:e5:c6:b4:71:94:34:b5:e7:b2:13:
7b:58:aa:f8:32:b1:5c:b6:c1:45:58:2f:af:d5:90:
68:91:54:cc:10:15:63:d1:fd:63:14:df:cc:ce:12:
1a:a2:12:30:79:be:a6:28:47:69:c5:18:e0:9f:bd:
eb:49:ed:43:3d:ee:45:d7:88:ad:38:5d:9b:b6:a3:
7c:54:af:a2:4d:65:16:09:17:a7:ad:f5:d7:19:96:
30:30:9c:b7:b8:2b:9f:30:e4:2a:41:12:9a:de:b2:
1c:30:60:ad:f3:9b:bd:ef:ba:2d:be:eb:8a:ea:49:
81:0d:2b:c7:92:3a:97:1e:dc:8a:e8:95:cf:59:b4:
0c:c7:8d:7c:a3:73:d2:fc:57:5f:10:91:62:6e:0f:
b5:5d:e4:ed:ba:3b:27:b4:d2:06:8f:28:e8:be:c0:
82:92:3b:b6:d0:86:72:18:bf:8c:41:ae:50:f2:b0:
ae:d7:a2:05:a2:35:03:ad:7e:04:dd:0c:a0:c4:ae:
bc:8e:f7:27:ea:d5:b3:d9:b2:9e:da:77:ba:9b:a8:
cd:2a:6d:27:5a:09:a6:a1:bd:db:75:7f:b9:d2:76:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:64:1B:03:9B:43:AE:4F:28:37:BC:22:B2:53:BC:DD:6D:D5:93
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.32.240.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:cb:6b:b4:21:c2:1d:b9:a9:5e:6f:0d:ec:50:3c:e7:94:8d:
60:37:52:35:de:4b:f9:41:1f:9f:37:71:15:27:e2:6b:ad:ea:
3c:f1:ac:d3:a1:69:86:fd:e0:e3:84:7d:e4:3d:a0:ab:6f:98:
fe:c0:83:1e:76:82:58:2f:2a:8f:65:b4:80:57:fe:71:43:84:
80:9e:2b:9a:a5:b7:0e:3d:af:97:22:aa:87:1a:16:b9:bf:91:
f4:b7:f4:82:e8:44:0c:77:fb:d6:39:fc:61:2b:18:c6:d1:df:
a1:1d:3b:ab:20:50:5a:fc:f8:d8:82:30:85:91:cb:71:57:d9:
0f:87:8c:4b:84:a2:21:14:69:b9:e7:06:10:0a:38:91:9f:6a:
f3:bf:6f:79:35:2f:44:4c:1c:0e:51:da:a8:d4:ed:4c:f9:18:
30:df:74:60:3d:05:1f:8a:41:ff:09:3e:70:b5:21:29:21:85:
50:3e:35:3b:2c:d0:52:64:2b:60:0c:b0:e2:fc:ea:bd:0f:bf:
c8:8c:88:ef:a4:b3:82:ef:37:f1:c9:23:5a:3e:67:ce:79:f8:
37:44:92:1d:18:4f:3b:89:f3:88:45:91:f6:e5:fd:ba:98:eb:
84:f9:3a:19:64:82:89:16:98:cb:ca:3e:60:57:eb:58:83:48:
71:27:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:09:57 2025 by rpki-client