Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa
File: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (raw, json)
Hash identifier: 3L8GR/TKBQutwByYr9Yt28Y5Yf6Lgn2PEAhMb4FmV9A=
Subject key identifier: E4:D0:51:90:E1:D8:5D:50:67:D0:66:F1:63:98:7B:E2:6A:31:24:C4
Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial: 03
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa
Signing time: Thu 20 Jun 2024 22:30:09 +0000
ROA not before: Thu 20 Jun 2024 22:30:09 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 152893
IP address blocks: 160.22.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Validity
Not Before: Jun 20 22:30:09 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6674ad70-e1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:ea:db:17:87:b8:23:c7:50:1e:57:fa:fd:
66:02:83:42:60:52:09:e8:47:c2:6e:9a:1a:f2:e9:
8b:ef:82:8e:12:24:8c:5c:fa:37:64:0e:8e:85:52:
b6:2f:f1:a7:d0:ee:66:ff:10:75:7d:1d:dc:fb:d1:
67:7a:cd:99:be:3a:cc:84:95:e6:04:ba:5a:64:2f:
48:a1:a1:37:22:43:29:8b:f9:3f:a1:92:57:25:34:
2e:ed:10:7a:8c:88:d0:09:d7:ff:dc:29:11:57:e6:
05:e7:fe:60:0b:eb:34:12:60:bd:3f:f2:f3:4b:36:
fb:51:69:2a:93:6d:f5:6c:ed:f5:b8:3e:f3:b7:09:
03:f1:d4:0b:70:b6:38:1b:09:5e:95:32:b4:77:82:
de:5d:2e:8a:96:51:10:56:c7:98:5b:6a:3a:dd:12:
0a:e1:db:cc:e9:31:ff:89:35:eb:d5:74:56:98:d3:
a6:44:aa:0e:2b:44:da:d8:ae:1a:a4:4a:5e:4d:cf:
79:a0:b2:30:e8:2b:1c:8c:d4:a0:23:c4:37:3e:bb:
a6:93:a6:27:3b:39:1a:2d:6e:88:a0:bf:e4:fd:81:
78:ff:59:aa:97:22:84:76:bf:4f:6c:a4:df:b5:97:
a7:36:b2:04:dc:78:87:eb:c8:73:c4:5f:5d:f3:1e:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D0:51:90:E1:D8:5D:50:67:D0:66:F1:63:98:7B:E2:6A:31:24:C4
X509v3 Authority Key Identifier:
keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fe:07:b7:7a:6d:4f:40:43:92:58:bb:a9:85:69:5c:cd:7c:
65:78:f8:9d:16:eb:79:94:34:d6:d5:b7:99:42:3b:e7:36:22:
10:89:48:ee:39:da:ad:e0:6a:dd:24:c5:5a:8a:a6:bc:73:22:
7b:bc:cd:64:db:d0:b1:61:0c:ec:01:0d:5a:69:fe:9e:ed:d5:
6a:7b:57:c3:78:dc:09:18:b1:6d:22:ab:28:c2:ca:79:1d:72:
b5:de:2d:2e:51:05:c7:c7:7c:b0:db:2b:3f:d9:96:0f:c7:eb:
a9:4d:b5:59:59:4e:01:15:25:15:9e:c7:b9:14:01:56:7e:c6:
2f:32:a3:10:20:19:dd:37:77:84:e6:65:0d:cb:02:15:80:7d:
6b:b3:55:94:c5:79:0d:21:24:2e:00:1d:e0:dc:19:37:de:9a:
fd:e7:04:88:11:93:e8:a6:79:60:e7:3f:31:d9:c6:8b:f3:3f:
d9:f2:8f:04:db:e3:20:bb:c7:37:e5:83:72:1f:52:9f:ea:07:
6c:50:10:f3:7d:3d:18:ae:ec:2d:fe:58:eb:b1:cc:10:df:e8:
48:33:fb:77:f6:26:33:a7:8f:6f:58:46:31:b9:ee:f8:97:5e:
a0:98:c9:95:64:c5:82:65:92:a4:b9:44:19:f4:88:cd:00:2b:
ab:2b:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:36:54 2025 by rpki-client