Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa
File: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (raw, json)
Hash identifier: ewpedKUZb61m1VLcsAn7GYfV7OReNryZEeFprMQVt3Y=
Subject key identifier: 9D:FE:0C:41:07:70:E2:8B:FD:C4:26:D7:66:31:42:B6:8D:A1:35:61
Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial: 02
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa
Signing time: Tue 26 Nov 2024 10:07:26 +0000
ROA not before: Tue 26 Nov 2024 10:07:26 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 133894
IP address blocks: 160.191.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Validity
Not Before: Nov 26 10:07:26 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67459dde-04af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:bb:88:f6:5f:f2:97:55:53:77:f7:5d:e2:
9e:d7:ce:4e:19:a4:55:f3:b3:21:e8:48:5a:e0:ee:
cc:c9:f7:d7:f9:91:18:a0:1f:34:58:5f:66:06:aa:
3f:c6:21:00:2e:f3:e9:f0:10:c8:4c:7f:dd:2c:2e:
f3:2e:08:50:e7:1e:09:31:13:e2:99:50:1d:4a:aa:
e0:83:a6:a8:5c:8a:d7:18:65:02:bf:cb:94:63:b4:
81:c4:a5:b4:7b:9c:64:df:e6:c3:62:2f:08:fd:c4:
bd:42:ab:fe:45:cd:0a:c8:c5:98:ce:f2:62:97:b3:
47:c2:b4:12:d3:7d:6a:5d:ca:f9:54:8d:d8:00:04:
80:89:a6:20:0e:54:f1:34:61:1e:d8:95:31:3a:4e:
7d:24:d0:31:d3:d3:46:70:1e:d2:fe:d6:e7:6e:f7:
4c:d1:b3:cc:77:99:a9:18:b6:7b:b1:4b:04:65:be:
e3:67:4d:db:fe:2e:42:c2:e2:6b:15:80:77:7d:4f:
57:04:ad:a5:99:72:0c:64:06:9e:b0:1d:3a:0f:da:
bc:59:5a:d1:b8:15:32:bf:f5:68:52:6f:e6:cd:8f:
8d:66:c2:15:09:5a:6c:28:10:68:dc:19:fb:16:84:
fc:a2:fb:29:fb:9b:4c:d8:cf:ef:b7:6f:21:99:8c:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:0C:41:07:70:E2:8B:FD:C4:26:D7:66:31:42:B6:8D:A1:35:61
X509v3 Authority Key Identifier:
keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.140.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0a:a7:2e:85:e0:77:dc:44:66:bd:84:f2:52:9c:39:68:4e:
32:12:a9:45:59:fc:46:16:9e:e7:bd:db:26:64:de:e8:e7:8b:
6c:ba:8d:1f:ee:ef:ef:a1:60:75:98:15:10:13:0e:7e:c5:3a:
f7:f4:f5:16:da:ca:da:56:f9:d6:53:bd:81:3f:e9:50:34:73:
89:ce:65:6d:45:3c:52:1a:58:9a:28:95:9c:ed:5b:5f:f2:7b:
b7:67:35:c1:b2:fd:48:72:56:40:95:b8:f9:75:03:26:27:d5:
6e:f1:d3:64:91:78:79:95:65:a4:c5:6b:c2:9d:a3:52:92:41:
28:cd:57:ac:90:45:a6:e0:7f:25:22:02:b7:dc:29:71:e9:28:
cb:2b:bf:a0:0c:9d:8d:f7:c9:8e:ba:3d:9f:e0:ab:bc:ef:3b:
f9:5f:c5:7f:49:9d:50:f0:9d:4e:a6:00:2b:fe:3f:b1:cd:67:
6a:de:be:f6:2c:53:4b:5e:76:88:cb:1c:bc:d5:f3:d8:e6:06:
04:b2:80:b9:11:03:97:cd:33:81:39:7f:67:4a:7e:20:24:1d:
46:f9:42:2b:11:76:bc:c7:8a:88:19:2e:77:b7:21:7a:20:64:
b7:8d:5b:59:a4:45:76:cb:a6:92:4e:46:3d:f0:9e:51:23:a4:
15:5c:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:23 2025 by rpki-client