Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221CA28E9CC111EF9A7F886BC4F9AE02.roa
File: 221CA28E9CC111EF9A7F886BC4F9AE02.roa (raw, json)
Hash identifier: C4jo0RjtjtuWRn9uH7CMyCDLIFubnV22geb1xvxiCyY=
Subject key identifier: CA:B2:E4:47:E4:48:E5:AA:42:04:1E:C4:C1:6D:4A:A4:D8:35:5E:30
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1BDA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221CA28E9CC111EF9A7F886BC4F9AE02.roa
Signing time: Thu 07 Nov 2024 04:31:19 +0000
ROA not before: Thu 07 Nov 2024 04:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138778
IP address blocks: 157.20.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7130 (0x1bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Nov 7 04:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=672c4296-b8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:30:ee:ec:c4:96:32:5d:e4:5f:4e:ee:27:
2c:52:8a:cc:ff:d0:2a:79:b9:62:76:a2:82:11:b8:
94:8f:58:95:a8:f7:4a:64:84:29:b7:8b:e0:40:a5:
d4:ca:7f:fd:4a:d0:d4:66:f6:f6:c1:e7:58:a2:19:
30:ae:ff:46:56:2b:90:bc:fb:3b:1e:31:f1:5f:1e:
6b:34:fc:88:03:d9:2b:de:31:04:9a:70:cc:90:3f:
b9:b2:02:aa:3a:68:9a:41:67:5c:b7:2c:7e:f5:15:
ac:f7:e8:8b:33:17:0f:98:de:f4:5a:0f:2b:0a:08:
af:2c:12:da:ef:31:9e:dc:b3:77:05:8f:83:35:ef:
1d:24:89:eb:15:23:0c:1c:35:a7:68:80:f7:40:3c:
15:11:e3:95:05:84:70:3e:73:fb:17:47:43:b4:e2:
f3:e7:25:27:92:05:68:d8:52:07:50:2f:77:e9:8a:
64:86:27:a6:2d:e6:bf:81:72:f6:aa:8c:55:3e:cf:
2d:33:9c:7a:c1:10:cc:c7:77:50:5d:70:65:c6:37:
b3:b8:63:0c:f8:67:de:88:c0:bc:a0:87:8b:9e:3e:
b1:05:20:d1:05:dd:62:99:76:fe:6c:d0:36:b0:79:
e8:01:45:86:a0:30:ee:05:3b:a9:81:e2:20:b5:85:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:E4:47:E4:48:E5:AA:42:04:1E:C4:C1:6D:4A:A4:D8:35:5E:30
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221CA28E9CC111EF9A7F886BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ee:c4:4c:4a:51:f6:dd:0d:f0:49:c2:5c:37:02:3b:40:0b:
03:1e:70:f6:4b:b1:84:8e:51:ce:8e:ca:52:7f:a9:88:8b:67:
04:d5:a9:bf:31:0e:e3:98:e1:b7:36:ed:f1:dd:dc:cb:30:fa:
cc:6d:3c:95:3f:4c:83:a7:eb:57:3b:2d:97:8f:6e:4c:7f:04:
50:58:e5:49:6e:f6:b1:e2:9b:ff:bc:c9:e0:52:b1:8c:c9:c1:
c4:2a:f0:3e:7f:c9:12:01:cc:b0:4f:7d:d9:e4:d8:42:9b:28:
fe:44:c7:20:ce:55:5e:91:15:c6:27:80:9b:7f:aa:c8:89:7c:
e2:d0:65:c4:23:c1:a4:9f:88:ed:e5:5c:d2:a3:14:84:e3:f6:
51:5f:e4:69:d8:64:08:10:5f:f9:be:15:d3:71:8b:e1:62:b5:
12:2b:51:74:d4:69:f4:43:3b:d1:b5:10:22:b0:a2:74:6f:18:
b3:9e:9f:5d:45:e9:24:8f:3d:e2:17:83:d8:80:53:d7:5b:8a:
f7:da:d5:84:03:35:9d:3d:76:03:b3:49:31:5f:49:67:dc:20:
2d:83:75:79:3a:65:cb:3c:aa:f4:8b:ad:e1:e2:22:76:ea:46:
ef:25:98:0d:18:ae:d7:06:5f:03:b0:27:d5:00:36:3d:50:13:
41:73:12:a8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICG9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQxMTA3MDQzMTE5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzJjNDI5Ni1iOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFkw7uzEljJd5F9O7icsUorM/9AqeblidqKCEbiUj1iVqPdKZIQpt4vgQKXU
yn/9StDUZvb2wedYohkwrv9GViuQvPs7HjHxXx5rNPyIA9kr3jEEmnDMkD+5sgKq
OmiaQWdctyx+9RWs9+iLMxcPmN70Wg8rCgivLBLa7zGe3LN3BY+DNe8dJInrFSMM
HDWnaID3QDwVEeOVBYRwPnP7F0dDtOLz5yUnkgVo2FIHUC936YpkhiemLea/gXL2
qoxVPs8tM5x6wRDMx3dQXXBlxjezuGMM+GfeiMC8oIeLnj6xBSDRBd1imXb+bNA2
sHnoAUWGoDDuBTupgeIgtYWC7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMqy5Efk
SOWqQgQexMFtSqTYNV4wMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjIxQ0EyOEU5
Q0MxMTFFRjlBN0Y4ODZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGdFIowDQYJKoZIhvcNAQELBQADggEBAH3uxExKUfbdDfBJ
wlw3AjtACwMecPZLsYSOUc6OylJ/qYiLZwTVqb8xDuOY4bc27fHd3Msw+sxtPJU/
TIOn61c7LZePbkx/BFBY5Ulu9rHim/+8yeBSsYzJwcQq8D5/yRIBzLBPfdnk2EKb
KP5ExyDOVV6RFcYngJt/qsiJfOLQZcQjwaSfiO3lXNKjFITj9lFf5GnYZAgQX/m+
FdNxi+FitRIrUXTUafRDO9G1ECKwonRvGLOen11F6SSPPeIXg9iAU9dbivfa1YQD
NZ09dgOzSTFfSWfcIC2DdXk6Zcs8qvSLreHiInbqRu8lmA0YrtcGXwOwJ9UANj1Q
E0FzEqg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:33:05 2025 by rpki-client