Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
File: 5A1BA2F2A58B11EF858D0F53C4F9AE02.roa (raw, json)
Hash identifier: 5wN+xyRkxzC1KSxjQknWFCxm5SRpuMOznpqM3fGfwcw=
Subject key identifier: D8:EC:B2:78:D9:29:44:C0:22:EC:02:1E:38:A7:5B:54:A8:EE:D2:C9
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1BE9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
Signing time: Mon 18 Nov 2024 08:59:01 +0000
ROA not before: Mon 18 Nov 2024 08:59:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141881
IP address blocks: 160.191.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7145 (0x1be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Nov 18 08:59:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=673b01d4-8507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cd:f9:45:0f:94:2f:08:b6:53:f9:d5:88:62:
aa:4e:66:e5:1e:09:29:c3:4d:7a:0e:0a:37:80:26:
cd:ab:d2:d8:31:fd:5d:2d:99:2f:c1:93:c4:a0:dc:
75:85:83:da:fc:14:84:ec:0e:99:db:68:12:16:fc:
98:14:98:ca:9b:61:07:49:38:2a:e1:92:df:fd:f9:
d8:79:f7:ad:0c:9f:9a:b5:98:b0:68:42:14:02:96:
eb:8c:83:9c:09:62:f1:45:b5:50:f2:06:33:d4:50:
ee:9d:59:61:af:15:21:ad:cf:4a:69:c9:37:e4:4b:
5e:06:a1:43:9a:77:4d:5c:02:0b:18:94:3d:18:d6:
ce:36:e5:44:53:df:c9:a4:c7:c3:b3:ec:69:9b:03:
2e:3a:b7:ff:0c:af:75:bd:0e:db:27:d2:a9:f7:8f:
0a:db:f1:ae:68:e2:eb:66:07:b2:f3:0b:a0:d9:ca:
65:a1:bb:6d:33:e1:12:14:cc:99:d4:02:c7:fb:dd:
d8:75:2b:ee:d0:c4:b1:89:a0:d7:3c:cd:ec:8f:37:
56:b9:67:b5:5e:84:19:88:d3:f6:a2:46:67:ca:56:
67:b3:16:b4:f5:b3:7e:cf:4f:04:bf:e3:1e:1b:42:
b0:07:2d:14:db:1c:77:31:53:ae:75:22:d0:fa:66:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:B2:78:D9:29:44:C0:22:EC:02:1E:38:A7:5B:54:A8:EE:D2:C9
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A1BA2F2A58B11EF858D0F53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.246.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e7:94:6e:66:fd:51:bd:a6:64:96:03:f0:5f:1e:c8:b3:8a:
f0:13:19:6e:7b:d2:5f:e8:f5:32:b5:0f:e0:0c:7e:ae:68:69:
8f:a4:1e:b5:af:b0:44:5b:d9:35:8d:76:bd:3b:fb:42:15:b9:
c9:13:4d:46:68:1e:cc:88:39:b7:1f:ba:43:b7:85:2f:5b:ca:
33:d7:06:ee:71:0d:30:e5:52:5e:ab:b5:55:20:60:f9:23:36:
70:c3:fd:a0:d0:c6:78:90:3a:a9:42:29:c6:41:ab:b5:52:b7:
f9:00:1d:ab:47:55:3a:ce:17:d9:47:7a:ec:5c:2e:a8:54:fb:
81:c9:b3:1f:ab:da:c0:d0:3d:62:30:ec:cb:c1:c6:a4:45:ce:
b0:9e:fc:15:b1:e1:eb:40:d5:e3:19:e5:95:b0:25:1b:cc:3c:
92:5a:c7:b8:6d:ea:55:76:f6:ed:6e:6c:b4:4a:aa:ec:56:7b:
a4:23:e3:a1:14:ff:af:77:c9:0a:b4:13:bf:3c:dd:00:86:c5:
5f:98:d3:6b:c4:1d:9c:f5:03:5c:2f:42:c6:48:36:cf:54:26:
fb:70:20:25:c5:15:2f:36:33:18:8b:67:52:ab:33:33:ce:34:
88:90:09:59:99:b5:00:5a:ba:ee:87:32:ab:a1:c7:e3:b7:f4:
31:ff:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:50:24 2025 by rpki-client