Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63578C70FC11EF9745785BC4F9AE02.roa
File: BE63578C70FC11EF9745785BC4F9AE02.roa (raw, json)
Hash identifier: PnLQ38DQzjvUY3afFgbjtEWr1q+tixMLL5NKyYNSlFU=
Subject key identifier: DF:37:64:95:E9:6E:0A:1D:9F:D7:15:38:3F:32:83:26:EE:3A:91:BF
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1B41
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63578C70FC11EF9745785BC4F9AE02.roa
Signing time: Thu 12 Sep 2024 11:47:10 +0000
ROA not before: Thu 12 Sep 2024 11:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141308
IP address blocks: 160.30.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6977 (0x1b41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Sep 12 11:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e2d4be-34e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:bb:c2:12:ac:71:cf:c8:cc:15:d2:94:62:
65:a4:4f:93:97:4a:cb:44:81:90:3f:ac:f2:79:0a:
a4:92:07:47:d1:6d:c2:d1:96:ec:87:32:a0:f5:10:
33:51:52:e1:39:54:f3:c3:d9:0d:80:6d:68:9b:a4:
24:e6:18:01:2b:33:d2:8a:6e:13:88:7e:0b:63:bd:
84:66:8b:43:10:d6:64:de:f9:6d:a2:2d:fb:27:a6:
d8:bc:af:49:fe:d7:b4:67:5d:2d:2f:e1:f5:4a:66:
41:bf:20:9c:2d:e6:c6:ba:a4:07:84:2d:e2:da:10:
8e:8d:38:cd:b3:1a:b0:04:42:ce:97:c6:a7:24:fc:
35:cb:5c:5a:1b:b7:f6:dc:58:60:52:05:56:ef:5c:
2b:07:e6:98:dc:7b:9f:32:97:cf:a0:77:74:b0:26:
65:a6:97:29:8b:3d:c3:67:b7:c4:a6:fd:6c:3b:2c:
63:9e:b1:95:d5:82:96:a6:17:dd:0c:85:d0:86:ec:
1b:7f:d1:0f:f1:81:49:2f:0e:57:f9:5a:36:4e:50:
28:27:92:25:60:d7:8a:5a:a4:c9:6c:b3:7f:66:43:
86:a2:13:9b:92:73:7c:90:78:08:8a:dd:55:03:0c:
76:15:a1:4d:9d:9c:9f:3c:9d:20:ba:89:53:bd:93:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:64:95:E9:6E:0A:1D:9F:D7:15:38:3F:32:83:26:EE:3A:91:BF
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63578C70FC11EF9745785BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.144.0/24
Signature Algorithm: sha256WithRSAEncryption
45:87:ed:ff:20:ec:ae:48:28:21:d3:19:7b:2f:01:d9:28:5a:
b2:81:c9:1e:8b:e9:33:8c:41:15:98:b2:31:8e:f3:6b:ae:cb:
5f:63:51:b5:c9:8d:5c:d7:cf:a9:47:09:90:db:00:1d:a3:3f:
f3:db:9f:bf:80:05:e2:df:9c:86:c1:71:ec:00:27:26:ab:a0:
e8:19:b9:60:68:bf:e6:66:e5:45:d3:1a:c4:ab:d6:a0:84:74:
81:01:e2:bb:70:10:20:9f:b5:87:b5:88:19:01:47:de:87:c4:
00:cd:88:60:15:7f:5f:a2:85:db:73:d9:4a:4b:ad:09:7e:2b:
1e:ed:4b:58:1c:3a:d0:ba:95:71:55:fb:bd:2d:6b:96:33:c4:
43:b1:3c:70:11:f8:d8:64:ba:25:35:31:c5:d5:28:86:9a:9b:
01:d7:a3:5a:02:93:2b:1d:76:48:50:07:0c:f8:cb:69:e7:23:
1b:35:75:e6:3b:f4:ac:64:ce:99:a2:a3:4f:7c:23:46:a7:79:
71:40:78:b8:0c:bb:80:af:f2:3a:1d:23:53:f6:19:f6:99:df:
46:65:d6:9c:c6:eb:ad:88:74:3d:9f:53:73:a3:e4:28:5d:45:
69:3e:7f:53:06:70:8e:e5:31:7e:d3:9a:d1:ff:b6:20:e1:c9:
ae:e3:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:10:33 2025 by rpki-client