Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
File: EB4DFDD619B511EF90608063C4F9AE02.roa (raw, json)
Hash identifier: PXcLL8JS1VeNsuDwYx4pOxFh1PPt8i8LrRCwWaZgK5o=
Subject key identifier: 8D:E5:31:9D:49:9E:F7:B1:06:21:66:1D:26:0B:59:EF:D5:A3:16:D5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1A1D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
Signing time: Thu 30 May 2024 15:53:19 +0000
ROA not before: Thu 30 May 2024 15:53:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152510
IP address blocks: 157.66.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6685 (0x1a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 30 15:53:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a0ef-b7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:e0:10:75:1f:fe:06:b1:ec:bd:2d:09:b7:
be:6d:5a:c7:6c:21:1a:ed:a9:f9:29:f4:3a:52:59:
47:5f:ac:6c:e3:25:97:f3:73:4d:30:e6:6e:93:cf:
02:33:b6:bd:cb:30:f9:c9:32:19:10:33:d4:c4:aa:
ea:fc:65:49:0b:b2:f3:8e:3b:a3:5b:0a:38:4c:f0:
a9:6d:cd:60:20:04:6c:9b:be:40:32:eb:f6:3f:64:
80:76:d4:ca:10:9e:ce:96:87:41:9f:32:96:a0:92:
1c:b8:3d:9c:36:46:f7:1b:df:1c:c3:8a:d1:8b:81:
68:3a:cd:38:3b:4b:b3:56:c8:38:e8:67:69:e0:7f:
69:1d:4b:12:36:b6:df:d6:de:3a:e2:3a:1f:ff:6b:
2c:3d:05:0f:35:06:c6:e9:5b:bb:fb:11:6b:98:8e:
1a:84:03:de:df:89:3f:47:74:12:c2:2a:42:e2:ac:
05:9b:25:9b:47:11:e8:ac:8a:9f:f1:35:0f:c7:61:
30:3c:e9:8a:6a:99:56:9f:c4:20:e5:1a:a0:7a:c8:
d5:73:13:05:e5:d4:83:91:d6:4f:71:23:22:1c:44:
61:f5:88:70:47:a8:9f:71:39:ac:e7:5a:15:c7:0a:
6e:d7:4a:2d:30:58:d2:99:de:de:05:4a:fe:77:54:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:31:9D:49:9E:F7:B1:06:21:66:1D:26:0B:59:EF:D5:A3:16:D5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EB4DFDD619B511EF90608063C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5b:56:cd:1e:8a:4a:69:d9:98:82:32:0f:38:52:a6:15:a8:
9f:27:19:27:81:47:1a:5d:54:a9:a7:35:b4:58:2b:aa:ac:f0:
3e:fe:81:32:48:eb:e3:c2:ea:5b:eb:c3:64:25:03:1a:f0:1d:
1c:14:6c:8d:cc:1a:39:77:8d:c3:41:60:88:19:e2:d7:e6:86:
b6:34:cb:12:3a:aa:5c:8c:ed:fc:ac:a6:07:85:f3:4b:0e:c8:
00:e4:cd:d9:1f:af:52:36:05:8b:25:5e:f1:e1:e6:9c:66:66:
4f:76:9a:f7:a5:c5:10:fb:91:ea:d4:c8:c6:ad:a6:e0:1f:36:
1b:19:ce:34:c6:49:d4:55:4b:11:5c:1d:b9:a8:2c:f6:7e:56:
04:ef:98:b4:7b:39:38:1c:02:af:82:64:74:2c:63:e6:31:41:
50:1e:32:e4:d2:fd:42:e8:c8:70:5b:56:e2:67:f8:28:50:56:
8d:ab:c0:e6:88:36:21:22:ce:7f:ca:87:9f:5a:b9:87:65:c3:
3f:28:ce:ff:d3:93:fa:33:54:1c:de:a4:2a:82:8e:ce:0f:16:
15:e6:22:fd:7d:e5:f9:14:78:6e:ef:55:d0:64:0a:5f:06:6b:
18:1a:49:8a:4b:66:7a:6c:42:dd:46:0c:8e:1f:c4:ec:e1:bd:
37:06:d4:94
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQwNTMwMTU1MzE5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4YTBlZi1iN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3SvgEHUf/gax7L0tCbe+bVrHbCEa7an5KfQ6UllHX6xs4yWX83NNMOZuk88C
M7a9yzD5yTIZEDPUxKrq/GVJC7LzjjujWwo4TPCpbc1gIARsm75AMuv2P2SAdtTK
EJ7OlodBnzKWoJIcuD2cNkb3G98cw4rRi4FoOs04O0uzVsg46Gdp4H9pHUsSNrbf
1t464jof/2ssPQUPNQbG6Vu7+xFrmI4ahAPe34k/R3QSwipC4qwFmyWbRxHorIqf
8TUPx2EwPOmKaplWn8Qg5RqgesjVcxMF5dSDkdZPcSMiHERh9YhwR6ifcTms51oV
xwpu10otMFjSmd7eBUr+d1Tm3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFI3lMZ1J
nvexBiFmHSYLWe/VoxbVMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUI0REZERDYx
OUI1MTFFRjkwNjA4MDYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACdQr8wDQYJKoZIhvcNAQELBQADggEBAKBbVs0eikpp2ZiC
Mg84UqYVqJ8nGSeBRxpdVKmnNbRYK6qs8D7+gTJI6+PC6lvrw2QlAxrwHRwUbI3M
Gjl3jcNBYIgZ4tfmhrY0yxI6qlyM7fyspgeF80sOyADkzdkfr1I2BYslXvHh5pxm
Zk92mvelxRD7kerUyMatpuAfNhsZzjTGSdRVSxFcHbmoLPZ+VgTvmLR7OTgcAq+C
ZHQsY+YxQVAeMuTS/ULoyHBbVuJn+ChQVo2rwOaINiEizn/Kh59auYdlwz8ozv/T
k/ozVBzepCqCjs4PFhXmIv195fkUeG7vVdBkCl8GaxgaSYpLZnpsQt1GDI4fxOzh
vTcG1JQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:13:57 2025 by rpki-client