Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa
File: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (raw, json)
Hash identifier: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=
Subject key identifier: 26:E0:D5:37:CD:9D:58:96:F4:00:38:B1:99:A3:1F:93:AD:E3:6B:72
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: 02
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa
Signing time: Tue 14 Jan 2025 05:12:07 +0000
ROA not before: Tue 14 Jan 2025 05:12:07 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 7604
IP address blocks: 160.250.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Jan 14 05:12:07 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6785f227-5d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:55:7a:b6:af:7e:1b:b0:5d:0c:5d:30:7d:
d9:a2:7b:15:38:6c:48:a3:cf:6a:a0:27:94:fb:0a:
5a:d6:23:10:cd:0f:37:15:d7:50:48:43:8b:77:dd:
c4:c4:86:0a:d8:82:f3:a6:d7:97:63:7d:44:00:3f:
2e:bf:ce:c4:4a:9d:25:d2:af:98:57:58:df:46:7b:
05:8d:91:a0:dc:f3:09:66:38:9c:24:72:b4:74:24:
90:0d:2d:3a:88:9a:de:be:3c:cd:40:01:64:d3:0c:
cc:35:20:9f:5c:46:29:d3:0f:13:9e:b3:c7:b1:40:
4b:f3:88:be:b7:9d:3a:1d:d8:18:e5:36:29:7e:bf:
3a:cb:33:53:fa:a5:f6:ab:4d:61:52:e6:70:41:d2:
97:77:a2:f4:a9:15:11:0e:ae:c4:52:2c:a9:b9:7c:
6f:1a:28:00:c9:ab:32:e0:71:17:b3:96:38:e3:1f:
34:0f:49:ad:e7:5e:2a:c1:47:f4:ff:a3:55:0e:79:
c0:e9:05:01:d1:28:b1:a4:48:27:68:64:ee:a1:3d:
47:99:3c:6b:cf:d7:4a:3c:ea:d6:5e:12:7d:54:c4:
89:5d:b8:a7:f7:29:e8:e3:a6:50:de:ce:a8:32:65:
69:c5:c0:34:ba:d1:00:2e:33:70:b8:00:cf:0e:3c:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:D5:37:CD:9D:58:96:F4:00:38:B1:99:A3:1F:93:AD:E3:6B:72
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3b:02:32:62:d1:d9:de:c0:76:6f:59:22:f1:c4:95:08:1c:
34:a3:28:74:dd:fa:7b:53:b1:90:86:69:24:6b:b5:a2:e0:2d:
53:97:51:c6:4d:34:ed:a6:20:2c:67:54:f2:d7:e0:15:da:eb:
69:c3:aa:d3:6b:f4:76:50:ae:ed:91:83:85:32:7a:2c:af:1f:
81:e2:3c:8b:94:3a:27:a4:fb:1e:2a:52:ed:f4:2e:20:21:95:
7c:de:84:9a:56:97:b8:eb:3a:f9:1b:13:d4:18:84:07:88:ea:
ba:8c:40:fc:63:58:0a:e9:28:e6:96:ee:cb:cf:37:61:0a:ee:
7e:e3:cc:45:33:ce:fb:c6:49:b6:7e:49:f9:24:30:68:aa:0c:
ab:cc:c9:a2:f2:97:ca:f6:d2:f7:03:a4:32:73:b1:2f:fb:35:
b4:b0:ce:7a:61:34:85:bb:c6:a8:88:84:5b:dd:ae:8e:b1:7b:
c6:46:af:2b:46:5e:bd:eb:c8:1b:31:e6:16:db:a7:73:8f:ee:
c9:bf:bc:c8:70:b4:1d:ad:24:0f:47:30:f6:c1:aa:7d:12:d2:
8d:62:8d:9c:fc:33:4b:03:b1:82:47:4f:35:93:05:16:90:9b:
56:24:71:b8:17:d5:06:2b:4e:fc:e2:a9:0e:27:b7:46:89:58:
c6:fe:e9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:07:07 2025 by rpki-client