Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa
File: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (raw, json)
Hash identifier: I3e2WX5FkLj8fgNCFQ6jmYeDVClwmyXsyQxKDqP/I1s=
Subject key identifier: 09:B0:CC:DA:3D:1C:76:51:19:44:22:6C:C7:BD:BC:B3:CE:B9:52:A8
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 82
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa
Signing time: Mon 09 Sep 2024 08:41:28 +0000
ROA not before: Mon 09 Sep 2024 08:41:28 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 140627
IP address blocks: 157.10.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Sep 9 08:41:28 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66deb4b8-674f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:67:76:5e:cc:f7:f6:41:95:95:52:e8:94:
e3:57:0f:dc:6b:9b:d5:f7:27:45:06:52:cf:53:a8:
df:53:2e:75:cb:aa:28:09:d2:dd:80:40:49:7e:65:
36:40:02:8b:9b:b1:a1:eb:6b:09:08:bb:a6:c3:86:
13:7b:53:7e:5d:79:5a:4a:fa:1d:eb:fe:ac:ba:d2:
74:87:69:b3:2b:62:5f:43:25:10:23:6e:56:81:66:
e7:c7:d1:8b:83:e6:34:e2:47:6d:bc:d5:f9:a6:27:
56:99:ea:62:fc:31:bf:e9:c2:54:ca:cc:37:fe:c1:
3b:30:08:4f:5c:73:09:46:7a:4d:30:09:d1:52:cf:
42:a3:f3:0d:ce:57:ca:92:df:64:03:e3:dd:19:fb:
e8:e7:0c:48:15:d5:37:57:e8:d7:9f:80:cd:f3:40:
ab:98:68:21:94:7d:ae:e1:4c:c7:c2:f5:96:3c:60:
0b:18:c5:6d:9f:5a:c9:7f:5f:41:50:4b:4b:a5:12:
74:4e:bc:2b:81:d8:1b:65:50:ca:ec:bc:13:77:47:
e7:d7:22:56:20:9f:29:98:cf:0f:d5:c3:b9:ae:34:
f2:c3:02:9c:03:9c:f2:e1:10:73:3e:93:dd:9d:3e:
f4:f9:58:fb:1a:3b:78:c3:c8:63:b2:f5:46:52:15:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:CC:DA:3D:1C:76:51:19:44:22:6C:C7:BD:BC:B3:CE:B9:52:A8
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:55:35:d9:4e:db:3f:1c:f8:8a:41:62:00:b3:70:b7:55:bb:
2e:6e:f1:40:39:0f:88:24:37:39:83:3b:1a:2c:fc:69:20:8b:
53:ac:4f:ec:76:3c:8d:91:e4:93:df:b0:23:1f:a1:81:14:90:
da:dc:a2:82:7d:a0:68:65:e2:90:ce:71:47:cf:82:7c:b3:72:
ec:b1:81:a8:03:71:d6:7d:c6:dd:aa:00:a9:30:32:2c:aa:d1:
2f:8a:62:59:ba:d4:5a:02:35:2a:2f:ec:5e:70:71:5f:95:fb:
45:62:8e:6f:eb:53:45:bb:79:d8:be:17:e5:64:15:74:c0:35:
6e:60:d5:29:b7:3b:df:99:4b:ee:f8:e1:c7:19:aa:33:24:f0:
64:de:33:94:26:fe:08:4b:4f:6a:93:12:22:c6:9d:c3:73:c5:
63:9f:1c:f6:9e:04:0c:d7:da:5f:2d:df:32:9e:a7:5a:28:97:
e1:3e:37:75:52:85:8e:30:4f:40:0c:55:c4:8c:e3:30:d6:02:
4d:d0:a2:98:6c:7a:bc:0f:7d:c3:b4:45:1a:05:43:6c:69:8b:
e7:74:0a:eb:6f:43:8b:09:09:73:21:40:90:99:01:32:ed:c3:
ad:c8:7e:18:30:cf:1a:0e:3c:18:b8:b4:67:01:68:00:68:7e:
bb:01:df:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:49 2025 by rpki-client