Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa
File: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (raw, json)
Hash identifier: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=
Subject key identifier: E0:46:83:A9:92:49:76:BB:F1:73:E2:78:65:DA:A3:87:E1:13:9D:D2
Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Certificate serial: 02
Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa
Signing time: Mon 20 Jan 2025 05:16:10 +0000
ROA not before: Mon 20 Jan 2025 05:16:09 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 45650
IP address blocks: 161.248.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Validity
Not Before: Jan 20 05:16:09 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678ddc19-5652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:3b:2d:28:2f:c4:d2:55:c3:71:95:99:6e:
10:04:43:70:c0:0f:8c:b7:4a:d5:8a:a3:78:c5:e8:
63:f8:58:d9:5c:e7:85:a9:a1:65:18:87:83:01:2d:
b3:9e:e8:de:c0:fa:c3:d5:1c:7c:18:8d:72:4f:ee:
b2:5b:ed:00:f7:4c:e2:74:40:1c:f0:81:68:c6:54:
91:23:9c:90:e6:78:16:57:20:32:56:c3:9b:93:2a:
67:a3:32:df:3d:0a:0c:9d:9a:4a:31:db:a1:a2:b9:
8b:53:bf:29:ae:5a:a5:8d:35:c4:ff:13:ac:a5:f6:
2b:ce:6b:78:3e:18:23:b2:80:71:21:4d:3b:f9:c5:
03:06:42:b3:d8:c2:cd:75:4f:1e:fc:cf:ee:ca:6c:
43:4d:bf:77:47:1d:20:26:1a:5e:d3:e5:e3:6a:f6:
5e:33:49:f1:35:6d:5a:23:ee:24:7e:c5:df:75:8d:
6d:ab:55:cb:3b:3c:01:5d:36:9b:25:ad:59:04:2a:
37:91:91:85:b6:13:c3:d2:56:92:36:9b:75:20:ac:
a2:16:d8:48:78:cb:1c:36:df:98:65:86:69:a8:5c:
2d:b5:be:41:73:e5:51:22:c6:81:ec:1d:90:2a:cd:
f3:73:9d:f0:eb:d3:85:be:30:69:1d:e1:b4:b4:4c:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:46:83:A9:92:49:76:BB:F1:73:E2:78:65:DA:A3:87:E1:13:9D:D2
X509v3 Authority Key Identifier:
keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.216.0/23
Signature Algorithm: sha256WithRSAEncryption
64:e1:83:1c:ac:99:34:67:2e:bc:28:b5:9e:13:eb:37:da:01:
d5:47:de:88:4f:a8:44:60:4f:94:a3:f2:10:22:d4:cb:6e:a5:
f9:84:64:90:c1:ef:5b:2b:ac:ca:6d:da:77:e4:28:21:5a:2d:
bf:33:60:32:70:9d:64:e6:0a:bb:bb:c4:4b:be:9c:6e:14:7d:
14:90:f3:f3:e9:e4:f2:1f:ac:3e:a7:4c:76:bd:b3:a2:53:70:
62:c1:38:5a:df:77:d5:8d:a9:1f:5c:c5:17:5f:aa:ff:0f:dd:
eb:48:6d:06:41:00:42:5a:4b:7d:58:7c:36:9c:52:28:0a:d5:
79:04:3c:1c:0d:c2:8b:8b:ba:66:30:f0:6e:e5:5b:a9:85:2e:
66:1f:4c:07:ee:33:d4:ca:5c:e9:d7:88:1a:1a:1a:3c:cc:84:
bb:14:9c:c6:ca:27:ac:89:be:f2:6c:f1:8f:f7:6c:3c:ea:0c:
4c:25:e4:62:d5:89:5e:40:a4:bd:00:77:90:5a:ff:e1:4e:b9:
6f:00:c9:f4:37:37:3e:a4:4f:fb:88:9a:95:7b:aa:fb:17:7d:
84:d3:2e:f3:6e:67:5c:93:16:d8:d7:f8:2e:0c:c6:2c:44:1a:
c6:44:c7:12:b9:60:25:38:c4:3b:cd:48:98:fc:aa:d0:5e:92:
59:cb:b3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:29 2025 by rpki-client