Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/129AD14466B311EF8C2A846AC4F9AE02.roa
File: 129AD14466B311EF8C2A846AC4F9AE02.roa (raw, json)
Hash identifier: rS8xEMdJRCeqgxQR/K8Yw7nfCfGl0eqfAiFPcCzxY38=
Subject key identifier: 2D:55:2F:F7:1B:C3:45:93:04:51:1A:30:B8:A6:FA:51:9A:7E:8F:AB
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 04CF
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/129AD14466B311EF8C2A846AC4F9AE02.roa
Signing time: Mon 06 Jan 2025 09:42:17 +0000
ROA not before: Mon 06 Jan 2025 09:42:17 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 149147
IP address blocks: 160.25.146.0/23 maxlen: 23
160.191.250.0/23 maxlen: 23
161.248.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1231 (0x4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Jan 6 09:42:17 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=677ba579-8fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:e9:52:5b:ab:87:2e:2e:20:11:87:50:9b:
3c:1b:3b:4e:64:d3:ff:40:ec:20:0b:b7:72:0b:fa:
ca:1f:d4:50:8c:db:15:f4:2b:b1:1c:28:36:4b:e9:
22:70:c2:17:db:19:77:50:e8:48:17:62:d0:b0:1d:
fe:37:d4:a3:cc:67:09:a8:d0:dc:7d:97:dd:9b:8a:
c3:6d:30:ef:f8:87:2a:4c:db:1a:aa:12:70:3b:dc:
e1:43:fc:71:63:7f:4b:b3:e8:fd:40:94:a8:09:35:
e7:6b:1f:eb:be:78:b0:b9:03:1c:02:be:22:1a:fe:
47:53:94:bc:d3:7f:bc:6e:e8:9a:31:1a:cb:88:0e:
aa:4f:af:1f:91:51:22:51:31:a0:9e:6b:a5:db:4c:
cb:9a:8e:be:33:72:79:92:b0:c3:ef:c7:38:2d:90:
28:41:31:d3:98:b8:93:f0:5f:21:5b:7b:37:76:38:
1b:db:ca:55:49:b0:80:55:d5:48:11:1d:ff:c1:cf:
53:6a:e5:e4:63:43:49:50:93:e7:b7:aa:b2:e9:94:
60:11:88:c6:3e:39:77:35:9f:67:f2:05:a1:49:f5:
95:7a:f1:07:7d:a7:4c:86:9e:c4:33:34:f3:ea:66:
fa:5b:80:2c:30:ec:00:ea:cc:46:f9:c5:fd:9c:ed:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:55:2F:F7:1B:C3:45:93:04:51:1A:30:B8:A6:FA:51:9A:7E:8F:AB
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/129AD14466B311EF8C2A846AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.146.0/23
160.191.250.0/23
161.248.32.0/23
Signature Algorithm: sha256WithRSAEncryption
76:ca:92:5d:d6:b8:fc:00:14:6b:35:d6:99:85:63:55:a9:c0:
a0:81:c4:95:a7:4f:f6:26:ac:43:65:cf:f8:97:b9:a2:6a:b2:
9a:ef:be:54:84:e8:7a:69:4f:16:45:a5:34:46:d5:0a:87:ff:
25:87:a3:8e:e2:0b:6e:3e:2e:6e:28:38:b5:6b:07:b3:e0:79:
1e:c9:07:57:7e:ec:88:5d:7e:e7:16:b1:fd:14:07:c6:f2:c4:
b7:5f:92:85:db:29:6e:68:6c:66:ab:10:46:8c:3e:bf:24:5d:
cc:f6:9d:83:1f:8b:be:4a:63:ef:31:11:49:e8:17:e0:58:11:
76:f0:14:b3:fa:5c:0b:23:10:a8:3c:ca:d4:28:d5:60:28:26:
19:7c:b8:97:8f:0c:1e:e8:03:ab:5d:58:8e:c3:78:8e:6b:f6:
36:09:f0:c1:54:f4:6b:e3:3a:13:01:2d:4d:b2:50:45:98:c2:
8c:3b:33:64:c2:f6:0b:51:d1:d1:9e:67:3d:af:78:29:50:6b:
b8:ff:63:4f:29:57:e6:63:39:58:21:be:60:ed:43:69:44:f2:
89:af:90:bf:3d:b5:d0:7f:47:e4:d3:93:3a:28:20:7f:68:50:
fb:82:3d:4c:81:37:ba:24:15:85:ef:82:31:76:89:40:7d:e5:
14:55:8d:09
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwMTA2MDk0MjE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdiYTU3OS04ZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cLpUlurhy4uIBGHUJs8GztOZNP/QOwgC7dyC/rKH9RQjNsV9CuxHCg2S+ki
cMIX2xl3UOhIF2LQsB3+N9SjzGcJqNDcfZfdm4rDbTDv+IcqTNsaqhJwO9zhQ/xx
Y39Ls+j9QJSoCTXnax/rvniwuQMcAr4iGv5HU5S803+8buiaMRrLiA6qT68fkVEi
UTGgnmul20zLmo6+M3J5krDD78c4LZAoQTHTmLiT8F8hW3s3djgb28pVSbCAVdVI
ER3/wc9TauXkY0NJUJPnt6qy6ZRgEYjGPjl3NZ9n8gWhSfWVevEHfadMhp7EMzTz
6mb6W4AsMOwA6sxG+cX9nO3mbwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFC1VL/cb
w0WTBFEaMLim+lGafo+rMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMTI5QUQxNDQ2
NkIzMTFFRjhDMkE4NDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAGgGZIDBAGgv/oDBAGh+CAwDQYJKoZIhvcNAQELBQADggEB
AHbKkl3WuPwAFGs11pmFY1WpwKCBxJWnT/YmrENlz/iXuaJqsprvvlSE6HppTxZF
pTRG1QqH/yWHo47iC24+Lm4oOLVrB7PgeR7JB1d+7IhdfucWsf0UB8byxLdfkoXb
KW5obGarEEaMPr8kXcz2nYMfi75KY+8xEUnoF+BYEXbwFLP6XAsjEKg8ytQo1WAo
Jhl8uJePDB7oA6tdWI7DeI5r9jYJ8MFU9GvjOhMBLU2yUEWYwow7M2TC9gtR0dGe
Zz2veClQa7j/Y08pV+ZjOVghvmDtQ2lE8omvkL89tdB/R+TTkzooIH9oUPuCPUyB
N7okFYXvgjF2iUB95RRVjQk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:37 2025 by rpki-client