Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa
File: 40CD7F9A4F4711EFA3EF0919C4F9AE02.roa (raw, json)
Hash identifier: 4FwOQwuKNUy9HH7oB4xbpz2DGuRiWMyoF/td7En2UDc=
Subject key identifier: 58:71:E3:8B:99:B7:C9:3B:96:3E:1B:90:DE:26:AD:A1:D0:8A:24:54
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 027C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:30:44 +0000
ROA not before: Thu 05 Sep 2024 03:30:44 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135912
IP address blocks: 160.19.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Sep 5 03:30:44 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d925e3-91b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:8b:d8:60:0e:d8:f9:2f:ba:3b:44:68:c8:
1d:7b:fa:93:e7:34:ff:e4:29:16:a9:5e:ee:f7:43:
7b:e7:93:96:9e:13:d2:42:a0:84:b7:56:81:a4:20:
cb:d7:16:0f:2b:61:cf:0f:10:0e:83:33:f9:6e:fc:
fd:16:85:60:99:0b:24:6c:19:00:00:56:d9:14:d3:
f2:c6:aa:2b:b9:e6:0c:4f:85:b1:ab:5c:c3:92:87:
4a:e6:cc:f7:3d:e0:c0:29:cd:d1:00:dc:04:ed:c5:
78:f8:1b:8d:03:60:59:15:53:70:6b:36:4f:51:76:
7b:99:3f:9b:9b:e3:9d:2e:9e:e1:a3:08:f2:85:da:
46:00:33:af:ff:37:b0:da:71:95:9e:51:1b:bd:b7:
9f:f0:58:28:c8:bb:26:1f:e0:3a:41:c8:2c:75:12:
03:1b:64:bc:61:62:c5:ac:78:45:37:27:94:9d:ba:
54:21:12:08:a7:47:e8:08:eb:d4:83:aa:0e:e5:e0:
88:3d:3a:5c:a7:03:5c:86:7d:69:fb:73:29:ca:c3:
fd:21:3c:a6:0d:db:be:b0:0e:f7:ee:71:d6:65:98:
66:bc:80:d5:57:3d:52:77:71:be:23:59:d5:ee:4f:
8e:1d:09:3e:65:d8:2d:25:77:7f:e1:7b:2c:37:1b:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:E3:8B:99:B7:C9:3B:96:3E:1B:90:DE:26:AD:A1:D0:8A:24:54
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:21:7c:d3:00:3d:a6:f7:ff:a2:91:99:f7:3b:8a:47:d3:e4:
ba:b5:bf:8a:1c:dd:d7:df:41:93:33:7f:ff:53:42:8a:9e:34:
ea:81:1a:2f:00:c6:57:6a:d9:ed:b3:a6:cb:11:0a:d8:c7:c5:
05:92:37:a4:46:d9:f7:ce:db:a4:c7:c5:60:68:09:9a:cf:4a:
73:8f:39:ff:de:9a:8a:c6:37:09:0b:4a:47:f8:74:91:bb:40:
87:47:db:3f:dc:bf:2a:7e:3a:c3:12:c5:a5:f6:6a:4e:eb:ac:
eb:75:48:c4:78:c2:3c:cf:d5:07:72:20:0b:ec:2c:bd:7a:89:
de:d8:7e:f3:d0:29:71:d2:36:9f:a2:f1:6b:22:ee:09:e6:60:
d4:0a:50:08:50:0d:4a:c0:cd:49:0d:5b:06:15:3e:13:fb:95:
74:9f:ad:5a:0a:12:45:3d:1b:4d:fa:27:1c:e0:8e:9e:3b:2e:
29:eb:d9:5b:b0:e6:13:4d:f1:04:d4:6a:a7:9f:7c:66:e8:34:
e5:6a:67:3c:01:24:0c:e2:c0:6d:50:29:9d:d5:56:9a:a2:30:
14:6e:14:83:7e:71:0e:0c:e4:c7:91:13:ab:2f:8a:8d:86:5f:
13:f1:83:b3:ff:2c:47:45:b2:88:4e:be:1a:37:2e:24:cb:ab:
04:6f:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:38:29 2025 by rpki-client