Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa
File: 45FFCD9AD6E511EE9E963F62C4F9AE02.roa (raw, json)
Hash identifier: 7EaPL3FYpdnQyhCS17k4qa1EtbWGB18uK3e3RtZmRJ4=
Subject key identifier: 47:AD:DC:F1:48:49:61:7D:9A:1E:E0:5B:C6:2B:BC:03:57:3B:86:DC
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0499
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa
Signing time: Wed 11 Dec 2024 09:16:26 +0000
ROA not before: Wed 11 Dec 2024 09:16:26 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135905
IP address blocks: 157.20.88.0/23 maxlen: 24
160.22.102.0/23 maxlen: 24
160.191.100.0/23 maxlen: 23
160.250.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Dec 11 09:16:26 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67595869-ed3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:cc:bd:b8:2d:8e:93:56:9f:68:d9:c0:d0:
e4:54:65:24:98:0e:78:bd:db:6a:b9:34:66:d0:26:
c6:b3:f3:ff:e4:c3:22:05:71:f1:bd:fc:de:22:2f:
fd:56:ca:a0:50:71:d0:e9:e7:d9:4d:04:de:2c:0a:
30:ef:93:ab:0d:3d:a9:eb:78:5a:55:9c:ea:0f:2d:
a0:6d:4c:ab:35:0d:e0:d4:73:b3:a5:f6:c8:d7:a0:
78:f0:00:14:8d:c2:86:f1:2c:9a:60:c9:0e:28:56:
6f:ad:ad:b9:dc:25:62:cf:9b:14:76:da:72:ab:9a:
87:61:b9:4a:80:f4:b3:ce:21:79:cf:d0:16:86:4a:
98:ea:30:e4:bf:bc:65:4f:9f:96:33:d1:56:68:4a:
fa:35:9d:58:9b:dc:85:89:9b:fc:79:59:a8:30:7e:
2d:79:75:cb:af:35:4d:b3:73:65:d0:96:b7:b2:f2:
31:ef:1f:a3:ad:0b:24:35:aa:3f:8e:01:5c:08:0e:
98:38:0f:2c:da:bf:c6:1b:ed:e1:81:f8:55:f4:c8:
79:0c:b6:67:26:53:b8:d1:fa:c1:3c:9f:e9:78:6a:
ae:d4:79:aa:66:17:14:c9:b2:6e:59:ec:4a:84:70:
51:1f:5a:b9:73:70:d6:42:b1:72:fe:9b:5a:ae:84:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AD:DC:F1:48:49:61:7D:9A:1E:E0:5B:C6:2B:BC:03:57:3B:86:DC
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.88.0/23
160.22.102.0/23
160.191.100.0/23
160.250.126.0/23
Signature Algorithm: sha256WithRSAEncryption
96:2a:89:7b:11:3c:10:10:3b:16:be:1f:be:9d:a2:58:57:68:
90:d4:50:71:6c:4c:d4:9e:81:e9:27:57:33:ec:fe:43:cd:77:
21:37:f8:a0:23:97:39:d2:76:5f:d1:29:00:da:a4:29:5c:fa:
51:eb:2a:fe:12:ee:6c:cd:15:9f:1e:2d:f3:b5:e6:97:a0:e2:
07:67:fc:b7:fb:ee:3e:41:46:f5:f0:64:d7:9e:cb:94:f7:6b:
a7:f8:8e:72:71:d4:c6:f1:76:ca:56:26:69:73:6f:98:4a:db:
b3:bf:63:17:d6:b5:a7:fc:93:64:37:a7:7d:87:b5:ac:ad:85:
df:a7:1e:b4:4d:6a:7b:a1:da:5e:fd:50:85:06:0e:26:dc:5d:
0b:75:76:84:72:8a:96:0e:09:a0:41:1f:28:ba:50:8f:6a:08:
5d:00:4d:7a:24:35:f1:f8:f8:40:4c:47:9b:4f:cb:a9:dd:46:
4d:54:35:c5:bd:02:68:fe:2b:1f:36:35:22:70:e3:c3:a9:3b:
28:97:f8:74:f0:1e:72:d0:17:d6:12:5d:94:00:21:0e:8a:59:
f1:ec:c4:4c:8f:9a:f0:ef:f7:8d:76:87:e2:a7:fe:1c:79:ea:
cf:c9:4b:d0:c7:fd:11:9a:8a:37:c3:22:da:de:aa:cb:61:1f:
c3:92:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:04:18 2025 by rpki-client