Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AB8A9D16855411EFAE43CB12C4F9AE02.roa
File: AB8A9D16855411EFAE43CB12C4F9AE02.roa (raw, json)
Hash identifier: Q7r1RZg55QoOhblsHWVHeurfqZlaCjyNZlvDZnEAutU=
Subject key identifier: 6C:AE:1A:60:90:A6:E8:FB:96:1F:B1:4D:8D:F0:19:19:D7:60:E2:87
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 033A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AB8A9D16855411EFAE43CB12C4F9AE02.roa
Signing time: Tue 08 Oct 2024 09:06:58 +0000
ROA not before: Tue 08 Oct 2024 09:06:58 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 152999
IP address blocks: 160.187.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 8 09:06:58 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6704f631-c893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:74:74:60:93:e3:61:e4:99:de:47:bc:5a:
7d:86:97:b8:04:0b:73:49:9b:4d:e2:27:d8:cf:17:
49:e2:22:a0:22:e1:41:70:02:34:33:49:90:37:22:
5b:ce:64:51:64:f1:f3:b3:42:e1:d9:d3:08:1f:61:
fc:a5:6d:4b:75:a1:e4:1d:90:7f:b2:37:af:b5:70:
83:4e:a4:41:ba:8f:96:60:44:cc:42:fe:0b:df:0c:
f2:2d:09:2b:5e:71:0a:17:d8:ed:98:ae:7a:cf:33:
e6:b7:dd:5f:c4:b8:74:38:a5:c0:cc:a4:d4:6e:01:
aa:2f:0f:54:af:59:36:ca:cf:bf:57:74:a1:3e:8f:
14:24:8a:49:c2:8c:a6:1e:af:a5:a6:1f:b7:4b:71:
89:ef:58:af:f7:86:02:08:42:e1:38:a8:b9:20:8f:
3e:8f:86:40:5e:3e:e4:e8:a0:e3:75:e9:f7:44:03:
a3:4f:bc:be:be:49:39:6a:6b:e7:e2:0f:1f:6e:b4:
e7:c3:c4:b3:19:e1:b6:c1:b3:6e:5a:dd:ed:ec:64:
ff:4e:80:72:06:aa:73:b4:3e:1e:d5:59:e9:9f:4b:
88:d7:c9:6f:dc:07:6e:13:94:e5:d7:94:16:4d:25:
03:6c:fc:4e:39:75:ea:d6:15:84:8f:f1:c0:8a:16:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:1A:60:90:A6:E8:FB:96:1F:B1:4D:8D:F0:19:19:D7:60:E2:87
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AB8A9D16855411EFAE43CB12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.104.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:6d:43:26:a8:71:47:29:d4:0f:24:bd:bf:27:c8:cb:8a:62:
24:ea:3f:98:7c:11:ff:df:b2:91:a5:24:22:ce:7f:04:5a:45:
1f:71:d1:bb:b9:7f:b0:ce:f4:e0:54:7f:37:14:29:eb:6c:aa:
9f:3b:79:c6:93:13:80:16:e2:b8:e8:50:f8:8f:31:08:f5:b1:
57:a6:93:1d:9f:60:4d:7a:4b:1d:96:22:90:2b:bf:b3:b5:ea:
75:15:a1:f2:8d:68:f6:97:ca:ab:b6:9a:9e:0e:9f:5e:f3:fd:
29:8f:82:ed:c3:58:ba:25:85:47:21:26:e2:46:c4:3d:a2:34:
3e:59:83:c9:db:e5:db:c3:fc:53:f3:45:b2:ca:fb:95:40:d7:
4b:f3:08:4c:b7:6b:97:c7:ab:19:41:25:95:e2:83:80:0f:ed:
84:77:f6:cb:f5:c6:09:01:93:c3:8d:8a:52:54:16:a7:38:0a:
33:f9:02:db:10:a1:d2:90:55:7d:5d:4c:c6:7f:1b:ec:94:26:
65:d3:59:84:24:b1:02:b4:f5:57:ec:c0:ab:3e:80:6d:10:53:
26:57:80:e8:3e:ff:0f:bc:cd:ff:24:5c:8c:ac:76:50:4c:4d:
80:30:b0:dd:d1:a2:70:c7:a9:fb:8c:b4:14:02:65:98:4a:fe:
7d:57:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:03:10 2025 by rpki-client