Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa
File: F6382C7A56EC11EF85879C50C4F9AE02.roa (raw, json)
Hash identifier: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE=
Subject key identifier: CE:A4:0B:70:66:EE:BC:01:C7:40:13:06:C0:E6:C7:F5:0B:05:DD:47
Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial: 02
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa
Signing time: Sat 10 Aug 2024 07:48:42 +0000
ROA not before: Sat 10 Aug 2024 07:48:42 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 64096
IP address blocks: 160.25.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Validity
Not Before: Aug 10 07:48:42 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66b71b59-072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:60:40:fd:67:48:f0:f5:65:b7:af:30:4a:
4d:9d:93:af:5a:0b:d8:b8:ad:2e:dc:a2:94:9c:e1:
67:27:1b:f8:93:ae:56:3f:41:01:a1:69:ea:bf:9e:
bc:9f:d6:e8:4d:a8:0b:8e:98:7b:a6:81:40:59:6a:
11:b7:2c:52:73:45:f4:f6:4e:ea:34:50:35:52:71:
9d:22:1e:29:7c:9a:e8:bb:47:1e:80:d0:11:05:f6:
3c:ac:1f:1d:28:5a:48:ff:03:3e:ad:c5:6d:92:90:
f7:8f:d0:3c:6f:d0:6f:ea:00:bc:83:44:c3:a8:e8:
ad:7d:92:86:5b:48:2f:54:5e:9d:f6:07:78:4f:48:
a7:2c:8c:5e:b9:29:35:d2:63:b3:0c:b1:65:ae:8e:
3b:35:62:97:08:6d:3a:5a:85:f2:b5:91:89:02:8e:
e4:31:26:62:45:71:45:ef:59:7e:b0:15:fb:fa:67:
fe:05:7e:f4:e0:e4:1e:cc:30:d6:85:98:34:bc:1b:
69:55:2a:b3:4f:5a:9b:ed:a9:01:94:89:0a:66:9e:
80:bc:42:1a:ea:60:30:79:15:b6:03:55:b8:88:ea:
e3:b8:e1:19:06:41:72:0e:08:3b:12:2c:fb:ca:fa:
7b:09:51:86:36:da:5f:82:22:6b:da:33:d4:a8:99:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:0B:70:66:EE:BC:01:C7:40:13:06:C0:E6:C7:F5:0B:05:DD:47
X509v3 Authority Key Identifier:
keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9a:55:1e:53:40:10:09:88:1d:13:a1:97:73:c0:d2:2c:97:
3e:d4:63:42:86:2f:ad:48:b7:1d:b9:5e:5e:75:53:28:e9:26:
f9:a9:96:4a:bb:c8:c2:b1:35:42:75:75:61:2b:24:09:38:35:
b8:71:af:16:9c:ac:44:09:83:d6:5f:85:8c:0f:d8:8c:f9:b0:
98:ec:9d:f4:38:cd:d2:61:bc:43:5d:09:41:51:87:56:8d:37:
91:4d:7d:9a:4a:bd:c9:5e:1f:d7:66:b0:92:6c:43:f9:97:d5:
82:86:8c:9b:77:46:e9:fb:08:ff:1d:93:89:d9:eb:11:40:75:
7c:79:c2:5d:fd:bb:f7:b8:f0:04:74:fa:72:ba:92:b0:81:fd:
7b:e4:bd:77:3d:30:33:b4:65:b4:7c:cf:33:97:1e:09:31:4e:
e3:4a:10:0d:f9:d9:10:36:c4:c2:af:27:27:da:40:3c:bf:b5:
6d:4a:a9:20:bf:c6:ec:6e:f3:1c:66:36:98:66:83:dc:2d:c7:
74:b1:1a:2b:59:d0:6c:8a:03:4d:c4:64:dd:47:7f:83:dd:19:
e7:7a:13:15:b9:1e:99:cf:cc:dd:62:28:63:71:12:97:e6:08:
cb:35:4f:c7:05:30:51:fe:94:f6:a0:b9:95:b3:f8:28:88:85:
c4:ad:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:03 2025 by rpki-client