Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa
File: A3815188C9D211EFB961F44DC4F9AE02.roa (raw, json)
Hash identifier: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=
Subject key identifier: B8:68:F1:7A:4F:FC:17:F7:0C:7A:E0:54:DD:B8:85:DB:84:D2:ED:D7
Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial: 04
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa
Signing time: Fri 03 Jan 2025 13:00:00 +0000
ROA not before: Fri 03 Jan 2025 13:00:00 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 140641
IP address blocks: 160.250.204.0/24 maxlen: 24
160.250.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Validity
Not Before: Jan 3 13:00:00 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6777df4f-a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:4b:2c:87:2e:73:da:42:3e:7e:ee:a7:b4:
9e:7d:6e:4a:8b:e1:0d:36:20:09:bd:a7:d2:1a:f1:
c9:3b:dd:40:db:85:2a:c0:ba:7b:61:7c:f9:fc:9a:
f7:27:ba:99:c0:a1:9a:86:58:97:58:9e:01:3d:07:
3f:e4:45:1a:4f:f1:59:c6:f8:d4:c8:14:9d:68:7a:
79:5e:87:54:34:28:b0:7b:34:52:65:02:8f:74:a2:
c5:a2:73:51:20:d4:a1:2b:a4:24:72:05:6a:7c:cd:
f1:97:aa:a7:c7:c5:0c:c5:90:2a:aa:c3:ec:92:21:
73:d5:bc:46:c6:ab:e1:9b:d9:f5:83:1e:12:66:fc:
02:d9:b4:33:a6:96:6f:54:2f:c4:40:53:c1:bd:18:
ca:6e:68:bf:98:dd:3f:d4:d8:fb:a9:18:94:26:fb:
2b:66:60:e2:0c:4c:d7:79:e7:f8:11:88:2e:97:0f:
1c:45:83:fc:ed:a6:91:c8:33:94:6b:10:89:66:27:
97:fc:6e:65:ff:a7:39:60:3e:e1:85:35:65:1f:a3:
0d:2a:e6:f1:3a:31:6b:0a:2d:d6:60:f7:a5:fb:6b:
af:fe:20:c9:62:7e:3b:70:c9:7e:32:09:b4:57:ae:
2a:48:2e:22:6e:84:21:13:06:43:2c:b4:4d:4f:24:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:68:F1:7A:4F:FC:17:F7:0C:7A:E0:54:DD:B8:85:DB:84:D2:ED:D7
X509v3 Authority Key Identifier:
keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.204.0/23
Signature Algorithm: sha256WithRSAEncryption
49:3d:5c:2c:80:12:f8:d9:4c:3d:cb:a4:a6:03:70:f8:14:e5:
32:62:68:6a:7e:56:68:b2:eb:04:27:84:a3:74:88:68:a9:79:
e4:f6:37:db:6e:9a:54:47:6c:1c:bc:b5:3a:fe:c7:3e:eb:4a:
e3:ad:17:6f:21:79:35:5c:86:8f:d9:8e:f8:dc:12:1d:fb:e1:
ab:6f:8b:79:43:23:d5:c4:28:89:71:f0:ba:db:af:fa:ac:62:
69:a6:85:79:ae:a8:c4:39:de:1a:4a:b1:56:82:36:32:18:c4:
49:8a:6d:0f:99:50:6c:16:84:d5:1e:49:0c:1c:76:ab:9e:bc:
3e:e6:83:05:86:60:e3:27:31:da:4d:ab:0e:ad:27:a8:38:3f:
df:be:f3:52:4a:79:52:62:38:42:e4:7a:ff:af:a8:f8:9d:f6:
57:1f:ee:c6:ec:77:92:eb:ba:31:73:33:82:c9:c7:c3:6f:e9:
d1:f5:01:34:75:70:ae:8d:59:47:37:40:7e:46:37:f5:3c:2a:
bb:e7:44:65:08:0a:01:15:17:4a:e6:d6:c6:70:f2:a7:d1:c0:
99:1c:93:d4:94:ff:31:45:4c:e7:37:a0:41:d0:fa:26:1b:34:
0c:21:1e:d6:e6:11:83:54:ec:3c:61:ac:3d:d2:1d:01:7e:c6:
3d:97:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:07 2025 by rpki-client