Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa
File: 390757225E1511EFB04EDA1DC4F9AE02.roa (raw, json)
Hash identifier: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=
Subject key identifier: CD:A6:B5:4C:96:C8:98:54:60:92:5B:78:19:68:11:D0:4A:46:FE:0C
Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial: 03
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa
Signing time: Mon 19 Aug 2024 10:24:32 +0000
ROA not before: Mon 19 Aug 2024 10:24:32 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153166
IP address blocks: 160.25.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Validity
Not Before: Aug 19 10:24:32 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c31d5f-f972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:52:3b:53:bf:68:69:7d:c0:21:11:e0:fd:
db:a8:e8:ad:ac:31:ed:ec:57:52:29:fd:1e:d9:96:
d3:f9:0e:6b:40:e3:58:c3:c1:2d:9d:0b:5a:2e:c7:
28:f1:62:15:78:03:51:09:b5:db:96:53:ac:e6:50:
6d:e7:f2:e8:32:c8:15:a0:25:b5:9f:2f:31:9b:64:
cd:31:86:e2:c8:e3:00:3f:1f:25:1c:10:24:bd:06:
25:7c:18:71:c6:08:37:b5:4b:24:a5:d5:d9:8a:10:
1d:93:fd:3d:20:b8:43:12:cb:ad:fa:40:3f:c3:46:
21:03:2e:09:79:01:2c:f8:e1:f6:97:19:e2:1f:51:
cc:f5:8f:5d:e6:6a:c1:be:be:47:e1:98:70:7f:e1:
c6:ce:5d:e2:99:4d:6f:78:33:11:db:d1:f2:d2:d2:
67:9f:4b:54:76:1e:50:a3:87:3c:57:5c:90:a9:37:
d3:e6:6a:75:a9:ef:3a:0f:a4:bf:02:80:39:2b:52:
92:b5:73:d6:21:fe:b6:e9:79:3a:2f:70:f7:89:ad:
d1:5a:4f:bf:45:92:05:11:62:ed:90:cc:81:2b:b9:
1f:ab:eb:c4:89:55:ba:32:ab:06:7c:62:51:2a:c2:
87:77:2d:3d:b9:1a:a3:05:19:a5:02:82:9d:65:5d:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:B5:4C:96:C8:98:54:60:92:5B:78:19:68:11:D0:4A:46:FE:0C
X509v3 Authority Key Identifier:
keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.186.0/23
Signature Algorithm: sha256WithRSAEncryption
18:6c:7c:4a:06:40:52:75:b2:ee:3b:94:c6:10:b6:9c:98:88:
93:74:fb:a5:e0:2e:ea:57:d0:c2:5a:85:61:4b:a4:d8:65:20:
2d:3b:15:fa:84:3f:26:59:80:35:47:89:11:ef:65:6a:b5:2c:
86:56:3c:f9:db:58:b3:23:c3:20:c6:f7:83:59:9b:b2:b0:c1:
f2:6e:64:87:3e:8e:14:d7:83:f9:e0:ea:c7:e7:9b:69:cd:a3:
f8:8f:15:ab:5b:53:c5:fe:f9:ce:11:a7:b7:6b:44:d8:cf:ce:
0a:84:e9:eb:20:15:aa:55:b4:d4:17:7c:a0:1a:ab:b8:43:12:
b4:6c:c3:77:6d:5f:6e:40:3a:7e:4e:f6:c8:1d:3a:82:70:4d:
70:52:b3:ce:a2:70:c6:51:7a:8b:bf:cb:62:38:ac:75:41:92:
79:b6:fc:a1:03:76:ba:8d:46:fa:eb:d5:5f:8e:ac:b6:d9:7d:
d1:8a:27:32:38:ce:e1:1e:59:06:16:a6:75:f9:1a:43:bb:0c:
52:79:9e:aa:ba:9b:ca:f0:d2:67:fc:54:7c:3a:10:ee:70:a2:
7e:63:80:36:ac:9a:ed:63:dd:5a:f1:7f:fd:f5:6b:c4:3d:0e:
e0:4f:fb:a3:e4:33:2b:bc:0a:fc:68:b7:01:fc:87:ab:1d:b3:
81:a6:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:36 2025 by rpki-client