Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
File: A2516E42DE4511EF8C37E320C4F9AE02.roa (raw, json)
Hash identifier: hGl1Jdq6ILlJZqMuHMt/RUb16PguE9DNMzDeEt3UsJk=
Subject key identifier: 4E:46:63:E0:37:C1:06:4A:75:46:DD:4A:87:F1:16:F4:EB:02:71:4A
Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial: F1
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
Signing time: Wed 29 Jan 2025 13:33:33 +0000
ROA not before: Wed 29 Jan 2025 13:33:33 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152462
IP address blocks: 157.15.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Validity
Not Before: Jan 29 13:33:33 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=679a2e2d-97ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:87:a2:87:a2:83:4d:2c:34:a2:fc:6c:33:
ec:f5:c7:ba:25:84:49:f9:2e:84:3a:36:17:45:32:
b2:51:48:31:f9:98:53:7e:df:0a:6e:e1:be:68:75:
1a:8a:59:cc:92:2d:dc:c4:ab:9e:8b:9f:f4:65:72:
9b:78:42:fc:35:8f:34:c4:26:e3:8c:be:40:39:43:
e1:b3:c8:d2:19:9f:89:bd:63:ed:5a:e0:a8:41:d4:
f2:9c:e0:32:1d:af:3d:d7:85:b1:e5:21:9c:75:cf:
9d:5d:01:e2:87:dc:02:7b:45:e4:19:d4:27:bd:a7:
c2:14:ea:31:b3:9d:dc:91:f8:84:a3:37:c9:07:2e:
aa:e2:a4:8e:36:47:41:ec:98:99:20:c5:8c:48:a1:
a1:dc:b7:63:30:17:b9:38:e9:2b:2b:5d:e9:5d:bf:
13:9b:18:17:c2:a5:27:9b:97:92:77:74:f6:c2:dc:
01:d3:d7:13:c0:57:ab:0f:16:31:94:f7:7b:4b:54:
cd:28:24:7c:5e:e7:ab:f9:ed:22:7a:8b:c3:a5:e9:
dc:c9:5e:84:78:4a:5d:dd:bb:97:d6:c8:fe:ad:1c:
a9:4f:fd:ca:9f:a7:70:c6:98:a4:cb:36:a1:95:8c:
96:8c:75:bf:85:cd:ae:41:46:47:20:dc:3c:25:3b:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:46:63:E0:37:C1:06:4A:75:46:DD:4A:87:F1:16:F4:EB:02:71:4A
X509v3 Authority Key Identifier:
keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.134.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d3:25:76:7f:85:43:8d:b5:68:c8:bc:95:e1:0e:5d:93:da:
de:e7:5e:47:d2:f5:89:ed:8e:11:ec:74:3e:23:86:bf:45:d2:
b6:db:cf:fe:29:86:d0:60:0f:20:16:2a:28:8b:d3:6f:fd:02:
50:96:ef:35:45:15:63:d7:57:d9:1b:0f:f1:2e:f9:6a:0a:49:
2a:c6:57:61:f8:4f:8e:ab:f9:e5:60:ba:9b:37:e8:cf:b2:23:
39:3e:f5:2e:fc:6e:dd:ba:40:2f:82:49:56:75:3c:de:b3:f4:
dd:0d:f3:a4:30:a6:48:62:21:97:bf:15:22:3f:3f:c7:b0:e8:
b2:64:50:eb:c6:14:c2:fb:11:93:44:5c:1b:49:68:43:df:cb:
3d:fa:21:d2:2b:5c:78:12:8e:7e:11:94:44:67:35:d9:06:bb:
ff:3f:df:63:b7:e4:d9:e2:89:9a:ef:0b:05:b4:2a:a0:6b:b1:
43:24:2b:e3:60:09:55:b2:da:6a:61:b0:72:76:56:54:30:3f:
cf:7b:96:ad:2d:0b:3d:d4:2f:98:38:6a:19:e9:bb:ff:73:36:
32:41:11:a5:2c:f3:b1:6a:d8:f0:0d:51:91:95:ea:11:91:f6:
0a:a5:33:7c:a8:a9:3a:10:2e:83:67:7d:1b:e3:22:30:2d:e3:
fa:46:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:11 2025 by rpki-client