Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa
File: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (raw, json)
Hash identifier: nEx36xMYEspoRTHpBzsjyglWKve6HGzaUV9gJlWDtWQ=
Subject key identifier: DB:09:B9:34:A6:DC:28:A5:D9:4A:94:24:27:A6:8F:53:23:C2:C7:C8
Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Certificate serial: 22
Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa
Signing time: Tue 06 Aug 2024 16:12:43 +0000
ROA not before: Tue 06 Aug 2024 16:12:43 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 38887
IP address blocks: 160.22.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Validity
Not Before: Aug 6 16:12:43 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b24b7b-54d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:47:07:6e:46:ad:b3:70:f8:c7:ef:f2:c4:
75:e3:59:e1:af:a4:a8:8b:10:af:5a:64:bd:bf:df:
30:f2:98:e7:9e:d9:87:95:de:ee:4d:20:14:88:39:
97:7c:bd:7f:f9:80:40:64:20:5a:6b:e5:06:e8:7d:
13:c9:70:5b:f5:b1:89:ec:fa:d0:30:e9:c0:64:91:
30:8c:39:6d:cd:28:48:75:c2:44:f4:e2:53:b4:82:
d9:dc:40:3b:47:c6:1a:3e:24:45:df:1f:fd:15:38:
0f:68:43:07:18:b8:f3:ab:2b:4c:7b:9d:c8:c3:51:
73:dd:83:5b:fe:3f:d2:5b:ac:d7:f9:37:b6:12:54:
c3:b6:40:b1:95:c4:9d:0f:d9:61:5d:fb:40:50:b8:
b2:d4:43:db:f4:03:72:e0:1d:89:14:18:f4:c9:6b:
4b:1c:5a:fe:f6:08:16:68:e5:25:b1:44:ce:6a:e2:
90:dd:a4:92:de:9f:3f:53:14:64:8c:dc:1b:76:e8:
dc:5e:f4:ee:bf:a7:0a:86:78:07:ac:cd:05:75:79:
cb:1f:81:ff:4d:a4:6b:c6:12:f9:74:30:f9:5c:8b:
a5:a2:f9:ae:4b:3d:a7:8d:c8:f4:c0:a0:d7:3e:18:
f4:09:02:1a:cc:5a:d4:d7:42:76:b0:cf:5f:d7:e8:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:09:B9:34:A6:DC:28:A5:D9:4A:94:24:27:A6:8F:53:23:C2:C7:C8
X509v3 Authority Key Identifier:
keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.154.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5b:11:42:19:e5:27:49:e7:a2:3f:d0:34:f9:4c:d9:15:58:
92:c7:96:d2:53:ba:15:41:8d:4d:89:43:21:58:41:9b:2b:f4:
9a:27:c8:36:3b:0d:7b:cc:18:41:b4:f0:80:fd:ce:4a:9b:c6:
fc:c8:dd:9c:5e:5b:55:52:43:b3:40:52:b3:3c:90:98:19:5b:
ba:6c:5d:ba:e1:53:e1:8d:cd:f8:06:e5:9b:bc:bd:48:c1:4e:
30:4a:1c:cb:4b:6a:15:af:08:09:21:f2:e1:2b:b6:a0:19:61:
53:1c:e0:d9:96:cb:59:dc:17:91:c3:01:74:d7:79:52:02:32:
95:a6:70:7b:50:07:bb:f9:00:10:1a:ce:2f:17:bb:f1:c0:05:
a8:37:d3:c3:1c:c9:2a:51:91:1b:23:37:d0:34:b2:f0:23:7a:
ab:8e:2d:9e:d0:d2:6c:07:8a:2e:b2:5d:3b:a9:25:94:2a:bf:
98:0c:a3:2a:a2:29:eb:3d:20:03:25:1a:cb:c9:e1:2c:96:f2:
14:a7:50:5e:b0:ac:51:ee:76:33:68:08:3e:4e:11:4d:a0:b3:
2a:79:ab:e8:2c:f4:94:57:0f:d7:bc:a6:ce:ec:a3:15:2d:5e:
a4:f7:66:39:55:0a:3e:4a:6b:e3:fd:a2:1e:60:f1:00:a5:ba:
34:25:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:59 2025 by rpki-client