Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa
File: 3446813047DC11EFA05E932EC4F9AE02.roa (raw, json)
Hash identifier: zLr4joEY+P4VPtuV8/aIjLwuAD3fE/qCh+JRJT72wJE=
Subject key identifier: 50:1E:8F:6B:90:D5:73:1F:A1:18:06:F5:7F:41:29:FE:EA:C6:7E:EC
Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial: 5C
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa
Signing time: Thu 09 Jan 2025 05:50:06 +0000
ROA not before: Thu 09 Jan 2025 05:50:06 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152317
IP address blocks: 157.10.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Validity
Not Before: Jan 9 05:50:06 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677f638e-aefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:05:4c:1c:bf:a1:ee:de:a4:07:e4:81:11:
ca:87:1a:97:34:a5:0a:69:d1:6c:d9:9b:95:1c:b5:
b8:55:af:db:7d:5c:bb:df:11:4d:fe:a2:74:c0:db:
16:82:7e:e2:01:1c:23:b8:4c:57:9a:73:18:7b:21:
ae:f8:91:e0:6a:35:64:6b:5b:df:46:8e:6a:b6:58:
6c:91:0d:ee:aa:92:d6:df:22:ce:c5:bb:58:3f:5d:
85:e8:bd:d5:cb:98:56:bb:b3:58:fe:5d:4e:08:f4:
9c:1f:b9:a9:c1:40:c9:51:2a:72:95:80:28:7b:fe:
53:55:56:b6:e4:c8:d7:29:3f:b2:59:f3:5a:81:f2:
75:ce:96:77:26:87:6f:4d:28:18:d1:e1:83:59:d0:
fd:60:21:34:89:33:70:44:f8:4b:b0:c3:21:65:36:
c9:d9:f1:fc:39:11:fe:be:5b:01:ec:b9:75:8c:67:
5e:40:8d:de:d4:d6:2a:dd:ef:3f:22:89:b7:20:3b:
1f:a2:66:6c:ed:37:70:18:1b:ed:cb:d5:e5:0d:15:
48:e9:06:64:ac:1f:c4:70:4f:0c:90:93:a9:95:a7:
36:c2:41:ae:4a:8a:89:fa:70:57:7b:0d:4e:0f:cf:
16:e9:09:81:f4:0b:d3:10:6a:ee:a3:d8:53:de:70:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:8F:6B:90:D5:73:1F:A1:18:06:F5:7F:41:29:FE:EA:C6:7E:EC
X509v3 Authority Key Identifier:
keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:5c:21:2e:15:44:de:b5:96:6f:d0:1e:45:9e:b9:ec:7f:b9:
1c:45:64:4e:1b:9a:1d:0b:a7:56:85:0a:2d:56:b5:55:01:50:
dd:29:4b:42:23:39:c2:b5:73:80:01:c8:eb:b6:61:69:2b:07:
14:62:3c:e8:a2:5c:d6:19:21:6f:92:6a:4e:c2:5e:f5:c2:4c:
3a:cb:8e:00:45:49:48:58:57:7b:09:9f:b3:5c:63:da:5b:c7:
35:1c:56:41:74:5a:b7:de:f7:24:52:74:92:94:a4:c6:55:7c:
f1:cf:12:ad:c0:6f:86:21:0c:de:f9:07:d5:40:b2:ed:e4:35:
b0:be:c8:70:f2:36:32:f8:ef:56:27:8b:11:6c:38:dd:aa:c1:
a9:19:ef:38:49:2f:99:eb:49:fb:9d:67:51:7f:e0:3d:76:4d:
2b:ca:c6:c6:16:da:b7:67:2a:f6:07:02:fc:f4:9c:34:26:81:
fd:6f:42:34:7c:65:ed:a7:b0:22:bc:f4:79:74:c0:ee:42:5d:
47:23:10:cf:ca:21:3e:69:25:50:f4:9d:3e:12:57:d7:60:50:
6e:ab:24:60:ee:9b:6f:f9:0d:42:1f:7a:0f:8e:48:a5:c5:d3:
c2:34:27:df:0d:70:90:24:8c:cf:c1:e5:b3:5b:8d:fe:23:98:
2c:aa:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:33:59 2025 by rpki-client