Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa
File: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (raw, json)
Hash identifier: NJttL+qjjIMKQduatRuB9wCf9GQJviKk9JlU07XKUgE=
Subject key identifier: 76:80:2A:F0:34:66:7E:0C:7B:17:44:3F:E0:BC:88:A9:81:AC:D5:22
Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial: 0D
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa
Signing time: Fri 03 Jan 2025 01:03:36 +0000
ROA not before: Fri 03 Jan 2025 01:03:36 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 210000
IP address blocks: 160.250.164.0/24 maxlen: 24
160.250.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Validity
Not Before: Jan 3 01:03:36 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67773768-6d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:9a:d9:fc:7d:78:f0:db:39:e9:5e:d4:f7:
8b:39:f7:04:75:03:8c:10:5a:c8:f9:6b:4a:34:65:
f4:7c:62:13:0a:47:02:cb:06:87:64:12:21:9c:0c:
51:37:78:fd:af:48:a4:ac:1a:8f:dd:46:64:d9:7c:
d1:6a:7b:7c:47:ab:d6:32:57:dc:00:fd:a6:ad:f2:
7a:6b:0b:d5:36:20:f8:de:ee:30:20:64:f1:1e:1c:
7b:30:4f:c3:a4:94:bf:ee:5b:fb:dd:76:28:c7:87:
68:9c:83:4a:d8:61:3d:79:53:de:4a:ac:8e:40:4a:
7f:8a:9d:f1:7b:14:18:e7:10:26:84:9d:21:46:cf:
c9:74:32:25:61:e6:63:c5:dc:5f:01:f2:d1:bc:3a:
1a:c8:40:57:da:1b:17:41:ea:b6:d5:37:5e:b8:a5:
4e:a5:a7:d4:c9:54:c8:91:69:5a:bb:14:a3:a1:ac:
cd:fd:13:f4:e5:b6:26:25:da:30:8e:d1:22:21:a7:
f5:16:a9:26:90:aa:d9:0f:b7:de:58:b2:f9:64:1e:
a6:57:68:15:13:b2:7f:2d:b3:25:8c:64:b4:7e:2c:
21:37:fb:2f:1c:20:6b:51:ef:98:3f:38:7a:7c:26:
b9:9b:f2:d3:8b:e8:6b:9b:a5:f3:29:af:1e:2f:98:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:80:2A:F0:34:66:7E:0C:7B:17:44:3F:E0:BC:88:A9:81:AC:D5:22
X509v3 Authority Key Identifier:
keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.164.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:2e:71:19:25:82:d4:64:28:79:9e:93:07:9a:43:48:53:ea:
98:4b:58:c0:e5:77:89:ff:6d:74:37:9f:d6:d8:4b:c4:1b:e7:
f0:dc:fe:e1:1d:71:77:fd:54:54:a7:bf:21:6a:3c:8c:fb:6a:
16:ce:6d:d5:99:df:90:fe:25:5e:c2:50:05:14:ff:27:0d:d7:
94:13:bf:32:68:f4:45:34:ce:80:51:e0:c3:37:57:3b:86:39:
ef:de:0d:53:1d:fa:f0:b3:dc:b4:50:e6:c8:c7:c4:33:c3:a7:
6c:24:9e:66:ab:be:b2:ef:d6:f5:e8:d1:67:03:78:c5:54:db:
1f:cc:59:16:35:50:ab:a9:41:29:b5:4c:f2:6a:f1:b1:2e:3e:
8b:a4:b9:9f:29:c3:49:11:48:b5:2e:32:58:8b:a1:c5:ce:78:
91:87:44:00:f2:29:17:38:30:c3:72:08:96:23:39:5e:4e:fe:
3b:82:05:ac:9d:d0:9e:ce:0b:80:f6:67:ae:df:9e:ff:43:a9:
7c:f5:2a:fe:c6:15:07:a5:80:5f:cd:26:94:6a:4c:98:41:ab:
d7:a8:4b:c8:90:6b:17:05:16:5d:cd:ce:ec:d9:b9:d5:76:92:
e1:38:11:52:92:62:29:a0:23:c9:3b:42:81:1d:90:92:45:a7:
ee:a0:b1:5d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODM3QjExMC8GA1UEBRMoRkEyMjgwMUM1MkFFMkE1RkM0OTFCN0NCRUJFNjhFRkNB
MkM4RDFEOTAeFw0yNTAxMDMwMTAzMzZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NzczNzY4LTZkNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaTprZ/H148Ns56V7U94s59wR1A4wQWsj5a0o0ZfR8YhMKRwLLBodkEiGcDFE3
eP2vSKSsGo/dRmTZfNFqe3xHq9YyV9wA/aat8nprC9U2IPje7jAgZPEeHHswT8Ok
lL/uW/vddijHh2icg0rYYT15U95KrI5ASn+KnfF7FBjnECaEnSFGz8l0MiVh5mPF
3F8B8tG8OhrIQFfaGxdB6rbVN164pU6lp9TJVMiRaVq7FKOhrM39E/TltiYl2jCO
0SIhp/UWqSaQqtkPt95YsvlkHqZXaBUTsn8tsyWMZLR+LCE3+y8cIGtR75g/OHp8
Jrmb8tOL6GubpfMprx4vmHEVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUdoAq8DRm
fgx7F0Q/4LyIqYGs1SIwHwYDVR0jBBgwFoAU+iKAHFKuKl/EkbfL6+aO/KLI0dkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzE1OEQ3RjNDQjk5
QzExRUY5NjM4Rjc2OUM0RjlBRTAyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBk
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvLWlLQUhGS3VLbF9Fa2JmTDYtYU9fS0xJMGRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi84RjdERkU2NkM5
NkUxMUVGOThCNjRFMTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaD6pDANBgkqhkiG9w0BAQsFAAOCAQEACy5xGSWC1GQoeZ6T
B5pDSFPqmEtYwOV3if9tdDef1thLxBvn8Nz+4R1xd/1UVKe/IWo8jPtqFs5t1Znf
kP4lXsJQBRT/Jw3XlBO/Mmj0RTTOgFHgwzdXO4Y5794NUx368LPctFDmyMfEM8On
bCSeZqu+su/W9ejRZwN4xVTbH8xZFjVQq6lBKbVM8mrxsS4+i6S5nynDSRFItS4y
WIuhxc54kYdEAPIpFzgww3IIliM5Xk7+O4IFrJ3Qns4LgPZnrt+e/0OpfPUq/sYV
B6WAX80mlGpMmEGr16hLyJBrFwUWXc3O7Nm51XaS4TgRUpJiKaAjyTtCgR2QkkWn
7qCxXQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:45:45 2025 by rpki-client