Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
File: F305F43270E711EF8573CF71C4F9AE02.roa (raw, json)
Hash identifier: aci5Spv/e6z609EwzRrCe3VebaHTH23V/kyd6t5TMtw=
Subject key identifier: A7:D6:74:59:96:32:6A:D7:D6:2A:D5:BF:F1:97:FD:2A:CA:B2:56:4C
Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Certificate serial: 02
Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
Signing time: Thu 12 Sep 2024 09:18:19 +0000
ROA not before: Thu 12 Sep 2024 09:18:19 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133453
IP address blocks: 160.187.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Validity
Not Before: Sep 12 09:18:19 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=66e2b1db-fc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:78:95:0c:46:3c:f6:b9:d1:27:fa:60:28:
9a:e8:81:89:00:f4:79:13:ff:e9:57:0f:01:08:14:
3f:c8:73:22:96:4a:f9:de:59:80:f0:9e:4d:d1:c3:
d8:e8:8e:66:3f:11:e4:00:53:f7:a8:17:50:88:35:
50:c4:a8:3e:f0:fd:dd:af:9b:99:1b:fe:93:e6:c8:
f2:b6:a9:53:cf:4d:05:9c:2c:2e:a8:10:53:5d:1f:
c1:78:cd:d2:7d:51:19:7c:b6:54:43:01:3d:88:5d:
d4:80:f5:fc:d2:28:f0:bd:62:63:c5:98:a7:55:52:
20:84:79:e0:ff:45:be:3d:33:48:24:60:d0:be:85:
9a:52:fd:6b:f1:90:4c:9c:ee:a9:6b:bd:df:4b:bc:
fb:d6:ae:3e:bb:a1:0d:87:94:8b:dd:fc:5e:ac:74:
81:a5:6b:b6:14:b4:7e:5f:42:b0:7a:af:e0:f7:5f:
32:99:09:37:f8:ca:43:6d:1d:c3:d8:24:b6:b1:1b:
e0:7d:ed:60:fa:8d:54:04:dc:27:5f:5f:e6:c1:12:
18:44:58:e1:89:f5:06:37:3b:cb:32:03:b4:ce:c0:
84:83:d8:a6:e4:0d:56:70:ce:90:24:1e:ae:56:79:
7d:e1:a8:69:fd:87:02:a4:83:99:8e:b6:13:97:0a:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:74:59:96:32:6A:D7:D6:2A:D5:BF:F1:97:FD:2A:CA:B2:56:4C
X509v3 Authority Key Identifier:
keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.40.0/23
Signature Algorithm: sha256WithRSAEncryption
16:43:41:78:39:53:48:b7:e1:f5:ac:88:e8:2e:13:93:63:c3:
26:fd:4c:35:69:2f:81:1c:53:b4:59:a7:c3:60:7a:10:1c:72:
be:2a:1e:7c:52:a6:aa:0a:d1:55:9d:2b:ba:2d:12:33:8d:b7:
21:fd:af:35:be:6c:ef:68:b4:67:fd:c2:5e:17:e5:dd:fa:88:
2c:07:a4:9c:8e:78:5d:34:e8:5d:9c:ee:c1:c2:4a:19:81:6f:
70:91:22:c3:da:99:37:1b:df:b6:ae:e2:62:44:79:b7:c0:07:
f2:0d:38:fa:69:ed:79:e1:43:38:99:4d:73:d5:0d:76:34:30:
38:b3:0b:2c:4c:68:e9:bd:1e:80:ac:26:f6:2d:d3:f0:e2:d8:
69:34:20:d0:e5:dd:1c:14:b9:3e:3a:c9:25:bb:b3:90:d8:3c:
70:57:42:09:01:1c:f1:5a:98:b7:ef:09:19:c1:0c:a3:84:d7:
79:b6:51:3a:73:bc:a7:a8:8d:7f:79:1f:a7:61:eb:73:8e:e2:
08:ca:d8:40:1a:c4:3c:bd:e6:fe:36:94:34:82:d8:d0:de:d3:
30:2b:c4:9d:75:a1:ff:ed:80:14:f4:65:1c:28:31:e0:f5:8d:
b1:f4:db:39:b9:61:fb:d9:e7:0c:42:2f:e2:2c:18:43:2d:75:
1e:05:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:11 2025 by rpki-client