Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
File: E36214403D0011EFAD623342C4F9AE02.roa (raw, json)
Hash identifier: 420VAJueRLeEIyuOExcHcsg4aUQyw3PTMA6zp5xTQ8U=
Subject key identifier: BE:3F:2F:26:1F:5A:FA:61:90:C9:EC:3C:09:39:82:EC:46:84:61:55
Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial: 09
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
Signing time: Tue 16 Jul 2024 08:07:16 +0000
ROA not before: Tue 16 Jul 2024 08:07:16 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 152919
IP address blocks: 160.22.184.0/23 maxlen: 23
160.22.184.0/24 maxlen: 24
160.22.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Validity
Not Before: Jul 16 08:07:16 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66962a34-62fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:12:ff:da:b1:f6:8e:a1:ec:93:11:7f:23:
b7:25:5e:d8:18:e0:9c:15:c8:2a:7d:50:89:54:07:
1b:7b:84:cf:c5:34:c7:4c:16:bf:03:26:64:e6:f8:
36:d9:b4:22:68:e8:86:0b:ad:ee:c2:83:e8:a0:de:
a3:90:7d:b4:40:12:50:83:f5:19:d3:d4:f7:81:9e:
1a:4d:20:ca:30:75:b7:fe:a1:0f:b6:75:2c:f7:98:
dc:70:85:e6:f1:dd:5f:b8:3d:27:ae:72:fe:ce:67:
dd:40:77:60:3f:74:2b:d6:25:18:96:b8:21:4d:df:
ce:b1:94:99:4c:c8:ab:c7:67:aa:ea:11:c7:0c:e0:
6b:71:f4:2c:7d:0d:93:86:e3:da:da:29:4b:14:59:
2f:51:b5:8b:e4:1f:a1:b4:ec:f0:38:15:36:5d:1e:
29:d7:a7:80:ec:89:55:11:3f:8a:8a:ad:ea:40:4a:
1e:ae:b3:e5:22:0f:89:a4:d5:e4:71:de:cb:4e:f9:
bf:03:14:2a:7e:4c:48:f4:e2:c2:16:55:d8:29:3d:
9f:a7:f0:29:18:fd:be:92:e2:c0:91:cb:01:fa:d5:
50:9d:1b:9d:2c:0f:c7:2a:53:7e:08:2a:a3:31:0d:
62:0a:51:84:cb:af:13:60:cd:df:7e:58:20:3c:25:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:2F:26:1F:5A:FA:61:90:C9:EC:3C:09:39:82:EC:46:84:61:55
X509v3 Authority Key Identifier:
keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.184.0/23
Signature Algorithm: sha256WithRSAEncryption
39:de:93:06:f0:f4:de:c2:4b:3f:82:c9:5b:ee:32:50:e8:0f:
84:75:d4:02:d2:2c:7e:93:6f:e2:5b:e4:6f:86:7e:22:e5:52:
c7:c5:7c:47:90:81:d8:5a:9b:33:44:dd:04:ce:d7:97:95:d1:
52:68:15:9f:98:29:f2:b3:45:60:6f:ef:8f:45:1a:9d:52:eb:
cf:49:a4:9d:ea:31:d7:78:7c:5a:f1:2a:33:bc:09:1d:27:80:
34:b4:48:85:c1:7c:25:04:ba:62:ab:16:e8:7e:43:18:cf:a4:
56:ff:8d:6f:37:6f:21:b7:f8:79:4d:00:2d:a5:7e:66:2a:6d:
c3:20:fb:c7:95:66:94:61:7e:25:67:39:9d:ce:3d:30:e4:a5:
db:c0:cb:51:55:79:52:96:89:7a:85:d5:7b:02:7e:db:bf:46:
b7:d0:56:c6:63:0a:55:8c:18:91:6b:82:72:dd:b2:df:82:22:
b4:db:0b:83:fe:d9:90:59:6d:7f:6e:20:a3:13:e8:27:b1:ba:
3e:02:b8:32:ca:81:44:66:08:a5:46:75:b0:ad:ac:9b:17:80:
c8:55:ce:d6:d6:cd:0e:b0:e3:41:77:ee:2b:ed:bb:11:5e:07:
0e:31:6b:5b:02:0d:44:7e:c0:3f:ee:89:96:4c:7c:4c:9e:4a:
17:3e:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:05 2025 by rpki-client