Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4AE33318C91C11EFB0DEB92DC4F9AE02.roa
File: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (raw, json)
Hash identifier: 9Q/tteud3DuvscEvzqYV7r9RWkqNNKKaoADiMf9YW7M=
Subject key identifier: 2B:DA:D4:75:2B:05:F4:E6:32:0D:45:E8:B8:37:7C:C0:79:6A:06:E3
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 08
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4AE33318C91C11EFB0DEB92DC4F9AE02.roa
Signing time: Sat 04 Jan 2025 13:23:53 +0000
ROA not before: Sat 04 Jan 2025 13:23:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17557
IP address blocks: 119.160.214.0/24 maxlen: 24
119.160.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Jan 4 13:23:53 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67793669-e84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:67:d2:12:c1:ab:68:8e:c3:a6:05:09:e3:6e:
d0:5e:f0:19:ec:8f:61:5a:3f:fd:21:26:83:a6:d2:
85:6a:f3:2f:e6:db:e2:3d:c9:39:0e:9c:3c:6d:99:
59:a7:25:2d:9e:07:93:c1:6e:82:ca:0c:f1:7e:33:
8b:6e:b9:19:36:6f:42:63:51:55:dc:39:57:ca:ff:
0e:a1:b9:a8:d5:fc:fa:ad:cb:26:d8:90:26:37:c0:
c8:be:e3:61:ea:19:a3:cc:a1:c4:1e:78:33:1d:c7:
a1:80:b2:e0:27:b3:a0:02:13:96:fb:22:41:83:61:
1d:3d:f1:2c:32:1b:0d:c3:49:4f:ef:d5:25:60:e0:
9f:37:91:4e:88:cb:75:79:10:bc:cf:d3:bc:05:ff:
98:65:77:62:57:2e:dc:0f:89:51:8e:01:f8:67:e4:
14:e9:ff:90:8d:e6:65:49:fb:38:8f:bd:db:72:67:
9c:38:b9:1c:ef:4e:5c:b7:cd:9b:3e:52:e1:46:c9:
c4:46:df:d0:c8:03:b9:c7:f8:e6:53:22:15:50:46:
a7:31:44:f6:3a:6d:e8:f1:ca:f5:a0:49:3a:27:d5:
a7:f3:b5:10:ec:e8:e5:e9:c5:35:93:96:aa:0f:af:
5e:44:f8:93:00:3a:a5:cf:b2:78:47:9f:78:de:4c:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:D4:75:2B:05:F4:E6:32:0D:45:E8:B8:37:7C:C0:79:6A:06:E3
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4AE33318C91C11EFB0DEB92DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.160.214.0/23
Signature Algorithm: sha256WithRSAEncryption
23:54:d5:49:3b:3c:d0:25:df:da:81:1c:d4:ba:e6:2f:6f:bf:
b9:0e:9d:c1:88:21:46:3d:75:5f:c0:e9:15:06:50:d3:89:62:
7e:d4:53:ec:32:e7:c0:67:b4:f2:22:e7:d7:99:a3:e9:aa:27:
28:85:36:e8:83:fa:41:eb:5a:b2:0b:41:d6:10:35:cb:e5:9f:
c2:57:5b:a4:dc:1b:cc:01:27:7d:85:7e:ed:03:ce:52:0e:fd:
e7:4e:90:05:3b:c2:95:2c:11:46:36:fc:31:e9:41:0e:c1:88:
75:16:a4:2f:d1:ea:e0:03:5a:f9:9d:54:e8:8f:5e:1a:df:ae:
62:23:85:38:89:02:d0:fe:41:20:e4:6e:1c:a4:7e:9c:e6:7e:
a7:cf:7c:ea:1c:11:08:fc:5a:b2:14:25:28:dd:e4:dc:48:6f:
07:12:1b:b1:86:55:19:d8:56:6d:06:d9:d2:58:5d:b6:ac:5a:
36:0e:60:e3:1b:33:70:0a:c3:10:2d:a9:d8:77:50:95:74:2d:
03:e2:fe:d0:71:68:e8:97:c7:7e:09:2a:4f:c7:1b:72:08:98:
8a:50:31:ac:9e:8a:48:e4:44:a7:6a:ff:b1:1f:c1:14:0a:a7:
be:88:36:b1:11:8d:10:c7:d0:72:4f:74:49:b4:e5:2d:97:11:
3b:94:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:50 2025 by rpki-client