Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa
File: E7695EC6A53411EFB98AFE51C4F9AE02.roa (raw, json)
Hash identifier: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=
Subject key identifier: 41:9E:69:7B:66:16:07:CD:B9:31:32:F2:55:AA:F6:31:52:2E:78:BE
Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Certificate serial: 03
Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa
Signing time: Sun 17 Nov 2024 22:40:11 +0000
ROA not before: Sun 17 Nov 2024 22:40:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132238
IP address blocks: 160.191.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Validity
Not Before: Nov 17 22:40:11 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=673a70cb-6897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:6c:94:f3:ef:0c:f1:cb:43:1f:6c:67:16:
4b:0e:9f:5d:25:9a:90:f4:2e:f4:e9:cc:20:1f:4b:
67:4d:a9:bb:9c:2d:d5:20:11:bb:1b:57:d7:5e:25:
4a:f0:d5:8b:ee:ae:72:eb:aa:c8:b0:71:88:73:73:
3d:05:87:0c:88:f3:1e:7d:41:bf:57:a4:12:96:80:
7e:13:cd:ea:6b:f2:e0:d5:8b:19:3e:d0:3f:89:9a:
b5:ed:61:78:cb:dc:2c:57:85:7a:82:39:42:b2:86:
da:23:85:1a:71:39:50:eb:2a:98:fc:dd:a1:d0:4a:
e9:8b:2e:16:dd:b5:ee:50:e8:fb:20:96:ce:6c:7f:
b5:2d:6c:fb:07:77:9c:2d:58:db:fd:d5:73:89:80:
da:76:12:bf:9e:29:e4:77:f1:75:45:1a:4e:58:ed:
01:10:c5:db:a4:b3:90:9a:df:a2:09:07:66:cf:dc:
96:f9:ad:eb:e5:ba:e8:a4:16:9b:9a:9d:3d:05:41:
58:a0:8b:f5:7a:81:bb:bf:db:0c:24:65:45:93:6c:
d8:11:44:48:24:f5:a4:21:09:63:ff:c9:43:e7:94:
e1:1a:ac:af:18:0c:9d:db:24:f1:80:3a:1c:79:49:
bd:59:c5:90:2d:a7:16:8b:4e:52:a8:ff:b4:e8:b1:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:69:7B:66:16:07:CD:B9:31:32:F2:55:AA:F6:31:52:2E:78:BE
X509v3 Authority Key Identifier:
keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.247.0/24
Signature Algorithm: sha256WithRSAEncryption
35:30:47:7e:83:bb:fc:e9:82:37:e2:3b:1d:3d:cc:90:9c:4b:
54:94:f7:04:96:99:22:49:1a:d0:e5:3f:ee:41:20:0f:8d:0b:
1c:f8:b4:68:0d:8e:0b:b4:b6:d8:82:8d:de:9c:6c:85:c9:48:
16:8f:0a:ae:3b:61:61:bc:ca:cc:40:cf:cf:0d:68:c9:e3:94:
a0:d1:08:2f:2c:a9:db:b4:fe:74:79:d4:55:88:dc:e4:83:25:
41:46:28:18:62:36:70:1a:40:75:16:4c:36:e1:e6:ab:ab:65:
61:a3:2c:af:b9:42:45:01:6c:e1:68:18:78:3b:e3:c9:04:b3:
fa:2f:c6:76:f3:29:b5:77:a4:7d:bc:13:2d:89:a7:5c:c7:2e:
86:49:34:f8:53:d6:69:2d:98:06:6e:82:5c:66:95:4f:35:ad:
54:c5:26:37:28:0b:9c:e4:a1:c8:f2:05:4a:de:95:ac:f0:98:
4b:09:1c:a1:92:57:36:38:eb:d9:b7:57:05:6c:14:2f:fc:37:
8b:dd:3d:3a:b6:5f:ea:1f:dd:9c:1e:e6:f1:34:ce:c8:7c:56:
2e:a2:10:a9:3b:3f:48:94:92:59:55:18:d8:6e:6e:23:9c:fe:
0a:bd:e6:5f:37:ec:ce:13:ee:12:7e:70:65:ed:ae:8c:84:cf:
d9:45:5f:fd
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
REVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkNDQUFGNTc4NTE5
NEVGODFBMDAeFw0yNDExMTcyMjQwMTFaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3M2E3MGNiLTY4OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkA2yU8+8M8ctDH2xnFksOn10lmpD0LvTpzCAfS2dNqbucLdUgEbsbV9deJUrw
1YvurnLrqsiwcYhzcz0FhwyI8x59Qb9XpBKWgH4Tzepr8uDVixk+0D+JmrXtYXjL
3CxXhXqCOUKyhtojhRpxOVDrKpj83aHQSumLLhbdte5Q6Psgls5sf7UtbPsHd5wt
WNv91XOJgNp2Er+eKeR38XVFGk5Y7QEQxduks5Ca36IJB2bP3Jb5revluuikFpua
nT0FQVigi/V6gbu/2wwkZUWTbNgRREgk9aQhCWP/yUPnlOEarK8YDJ3bJPGAOhx5
Sb1ZxZAtpxaLTlKo/7TosQjPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQZ5pe2YW
B825MTLyVar2MVIueL4wHwYDVR0jBBgwFoAUqCkvYgTIIT15H6bMqvV4UZTvgaAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzExNjRDQUUwQTUx
NjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdh
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcUNrdllnVElJVDE1SDZiTXF2VjRVWlR2Z2FBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REVGRS8xMTY0Q0FFMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9FNzY5NUVDNkE1
MzQxMUVGQjk4QUZFNTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKC/9zANBgkqhkiG9w0BAQsFAAOCAQEANTBHfoO7/OmCN+I7
HT3MkJxLVJT3BJaZIkka0OU/7kEgD40LHPi0aA2OC7S22IKN3pxshclIFo8Krjth
YbzKzEDPzw1oyeOUoNEILyyp27T+dHnUVYjc5IMlQUYoGGI2cBpAdRZMNuHmq6tl
YaMsr7lCRQFs4WgYeDvjyQSz+i/GdvMptXekfbwTLYmnXMcuhkk0+FPWaS2YBm6C
XGaVTzWtVMUmNygLnOShyPIFSt6VrPCYSwkcoZJXNjjr2bdXBWwUL/w3i909OrZf
6h/dnB7m8TTOyHxWLqIQqTs/SJSSWVUY2G5uI5z+Cr3mXzfszhPuEn5wZe2ujITP
2UVf/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:57:05 2025 by rpki-client