Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F69B82EAE3E11EF9289306CC4F9AE02.roa
File: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (raw, json)
Hash identifier: bwbNVEEQ7hFvkRd/k4mBE7/nAYExkKEvB+iEu0LX0Pg=
Subject key identifier: 36:B4:E0:82:F1:4E:35:84:41:F2:FC:0C:16:D4:D5:EE:19:38:79:DB
Certificate issuer: /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial: 03
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F69B82EAE3E11EF9289306CC4F9AE02.roa
Signing time: Fri 29 Nov 2024 10:42:26 +0000
ROA not before: Fri 29 Nov 2024 10:42:26 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 17557
IP address blocks: 160.250.114.0/24 maxlen: 24
160.250.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A
Validity
Not Before: Nov 29 10:42:26 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67499a91-bdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:c5:bd:11:1b:e8:2a:7b:14:05:b0:f2:62:
5a:fb:da:a0:17:35:a2:e0:12:d4:f0:e2:e8:31:f4:
38:27:63:e7:e9:96:cb:6d:00:c8:f0:5f:59:53:85:
ac:63:f4:95:36:c7:1e:1e:92:39:c0:a8:be:77:8c:
f0:46:03:71:d5:16:26:d1:85:19:09:e3:c8:9b:55:
af:32:0b:d7:be:e0:0c:30:20:08:b0:1e:b0:97:a4:
60:5e:41:3f:a5:a4:d0:ba:66:05:49:8a:6b:95:a9:
d8:f3:47:2b:44:b8:9e:3c:bd:bf:88:69:f0:cc:a2:
a0:af:3f:f5:19:b7:5b:f2:28:04:0b:d8:ae:b2:0b:
b6:d4:d2:9a:d4:b4:86:33:a8:fc:ac:83:34:5f:0d:
ea:dd:47:10:45:49:c8:5c:72:4c:76:55:1c:73:6c:
2f:74:56:a4:cc:05:cc:6c:8d:16:89:1d:45:65:58:
10:c5:e5:96:30:79:a7:45:19:ef:b3:d6:fe:d9:61:
09:71:36:65:21:62:13:ed:ed:43:f3:1b:3d:0d:26:
bc:29:70:a7:ad:de:5b:f5:cc:6c:b9:91:58:ca:aa:
29:da:5f:c1:77:1e:db:dc:8f:93:11:1e:db:b2:e5:
2b:b3:48:56:ed:72:bf:0e:85:4f:8f:1d:f7:92:fa:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:E0:82:F1:4E:35:84:41:F2:FC:0C:16:D4:D5:EE:19:38:79:DB
X509v3 Authority Key Identifier:
keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F69B82EAE3E11EF9289306CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.114.0/23
Signature Algorithm: sha256WithRSAEncryption
61:1b:4e:67:f8:62:3c:86:d0:09:94:dc:eb:ef:ec:c4:75:7a:
ef:74:7e:77:0f:7a:90:20:ff:a8:bd:8e:76:0b:91:2f:24:0d:
50:2f:2a:a9:f3:23:ba:01:ed:3d:e6:2d:f7:48:3f:9f:7a:62:
f1:03:d1:7f:35:1b:42:9b:73:c5:b7:d5:e5:a5:28:57:d0:60:
2d:f4:9f:1a:47:a1:87:df:62:be:17:b1:38:1d:b2:cd:24:e1:
6b:d9:bf:43:ae:da:66:2a:b2:09:17:77:54:04:2d:b2:ed:e2:
9b:99:b2:ab:c2:44:0b:f3:05:ae:92:68:c4:fa:ac:44:34:c5:
42:1c:f2:1d:82:dd:fa:8c:75:05:47:83:04:67:d9:65:be:46:
b1:30:42:fa:b3:c1:0a:92:94:fb:05:6d:6c:5c:fb:af:cb:42:
fb:03:4f:b2:c3:c0:c8:1a:38:94:4b:e4:f4:8a:d5:cb:5c:fd:
34:b3:2c:1c:ab:05:36:49:fa:f0:33:81:d7:34:8c:ae:dc:f7:
9a:13:be:3a:09:4b:69:91:c2:9d:06:db:6f:77:1c:55:a5:cf:
ae:67:38:c4:07:4f:fc:ff:8f:1d:39:e1:32:21:2c:d3:ac:0a:
8a:3c:61:5e:35:70:c1:87:87:71:f6:83:18:7f:fe:ee:ef:95:
5d:6c:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:52:57 2025 by rpki-client