Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
File: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (raw, json)
Hash identifier: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=
Subject key identifier: AA:08:10:47:21:60:50:BD:4A:3C:B8:D9:52:4D:7D:64:81:17:BB:AB
Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial: 02
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
Signing time: Thu 09 Jan 2025 12:55:43 +0000
ROA not before: Thu 09 Jan 2025 12:55:43 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 153495
IP address blocks: 161.248.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E
Validity
Not Before: Jan 9 12:55:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677fc74e-7ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:6b:41:8b:5f:03:24:4b:59:9d:c4:c4:e4:
58:e1:f4:e8:f8:24:41:4c:b4:4d:f9:bd:c2:0c:c8:
10:2c:f2:c6:41:ed:b1:c6:06:2c:f7:93:e2:af:62:
61:6d:3e:37:7d:24:d8:11:76:b8:d9:5c:a9:d8:35:
10:10:c5:68:08:1c:07:6e:40:3c:28:d0:9c:ec:f6:
90:c3:b6:8e:17:0f:e6:aa:5c:f4:80:25:d2:a4:36:
e9:88:8d:36:02:b3:bd:53:16:58:4f:00:ab:3c:ee:
29:45:19:91:23:94:cc:e6:9d:1d:3d:26:78:21:e7:
d6:30:62:f9:90:e3:c1:24:59:de:64:9e:6e:20:32:
67:d4:bd:52:55:c1:07:98:3b:be:a2:60:01:96:0b:
bd:f1:a7:98:88:21:4b:3e:ce:67:00:9f:ca:dc:3e:
13:9d:47:c4:a4:7d:74:51:93:8c:c7:a8:f0:9f:e4:
55:e4:77:6c:70:f0:11:35:be:27:63:e4:75:4a:ea:
6c:f2:84:89:44:62:a1:51:be:c6:a1:99:b2:23:b0:
10:2d:7b:07:18:15:5e:4a:08:61:b3:c6:c5:9b:09:
29:9c:c1:14:72:64:8a:3b:e0:17:a5:10:02:42:ed:
cc:fe:de:02:6a:0e:4d:e4:f8:07:1e:4a:1f:a3:d7:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:08:10:47:21:60:50:BD:4A:3C:B8:D9:52:4D:7D:64:81:17:BB:AB
X509v3 Authority Key Identifier:
keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.130.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:d6:ff:d9:6e:12:07:73:64:13:4e:f1:b7:23:07:42:7b:08:
4e:93:ca:48:2f:a9:b3:8e:3d:a2:05:fa:0a:f2:f5:cc:1e:bd:
8a:a3:4e:73:54:40:d6:73:6e:9d:6a:1c:86:f2:4d:d5:71:54:
da:4a:a3:09:b0:fe:bc:fe:4d:7f:ba:3c:a9:b3:d3:dc:1c:d5:
85:c0:6e:06:39:5b:81:0f:8f:38:fc:6b:0f:8d:ae:b8:eb:53:
4f:19:54:59:32:69:ab:8c:74:c0:f1:38:69:8a:eb:e7:07:f2:
49:2c:68:97:fe:a5:17:a2:9f:1c:87:cb:13:12:6d:32:7d:10:
52:82:51:48:13:6b:a5:e6:d6:b0:68:15:36:34:bf:57:45:5c:
b1:82:97:68:18:6c:da:d2:68:a8:6c:66:34:c5:0c:a3:ff:bc:
b3:1a:23:92:4e:57:eb:3f:4d:6d:37:16:50:1d:5b:6b:75:4a:
21:81:d4:b1:55:be:0b:b5:4c:bc:81:e4:b1:b6:d6:c7:71:5f:
15:bc:ae:9d:4b:d0:61:de:e2:8e:d0:97:70:4d:44:ce:e8:b6:
22:12:fd:0f:cb:e1:1d:dd:d9:13:d0:b8:33:41:ea:70:7f:45:
c0:61:f2:9b:86:e7:f0:90:66:64:d5:55:cc:60:2e:86:b2:d0:
54:02:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:11:45 2025 by rpki-client