Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/1909718EDE4A11EF90C89D39C4F9AE02.roa
File: 1909718EDE4A11EF90C89D39C4F9AE02.roa (raw, json)
Hash identifier: /eMiLKYYsNEMi2i4zLS61WcIPXTg0PjTSgCz7Tex+Ec=
Subject key identifier: CE:EA:49:35:12:A5:F9:05:FB:3C:BD:29:FE:FC:FE:A7:48:8B:3F:76
Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial: 2C
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/1909718EDE4A11EF90C89D39C4F9AE02.roa
Signing time: Wed 29 Jan 2025 14:06:00 +0000
ROA not before: Wed 29 Jan 2025 14:06:00 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 139921
IP address blocks: 160.191.128.0/24 maxlen: 24
160.191.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E
Validity
Not Before: Jan 29 14:06:00 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=679a35c8-e87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:4d:3c:fb:3d:e5:23:df:4b:42:11:75:bb:
6d:e9:ef:55:9b:98:f0:0c:1f:6a:cf:c9:12:74:59:
7c:ba:1e:54:23:ca:d2:43:6b:2f:59:0c:1b:73:09:
1c:8e:bf:b4:8d:ed:f0:f1:e1:52:a8:00:92:8e:45:
5b:d9:26:ac:ee:2a:ab:ba:15:85:c6:1a:09:3f:f3:
f1:24:f3:96:99:94:f5:08:22:2a:0a:24:45:37:f1:
46:f1:f4:ef:8d:95:f6:9d:54:86:60:13:8c:de:0b:
55:0b:c5:84:93:8b:5c:6a:fb:a6:2e:fd:e2:0e:8d:
39:1d:d1:b0:99:95:64:63:82:72:99:9b:35:23:e1:
42:46:ac:d9:2e:2a:86:43:ff:ca:80:36:b5:16:68:
ae:97:ed:91:9d:5d:f4:1d:f6:46:54:12:94:74:32:
c9:f7:3e:6d:cb:f2:17:7d:c1:57:d0:b7:74:6d:25:
d2:73:d7:ca:c7:d3:22:bf:20:a8:33:71:3a:0d:30:
a5:5c:f1:7c:ff:83:60:c9:bb:38:b3:e3:18:52:d1:
ec:d5:30:26:4a:a2:70:3a:10:9f:f9:93:cc:d0:e7:
9b:71:3e:42:44:b0:89:4d:e7:33:b1:70:5b:58:3d:
15:35:39:e2:bf:ff:5f:53:ab:ac:24:ae:a8:54:b4:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:49:35:12:A5:F9:05:FB:3C:BD:29:FE:FC:FE:A7:48:8B:3F:76
X509v3 Authority Key Identifier:
keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/1909718EDE4A11EF90C89D39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.128.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:d8:3b:c3:ee:3f:ed:25:5b:77:7e:bb:61:86:28:1e:23:c0:
70:19:b3:5b:5d:ab:5d:7e:32:15:45:9f:cb:fb:ab:ff:d6:12:
66:5b:cf:68:79:a2:82:c2:30:a6:4e:f6:18:30:30:f4:da:46:
03:e3:f9:9c:42:fd:c1:6a:41:08:31:43:81:e0:3e:e5:d6:2a:
3b:1d:9a:81:f3:c5:fe:14:eb:75:81:a4:7d:c4:b1:41:24:31:
d0:8d:74:be:b5:0f:a4:5b:42:09:52:f7:11:b6:37:a9:5b:9c:
00:9a:60:0a:66:3e:4b:94:2c:95:6b:e9:34:94:cd:3a:38:74:
41:5f:1b:dc:85:43:98:d0:63:2e:ff:f6:95:64:7d:5d:a8:48:
f3:0c:48:b9:ee:f7:1b:0b:5d:bf:ed:b4:8c:ac:24:c5:15:5b:
0d:48:d3:f2:5e:fd:99:56:2a:bc:e0:cc:9d:5b:a1:42:5e:13:
0c:20:61:d4:3a:95:20:3a:5d:32:87:b6:62:a1:df:bd:96:b7:
5c:e3:11:46:fb:b2:23:3d:ed:9c:92:0c:6b:0b:cb:f1:7c:9a:
0d:5e:de:50:76:62:93:f2:d4:2a:5f:c7:dd:63:39:2a:95:3a:
a1:98:d9:68:58:43:96:8e:34:d1:bd:4f:3a:9f:c7:a7:1b:ea:
56:a8:97:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:26:45 2025 by rpki-client