Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
File: 63A0A458F38811EFB8E2D638C4F9AE02.roa (raw, json)
Hash identifier: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=
Subject key identifier: 77:E1:3D:AB:7E:FE:22:EB:38:38:48:B1:12:01:C3:F2:79:52:92:CC
Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial: 62
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
Signing time: Tue 25 Feb 2025 14:54:19 +0000
ROA not before: Tue 25 Feb 2025 14:54:18 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 153362
IP address blocks: 160.187.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A
Validity
Not Before: Feb 25 14:54:18 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67bdd99a-fe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:e2:7c:e5:2b:08:13:d5:90:e9:8d:8c:59:
c9:75:a5:8d:19:06:70:16:9f:b0:94:6e:3b:79:ed:
0e:a2:54:00:fe:81:97:a3:6a:df:98:c6:7d:70:cd:
1f:96:07:68:c0:99:d7:7a:dd:c7:45:b5:54:c6:b9:
b7:a9:d6:23:90:3d:a6:e9:99:f9:91:fa:a4:66:d6:
58:aa:6c:95:0c:7b:d1:87:52:32:6d:04:8c:bb:9d:
8e:da:82:7c:67:b0:b5:39:f1:8f:39:b0:ee:8f:dd:
99:05:af:a9:1d:2b:9e:d3:b8:d6:8c:7e:d2:ab:be:
81:6d:4f:2b:76:21:0b:b0:1c:b9:d3:ca:23:9b:66:
ed:36:5c:2b:91:23:58:c7:02:28:fe:25:31:83:a8:
e8:93:4d:af:e4:7f:10:57:e9:07:4f:06:72:a1:3b:
10:15:67:0c:5e:80:66:42:1e:74:46:de:6e:7f:c3:
ac:f4:b9:86:b5:aa:a9:00:25:9f:3d:1e:5e:29:a9:
3b:30:60:66:07:1e:02:b0:a0:e1:7c:d8:c7:db:09:
7c:12:b0:38:dd:1b:c9:6f:45:a6:1e:57:9e:14:9f:
ad:24:f4:ae:d0:b6:1a:95:26:15:fd:00:a6:cb:1d:
28:30:a3:b7:d4:18:bc:b1:cc:f6:f9:6e:34:6d:52:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:3D:AB:7E:FE:22:EB:38:38:48:B1:12:01:C3:F2:79:52:92:CC
X509v3 Authority Key Identifier:
keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.239.0/24
Signature Algorithm: sha256WithRSAEncryption
76:29:2c:2c:a1:dc:d1:4d:c4:a6:1a:0a:b9:eb:d6:92:a9:17:
95:ab:92:c4:c0:4d:14:32:ad:70:23:c4:14:6d:ae:7b:45:00:
48:de:ae:35:74:33:50:ec:d8:ea:5f:3b:74:ca:3e:8f:30:10:
36:16:18:d5:a3:a1:7c:9e:ea:b2:38:bf:28:8c:40:46:19:f5:
8c:4b:fd:19:cf:e9:5a:59:ce:0a:ca:bb:f8:9c:5f:e4:6b:ef:
51:dd:80:a0:ad:e4:b0:cb:1f:d2:f5:0d:cc:09:99:78:0e:86:
dd:50:60:ea:02:44:3b:7a:95:03:51:44:e5:9d:c8:40:83:92:
a4:b7:b1:ef:af:63:a8:23:69:a7:f9:36:6c:1c:69:20:0d:af:
1e:8f:c8:1d:38:2e:c8:0d:c8:6e:2b:63:5a:a0:fc:40:4e:7d:
38:a5:42:d8:cd:14:01:97:54:0c:dc:38:9d:a1:14:94:72:f8:
c0:79:d4:1f:02:34:a6:e6:cb:90:84:62:6c:19:6c:41:d7:0b:
01:d4:c9:9a:bd:df:dc:10:82:3c:db:5f:30:28:c5:c9:5b:4d:
0a:ac:c8:45:a2:54:59:56:6e:dc:d1:5b:21:2c:84:89:0f:3b:
a8:b9:5f:d0:ee:74:02:da:17:4c:9c:53:35:51:df:23:b2:c5:
af:d6:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:08 2025 by rpki-client