Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa
File: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (raw, json)
Hash identifier: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=
Subject key identifier: 75:F0:6E:48:19:FF:03:57:C3:14:17:86:FA:CB:A2:8B:20:F8:07:B2
Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Certificate serial: D7
Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa
Signing time: Tue 25 Mar 2025 05:11:37 +0000
ROA not before: Tue 25 Mar 2025 05:11:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136784
IP address blocks: 157.15.242.0/23 maxlen: 23
157.15.242.0/24 maxlen: 24
157.15.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A30
Validity
Not Before: Mar 25 05:11:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e23b09-821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:39:43:fd:7b:05:ee:c6:fb:e7:50:5e:54:
6f:99:bb:24:03:ee:d1:4f:9c:6a:19:01:b2:e9:ec:
ad:8d:d8:70:63:26:2e:00:32:9b:8b:83:18:55:33:
91:d6:81:c4:45:19:80:4c:a2:b9:ec:f4:80:dc:74:
44:88:cb:b3:5e:3b:f3:8f:3c:f8:00:c9:6f:af:8b:
be:f8:0a:99:49:cb:30:3d:b9:20:7b:a4:41:8b:bf:
5d:c8:3e:1e:9e:dc:0c:d1:e4:e6:86:92:e6:8c:25:
f5:a3:1c:7e:12:bd:c3:41:3c:5f:83:96:b1:37:e8:
65:76:e7:4f:97:43:f8:63:9d:29:a3:f6:1f:57:f4:
1f:4c:c8:4d:52:82:5e:cd:5a:40:d8:ce:e0:c8:8d:
04:e9:48:fe:02:6c:9a:cd:45:61:f9:95:89:3e:a8:
29:79:87:f8:73:52:8d:0a:69:4e:11:e5:ea:d3:97:
44:d6:c3:1f:94:7a:1d:ca:69:83:b1:07:4f:1a:e5:
b0:32:1c:5d:b5:03:32:f7:59:e0:98:0d:ae:9e:4c:
42:ad:d3:f5:8c:ac:e9:2d:9b:c7:c6:c5:4b:1b:e9:
ca:45:95:0a:90:c3:a3:75:92:6f:13:d7:e8:da:18:
8b:52:29:15:27:d2:2f:89:4e:9a:84:f3:32:2c:26:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:6E:48:19:FF:03:57:C3:14:17:86:FA:CB:A2:8B:20:F8:07:B2
X509v3 Authority Key Identifier:
keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.242.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:a5:37:b2:3a:9f:8f:f4:af:bc:40:41:2a:78:99:fb:8d:42:
dd:07:48:16:1f:65:1f:e6:a7:8e:50:9a:7c:25:ad:10:2d:0f:
aa:18:37:80:b7:7d:cf:13:50:01:d9:2a:99:d0:1e:27:cd:35:
32:80:1e:8d:dc:13:e8:6e:37:97:a1:f5:7d:08:c9:4f:94:21:
33:5a:4e:f8:14:a3:53:42:8c:d4:40:43:aa:05:d5:d4:7d:fc:
e4:b8:78:73:7e:08:f9:d9:13:71:30:f0:5f:3c:8c:12:12:b3:
d7:23:b0:bc:d7:2a:04:2b:a8:58:f7:54:e3:6c:a5:02:31:f2:
41:56:8e:1e:0d:d1:eb:d9:fe:58:65:45:38:b8:a3:ba:fe:b1:
6b:a1:8a:33:7d:57:ea:d7:8a:fb:89:35:7a:f4:2c:24:5b:f1:
8b:7c:ba:3b:f9:fd:9a:e1:d7:3b:25:8e:5b:eb:59:03:da:58:
97:36:35:ef:e0:c6:1a:27:4e:5b:3a:dc:79:03:08:41:5b:8e:
4a:8b:8c:4b:57:c8:7a:e7:a6:2a:af:82:57:42:57:cd:89:a6:
1c:9e:15:ca:ca:ae:c9:a3:a0:ca:5c:2e:55:bd:84:55:ec:51:
d7:3c:0b:30:e3:8e:1d:7e:a0:dd:2d:77:13:36:a4:ad:0e:da:
03:33:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:53 2025 by rpki-client