Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa
File: F31A7084E2C911EFADAB3C32C4F9AE02.roa (raw, json)
Hash identifier: LFS2UufFNk1EGZW0kkO6tt4P+aiBcuisDdPBhJ+0Sd4=
Subject key identifier: 49:41:F3:B1:89:B3:0A:DC:B8:0D:A5:9E:BB:15:C7:75:BD:3A:F1:EF
Certificate issuer: /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial: 6E
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa
Signing time: Tue 04 Feb 2025 07:30:47 +0000
ROA not before: Tue 04 Feb 2025 07:30:47 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 152929
IP address blocks: 160.25.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A748
Validity
Not Before: Feb 4 07:30:47 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67a1c226-f9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:c2:f6:ef:13:94:4d:78:d7:02:98:95:e7:
eb:3e:89:dc:8d:1e:ca:b7:d1:e0:50:14:25:6d:34:
5f:f6:e3:2c:76:08:38:6d:a7:c4:c4:03:01:29:2d:
fe:4f:57:6a:7c:62:9e:07:4f:a8:5a:f6:f6:49:60:
25:46:90:25:19:fe:a5:f9:6a:1b:2f:9e:d2:b2:8b:
fd:2b:18:d1:1b:ba:f5:5a:ca:3a:3c:0b:02:bc:2f:
6e:ea:c2:b2:f8:3a:d7:fd:f8:2d:42:70:e7:13:19:
93:66:93:1a:9b:dd:66:67:26:2a:c9:f5:8c:45:7b:
d3:21:13:35:97:60:7b:8e:bf:be:8b:34:68:31:ca:
4e:d8:07:0c:93:13:54:cb:32:95:8f:ee:13:98:e3:
2c:7e:85:bf:bf:dd:1d:26:3e:c2:be:9a:2c:2e:e5:
3b:11:50:67:d4:3c:33:bb:2a:14:ed:46:e8:82:0f:
02:11:c5:70:8f:5d:10:07:04:0c:2d:26:35:29:58:
e9:76:45:7b:5a:80:35:c9:e5:3c:f0:71:fb:0a:77:
e3:28:f6:33:92:16:da:7a:3f:23:d7:03:86:f0:8d:
12:4a:90:db:ae:8b:60:7e:3d:0f:bc:51:99:9d:e4:
b0:84:aa:40:91:06:7e:4a:ca:31:b0:d5:96:6a:f2:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:F3:B1:89:B3:0A:DC:B8:0D:A5:9E:BB:15:C7:75:BD:3A:F1:EF
X509v3 Authority Key Identifier:
keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c0:6d:79:c8:d9:8b:12:b3:9f:77:52:24:9c:7e:28:ad:f2:
33:bf:1d:bb:09:27:97:ca:fa:5d:84:bc:50:2f:11:25:8c:c2:
17:76:d3:6f:cf:d5:07:cd:4e:67:4a:59:33:4d:a5:35:14:2e:
0c:0f:70:ee:59:0f:67:b5:01:e6:12:02:06:d1:68:e4:42:a0:
b0:9e:b8:01:49:4d:31:3f:be:b3:fa:04:0e:65:d2:6e:86:31:
a3:a0:18:ec:b6:78:de:9b:e4:d3:f9:93:ef:27:a6:28:75:be:
2c:c2:f9:c1:57:aa:12:2b:d5:be:5c:87:b9:ed:98:a5:03:cf:
f5:5d:c5:0c:c3:cb:72:90:05:fe:7d:76:8a:83:2a:f3:71:48:
eb:10:a9:b0:e9:25:4f:99:cb:4e:69:49:6b:b7:fe:ad:0d:48:
67:2b:db:ba:b9:78:e7:e2:5d:0e:78:6b:d6:7b:55:31:ed:70:
b9:a7:49:cb:02:5b:ce:8d:de:05:81:c7:60:74:ae:fe:73:93:
dd:48:52:c8:3e:8d:0e:25:83:b0:13:23:46:4d:f9:81:c2:06:
0f:60:f3:25:03:81:ae:e3:b7:58:b7:19:3d:1a:2c:ee:e8:2b:
32:33:9d:46:e5:cf:f8:f5:00:b6:b3:ed:fb:7d:4e:98:4f:c3:
b1:a8:be:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:23:05 2025 by rpki-client