Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/EE04266A08C811F09F9B7B57C4F9AE02.roa
File: EE04266A08C811F09F9B7B57C4F9AE02.roa (raw, json)
Hash identifier: D+C1K1lzyhPvB9LwJB8gZilHLGwebOslipSKAX/r/Wo=
Subject key identifier: 11:A9:92:EC:6B:5D:4F:2B:DE:DC:07:17:B7:51:85:05:EA:36:B6:F8
Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Certificate serial: 02
Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/EE04266A08C811F09F9B7B57C4F9AE02.roa
Signing time: Mon 24 Mar 2025 15:59:13 +0000
ROA not before: Mon 24 Mar 2025 15:59:13 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 142647
IP address blocks: 160.30.142.0/24 maxlen: 24
160.30.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E09
Validity
Not Before: Mar 24 15:59:13 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67e18151-d608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:b1:54:e7:0d:5b:ca:d4:24:14:a9:0d:cb:
5c:59:8a:37:b1:6c:6e:79:db:08:59:bc:29:39:c3:
c9:e6:c7:a5:1e:c4:a1:1d:85:9d:9f:e6:40:16:a7:
8f:64:e6:35:bd:3d:c8:9d:5a:f8:62:1b:f3:56:1c:
df:ea:75:49:e5:44:7f:7e:90:62:98:03:fa:be:6e:
5b:37:ff:5f:19:1f:35:77:7c:94:20:5a:dc:8e:c7:
9f:55:6e:7b:36:f8:c5:46:ea:c3:86:7e:ce:b5:65:
bb:02:d9:bc:15:83:0d:63:2f:0c:4f:72:da:ec:36:
92:d6:b7:81:5b:de:44:0b:5f:60:9a:6c:ac:5f:ef:
9a:c7:0f:cc:78:6e:c3:54:67:3a:9b:47:6f:1a:cf:
a7:84:cb:5a:91:a1:75:18:05:c9:c4:df:b3:4b:1f:
69:bf:23:c1:b4:20:1a:61:30:e7:f1:ce:de:63:d1:
f5:27:71:26:69:d7:89:5f:61:77:f6:52:ce:c8:b3:
64:35:06:68:c6:1c:76:10:d8:5e:20:75:a2:2d:0b:
58:81:8c:ee:ed:3d:4d:fc:10:23:96:fa:2c:b5:35:
cf:df:a8:c1:41:bd:b3:04:62:a2:88:54:ed:b5:78:
02:c8:33:5a:87:7a:85:3a:f2:7d:0c:5a:51:73:04:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A9:92:EC:6B:5D:4F:2B:DE:DC:07:17:B7:51:85:05:EA:36:B6:F8
X509v3 Authority Key Identifier:
keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/EE04266A08C811F09F9B7B57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:f5:7f:a4:e7:6d:32:c2:cd:21:7c:ea:79:3a:57:99:57:89:
9e:63:08:7e:49:34:b6:57:fa:0f:3a:20:ba:ab:49:c4:6a:fb:
57:46:5f:18:ae:d4:00:e2:2d:4d:cf:11:48:0f:3e:32:12:52:
6e:de:dc:e4:2b:d3:99:fd:fe:6e:13:d3:2e:30:85:17:2c:84:
6a:83:91:d3:8f:ba:6c:79:c5:c5:b7:04:39:ff:ef:88:37:62:
40:64:5f:21:3e:bc:5b:65:2d:75:b2:82:b5:60:55:a1:57:cf:
48:e6:14:5e:db:3c:ee:c2:8d:7d:33:4f:52:ed:95:3a:10:85:
a1:6a:07:63:00:bf:5b:6d:d7:0a:e9:21:d0:8f:9c:dd:86:5c:
07:f9:76:4e:ab:ba:8d:24:41:ca:67:70:53:ac:a7:27:c3:c4:
d7:33:15:a6:b3:0d:d4:64:b6:a5:4d:ae:c5:e7:3e:49:50:96:
68:be:dc:10:7a:5e:33:e9:30:0a:ed:b5:e3:74:56:ca:8a:91:
68:c7:23:91:d2:1a:70:46:13:50:ca:9d:73:3a:f6:5b:f4:27:
d8:75:97:d7:7e:7f:dc:6c:a2:54:f0:b9:b9:eb:73:8b:97:30:
10:da:f3:c9:6b:c5:7f:1a:95:40:7a:73:56:bf:a2:9a:bf:cb:
e4:48:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:38:12 2025 by rpki-client