Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa
File: 2017BFC2B07211EF83629B37C4F9AE02.roa (raw, json)
Hash identifier: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=
Subject key identifier: 08:D0:B7:09:CC:45:79:3E:4B:53:63:1A:76:5E:66:A2:04:24:4D:FE
Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial: 07
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa
Signing time: Mon 02 Dec 2024 05:56:08 +0000
ROA not before: Mon 02 Dec 2024 05:56:08 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 151637
IP address blocks: 160.250.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B45F
Validity
Not Before: Dec 2 05:56:08 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=674d4bf8-106d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:cf:d3:b1:a3:1a:f0:96:d1:f8:a3:1b:1a:
df:b7:08:f5:71:a7:1c:25:41:09:f7:ee:f3:58:55:
d5:99:7c:d4:4f:07:a1:dd:4b:82:18:c7:8b:94:fb:
1f:bf:58:79:80:3f:15:b7:86:46:b1:58:68:19:13:
7f:f2:e2:77:52:eb:19:bb:3f:ed:d0:4e:d7:d4:04:
97:1e:46:09:14:44:f7:9c:7c:41:c0:79:31:f9:1f:
cb:b0:bf:7b:91:af:f9:86:86:19:ec:8b:b0:31:6c:
bd:a9:bd:80:82:75:13:25:79:b3:09:ac:8b:f2:06:
2a:55:ba:fc:20:4f:55:63:75:29:c4:c0:d0:40:6b:
9c:f3:1d:89:67:8b:73:4b:6d:94:41:74:75:a7:0e:
88:ee:3b:d7:d7:92:60:8b:05:e4:9c:12:67:dd:dc:
a2:1f:55:a0:ec:c0:c1:ee:69:18:9a:ec:f8:c7:0f:
1c:6c:f5:3f:0d:ad:f2:c8:93:31:14:b0:59:cd:2b:
bd:ef:5f:4b:b3:1b:f8:1c:36:c4:89:a9:e0:68:0c:
3a:8f:8a:d5:ab:29:26:81:17:c2:40:ca:1c:7f:c5:
54:86:73:54:23:8a:34:76:ac:b0:02:54:4e:fe:5d:
d8:23:dd:f2:12:a9:ad:ed:6a:d0:a6:ca:18:05:84:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:B7:09:CC:45:79:3E:4B:53:63:1A:76:5E:66:A2:04:24:4D:FE
X509v3 Authority Key Identifier:
keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cf:0f:37:b0:a4:7f:0d:37:0e:d0:cf:7f:c7:90:e5:69:b7:
ec:ea:1e:03:80:67:cd:39:2b:1d:f9:0d:c0:2d:89:66:df:01:
8c:7a:5c:c4:cc:f3:9f:f7:dc:97:df:d0:c7:23:a0:75:97:6d:
e0:02:f4:43:41:ee:af:18:8a:74:d8:37:38:a3:27:ec:20:ce:
56:b2:17:f2:ae:56:63:c9:d0:77:37:4f:ed:ac:a5:f1:b3:2b:
1a:4b:b4:ef:8f:90:43:5c:92:4f:76:24:ed:f7:10:86:f3:48:
83:e1:48:6f:46:ef:42:57:47:ee:37:f1:ae:a5:a2:eb:59:1a:
fc:83:be:c5:41:11:0c:25:5d:5d:2f:9f:d1:19:da:35:3f:1e:
12:26:44:ad:f0:ed:27:f3:90:90:68:33:1d:37:2e:e1:ff:b0:
6e:8d:02:a6:59:94:73:dc:d4:b5:ae:5d:a0:64:c1:0b:bd:30:
7c:29:80:81:32:95:4f:c3:ad:83:8e:ca:33:ea:e9:60:68:e7:
24:1a:8f:b3:d7:f5:2b:e3:08:08:95:3d:41:b5:13:1c:21:61:
64:9a:9a:d0:bf:ae:77:73:d4:c3:f3:fd:23:7c:e0:b4:45:de:
bf:6d:f4:a3:57:34:f9:bc:21:10:e2:61:cb:45:ff:c6:6e:0b:
3b:93:9a:1d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QjQ1RjExMC8GA1UEBRMoNDExNTIyMzQ2MEEzRERGQUM4M0E4MkZDNjFCMkJFOUVD
NjI2QzIwQzAeFw0yNDEyMDIwNTU2MDhaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NGQ0YmY4LTEwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwz8/TsaMa8JbR+KMbGt+3CPVxpxwlQQn37vNYVdWZfNRPB6HdS4IYx4uU+x+/
WHmAPxW3hkaxWGgZE3/y4ndS6xm7P+3QTtfUBJceRgkURPecfEHAeTH5H8uwv3uR
r/mGhhnsi7AxbL2pvYCCdRMlebMJrIvyBipVuvwgT1VjdSnEwNBAa5zzHYlni3NL
bZRBdHWnDojuO9fXkmCLBeScEmfd3KIfVaDswMHuaRia7PjHDxxs9T8NrfLIkzEU
sFnNK73vX0uzG/gcNsSJqeBoDDqPitWrKSaBF8JAyhx/xVSGc1QjijR2rLACVE7+
Xdgj3fISqa3tatCmyhgFhC23AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCNC3CcxF
eT5LU2Madl5mogQkTf4wHwYDVR0jBBgwFoAUQRUiNGCj3frIOoL8YbK+nsYmwgww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzhDQTIwQTFDQUFE
MjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdn
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUVJVaU5HQ2ozZnJJT29MOFliSy1uc1ltd2d3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjQ1Ri84Q0EyMEExQ0FBRDIxMUVGOUFBMEVGODBDNEY5QUUwMi8yMDE3QkZDMkIw
NzIxMUVGODM2MjlCMzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKD6QjANBgkqhkiG9w0BAQsFAAOCAQEATs8PN7Ckfw03DtDP
f8eQ5Wm37OoeA4BnzTkrHfkNwC2JZt8BjHpcxMzzn/fcl9/QxyOgdZdt4AL0Q0Hu
rxiKdNg3OKMn7CDOVrIX8q5WY8nQdzdP7ayl8bMrGku074+QQ1yST3Yk7fcQhvNI
g+FIb0bvQldH7jfxrqWi61ka/IO+xUERDCVdXS+f0RnaNT8eEiZErfDtJ/OQkGgz
HTcu4f+wbo0CplmUc9zUta5doGTBC70wfCmAgTKVT8Otg47KM+rpYGjnJBqPs9f1
K+MICJU9QbUTHCFhZJqa0L+ud3PUw/P9I3zgtEXev230o1c0+bwhEOJhy0X/xm4L
O5OaHQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:06:48 2025 by rpki-client