Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/5057E5F6B14C11EFA566D56AC4F9AE02.roa
File: 5057E5F6B14C11EFA566D56AC4F9AE02.roa (raw, json)
Hash identifier: XSrU+cIniKuaAN82CxOOvWVvv/755UkbpsZueEaUfDc=
Subject key identifier: 90:46:7B:C1:F1:48:A0:EF:2E:42:01:1E:08:69:4C:DB:55:A7:57:0C
Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial: 08
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/5057E5F6B14C11EFA566D56AC4F9AE02.roa
Signing time: Tue 03 Dec 2024 07:58:00 +0000
ROA not before: Tue 03 Dec 2024 07:58:00 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134562
IP address blocks: 160.250.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE
Validity
Not Before: Dec 3 07:58:00 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674eba07-6ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:84:cb:2d:fc:65:9e:45:02:a3:af:f0:30:
0e:11:5e:7c:7b:47:01:1d:5d:d4:d8:01:8c:21:97:
f3:51:02:ed:8a:f4:cb:41:08:7e:68:53:0f:4b:1a:
6f:ef:28:8a:20:89:03:bc:a9:72:6e:04:ec:29:46:
fc:2c:13:f4:65:5f:7c:21:3d:4b:a1:c0:5a:64:59:
ef:07:24:ec:dc:4f:3d:75:3c:f1:d8:f9:de:e0:c6:
3a:b9:57:78:62:5b:24:36:72:40:f6:78:26:ae:c6:
0b:68:a1:47:0c:26:e7:ee:76:e2:d9:b0:e4:e4:81:
b5:c5:b3:83:1c:1f:b4:25:cc:fc:26:92:b2:0b:9f:
24:8b:75:e2:2f:fc:2e:d6:c3:0b:15:96:27:0e:ac:
37:c2:84:7e:1b:65:8e:e1:cc:8f:a4:a1:80:f1:1d:
dc:73:91:73:cb:2d:48:87:73:d2:64:3d:5f:e8:f4:
27:99:fc:70:23:ca:fb:e3:2a:b2:dc:29:73:b2:8f:
d6:7c:58:f8:1d:2f:b0:40:71:c3:a9:4a:78:94:04:
2e:fa:51:d3:b6:6c:af:3a:5b:9c:58:4a:ba:41:d0:
9c:db:ae:a0:b5:90:1f:aa:05:4a:61:73:24:86:61:
03:ba:eb:6a:86:61:54:fb:1d:aa:34:96:a5:60:1f:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:7B:C1:F1:48:A0:EF:2E:42:01:1E:08:69:4C:DB:55:A7:57:0C
X509v3 Authority Key Identifier:
keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/5057E5F6B14C11EFA566D56AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.83.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2c:08:fb:72:77:00:aa:d0:31:3a:fe:ee:1d:e5:ae:2c:b3:
ca:ab:80:9b:6c:1e:8f:d5:11:50:b5:a6:99:b9:de:5f:a5:51:
ff:c8:77:0a:d1:14:67:88:d1:1b:7f:9a:92:24:36:80:0a:1f:
8a:0d:40:23:57:10:30:17:21:1e:f9:93:0d:dc:79:6d:84:88:
2e:ab:dc:55:cb:4e:f8:fe:92:15:86:b1:4c:5b:67:5a:53:40:
33:03:01:84:a3:d3:1f:73:08:43:3b:22:96:d5:d8:56:d7:2a:
e4:28:29:86:83:48:8e:c2:7a:ae:f9:9b:15:a2:fd:14:d6:fb:
79:80:74:78:85:98:36:0d:c5:03:33:e9:69:e3:65:04:9b:3b:
65:a5:11:6e:8c:c8:7a:c0:3a:a6:75:4b:a5:e9:dc:f7:82:6a:
0b:02:f0:a4:10:6c:80:1a:29:e8:11:e6:b0:4c:73:0c:34:20:
2a:d6:f6:03:76:66:84:ad:bc:8a:c1:f1:af:27:95:9e:f6:59:
f5:0d:6a:3d:a8:6a:1d:c7:99:e0:64:33:58:9b:58:b2:26:1f:
8a:78:00:81:14:71:4b:6b:f4:e7:47:81:48:98:29:f3:56:56:
af:6b:21:ea:f7:78:d3:9b:c5:44:7d:ee:d5:47:47:5f:b2:75:
82:17:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:25:58 2025 by rpki-client