Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/212A832AD7E311EF86266212C4F9AE02.roa
File: 212A832AD7E311EF86266212C4F9AE02.roa (raw, json)
Hash identifier: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k=
Subject key identifier: 87:0D:36:32:9D:2D:60:42:7E:81:60:74:5D:83:33:F5:B2:01:76:4D
Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial: 02
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/212A832AD7E311EF86266212C4F9AE02.roa
Signing time: Tue 21 Jan 2025 10:33:18 +0000
ROA not before: Tue 21 Jan 2025 10:33:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 139833
IP address blocks: 160.187.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870
Validity
Not Before: Jan 21 10:33:18 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=678f77ee-351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:50:fa:44:5a:ec:25:58:82:42:d1:21:a1:
c3:50:1b:98:e8:d2:3a:6b:d2:52:2b:30:a9:3c:ab:
06:4c:02:75:d3:76:99:ae:c1:8a:f0:b9:50:88:48:
b5:18:02:73:c2:60:82:3c:24:f4:bc:4a:39:47:b6:
d5:a6:fa:eb:71:6f:9e:27:38:52:d3:2d:b3:1a:50:
d1:5a:ca:01:30:bb:60:8d:62:58:a9:1e:7b:ea:2c:
46:b5:a0:df:37:90:22:48:6b:84:fb:10:e9:1f:24:
fa:13:94:2d:be:2c:dc:67:42:f3:06:f3:c0:03:e6:
50:6f:9b:11:ed:5c:a6:32:e0:ad:46:37:17:66:fb:
9d:c8:47:a0:ba:c2:c3:5c:bf:ca:b9:6b:b8:b8:c9:
2d:76:a7:f8:a0:fb:2d:74:b9:9a:e9:56:df:9c:c8:
f3:4b:db:6d:38:8b:47:d4:2f:aa:48:dd:2d:cd:00:
30:d3:ef:17:e5:d1:65:4e:31:c4:9b:f2:7d:a7:7f:
72:b0:af:2f:c5:03:e4:c0:17:d9:39:03:a5:f4:ca:
0c:28:2c:54:a9:42:b4:2c:35:a1:c3:25:69:c1:16:
f6:ca:c1:89:d7:bf:c1:0a:1b:ad:26:e1:7a:74:c8:
ff:4b:c0:c0:95:30:ad:01:59:68:96:04:74:48:ab:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:36:32:9D:2D:60:42:7E:81:60:74:5D:83:33:F5:B2:01:76:4D
X509v3 Authority Key Identifier:
keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/212A832AD7E311EF86266212C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ef:98:9e:42:52:21:07:e1:93:5e:1b:52:6a:65:f6:bc:0d:
53:40:d3:ba:0c:5a:ec:4d:a5:02:82:37:63:2d:48:da:12:95:
ed:f3:aa:0c:87:bc:aa:ea:7f:fb:64:40:ac:97:12:e0:b9:c7:
3f:c3:34:83:c2:2d:da:ef:87:c9:34:42:f4:b1:84:37:cb:fa:
45:8c:44:4b:d8:d3:68:a2:8b:79:56:86:92:5a:30:95:fb:91:
1e:8a:df:1d:92:70:23:49:33:d4:1d:f4:f1:83:66:68:36:a5:
47:75:ec:f5:20:08:4a:b4:12:4c:80:e4:c3:00:49:50:e3:d1:
e6:19:23:11:54:9a:04:25:73:9d:70:d0:eb:54:e7:33:6b:0d:
d4:b8:11:6c:9b:0c:c6:78:45:eb:7e:f4:06:b0:1c:aa:d7:50:
f5:9b:22:ff:b3:4d:07:45:5f:2b:80:07:86:5e:f4:35:6a:99:
de:f4:79:57:cc:a3:a1:37:c8:9e:76:dc:62:8c:c0:12:d3:7c:
f3:ee:bf:90:41:5e:7c:fc:e8:9d:04:56:f4:9f:dc:00:56:ab:
2c:a7:fb:dd:1f:77:92:b6:80:72:17:8c:1c:6b:db:89:06:63:
19:67:5c:25:18:6a:4d:8c:1a:13:67:a1:18:14:24:7e:85:11:
23:fb:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:19:04 2025 by rpki-client