Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/318E4414FE4D11EFBFE66B1AC4F9AE02.roa
File: 318E4414FE4D11EFBFE66B1AC4F9AE02.roa (raw, json)
Hash identifier: bnz/Gz2cIiz69/78S45wyomzGwSQuid2xoDm6Wpn25U=
Subject key identifier: DA:02:3A:39:33:A2:4C:2E:6D:AC:77:28:A1:FE:C4:98:13:8C:10:B7
Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2
Certificate serial: CE
Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/318E4414FE4D11EFBFE66B1AC4F9AE02.roa
Signing time: Fri 21 Mar 2025 05:11:34 +0000
ROA not before: Fri 21 Mar 2025 05:11:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138032
IP address blocks: 157.20.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159B6F
Validity
Not Before: Mar 21 05:11:34 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67dcf506-4891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:ab:71:a5:02:f0:23:50:ae:83:a4:2d:dc:
0a:4d:ed:f7:f4:e2:9c:b7:0e:91:e8:0e:e4:c1:2d:
5d:1b:c2:08:60:e8:8b:af:4b:63:71:8d:cf:b2:4e:
d2:9e:93:15:cb:36:8a:11:63:95:48:58:4a:c6:8f:
b8:9b:60:f8:07:e0:46:34:4e:3c:87:9e:17:99:d5:
53:9b:20:92:5c:87:47:93:c8:39:fc:50:03:7e:39:
8f:62:b6:44:a8:c6:d3:70:cc:55:65:64:51:37:e9:
34:29:f2:76:40:42:12:bc:9c:83:a5:51:49:81:e8:
c9:21:1e:d2:54:79:f2:a4:c4:36:fe:40:4d:49:4d:
1b:5c:b4:05:99:c9:36:62:04:00:cb:93:8c:18:f3:
7e:06:0f:b6:73:7d:5f:47:22:d8:6d:c9:55:8a:95:
26:31:ea:18:49:cd:c3:eb:6d:a4:d6:52:4b:b8:4a:
a0:c9:a6:be:9c:91:52:13:09:2c:df:78:83:47:87:
29:15:79:3e:27:dd:6f:d2:ec:cb:67:91:fb:03:37:
69:7e:5f:b0:d7:b2:ee:f2:42:83:10:e5:d1:2d:24:
bc:36:fd:d9:e0:86:cd:02:a0:28:cb:d0:39:df:3b:
33:97:64:90:9d:ab:92:97:5c:b1:98:ac:e3:15:21:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:02:3A:39:33:A2:4C:2E:6D:AC:77:28:A1:FE:C4:98:13:8C:10:B7
X509v3 Authority Key Identifier:
keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/318E4414FE4D11EFBFE66B1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.75.0/24
Signature Algorithm: sha256WithRSAEncryption
50:48:08:9e:f1:64:37:36:9c:f8:e9:8c:ff:b7:fc:61:7a:76:
42:a6:3a:8b:0a:81:3b:5c:35:ed:4e:a3:c6:0e:86:49:c3:02:
1b:dd:75:d7:1f:25:21:ce:cf:01:6f:14:f0:f8:fe:de:d6:4c:
47:89:cb:66:3a:63:27:06:b3:3b:93:7e:09:20:e8:2e:61:d2:
b3:e3:cb:8c:1f:7e:4b:28:8e:f7:f3:74:5f:5c:a5:73:a8:cc:
cb:1a:5c:78:92:91:7d:57:aa:09:ce:eb:8f:25:28:d9:93:b4:
6b:a6:49:67:c3:30:17:eb:77:60:98:4c:83:c3:e5:e1:5f:55:
18:01:6b:dc:2b:0f:11:b8:50:5c:5e:6c:0f:d9:7c:c7:ff:ee:
a9:bb:f0:d8:e6:b0:a4:c0:71:3a:22:cd:ed:3c:9a:3f:66:0d:
76:13:0f:58:be:b1:b6:b3:e3:66:b1:11:df:59:88:6f:fa:6d:
c2:cb:91:82:b0:53:55:99:ea:e4:fe:34:ad:f8:3a:4f:42:d9:
12:f0:50:92:19:ee:d9:f4:b8:14:3a:aa:77:e0:b4:65:48:89:
21:8b:90:94:75:ab:ee:be:bd:2a:ae:d7:a1:54:69:80:cf:ff:
0c:45:bd:aa:cd:c0:a9:52:4a:96:74:79:44:de:3f:41:8b:db:
42:9b:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:16:08 2025 by rpki-client