Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/2F7418BE7C8B11EFAD8D8E0AC4F9AE02.roa
File: 2F7418BE7C8B11EFAD8D8E0AC4F9AE02.roa (raw, json)
Hash identifier: TjvglryUwoGiYospx2nlKVOC+Gwjr/Tq/eiQ+4++Xqo=
Subject key identifier: C9:56:91:E2:F3:A5:C9:21:62:62:D0:77:E8:4D:13:8E:FF:6A:76:F6
Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial: 34
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/2F7418BE7C8B11EFAD8D8E0AC4F9AE02.roa
Signing time: Thu 26 Dec 2024 11:36:55 +0000
ROA not before: Thu 26 Dec 2024 11:36:55 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150142
IP address blocks: 160.187.130.0/24 maxlen: 24
160.187.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05
Validity
Not Before: Dec 26 11:36:55 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=676d3fd7-9d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:28:b8:7e:5f:10:8f:ed:8d:42:59:c8:49:
1b:93:69:86:c6:46:09:d0:59:82:f7:dd:9d:20:2f:
1b:34:90:8f:8b:fd:a3:5d:cd:47:c0:16:10:1b:a7:
17:4f:02:d6:0d:7a:7f:e2:7b:27:69:a9:27:f0:51:
9f:ad:81:74:1f:4a:5f:17:5b:52:65:6a:28:8c:22:
27:ee:60:9a:65:84:52:99:be:9a:6d:4a:88:ac:a6:
c8:db:4b:c9:6e:3c:31:42:f1:6d:16:83:f2:1c:62:
61:27:0a:eb:95:76:de:e2:b1:13:3f:39:a1:74:36:
b9:d1:9d:7d:1e:ce:f4:23:59:19:dc:bc:48:1d:f7:
38:ba:53:e9:4a:34:27:7e:7a:c7:7e:3f:0b:45:27:
e5:d1:d8:c1:49:62:e7:59:d2:12:cb:7f:8e:f7:fa:
94:55:5a:55:80:16:03:ee:ec:19:1d:9a:e6:31:34:
1c:87:90:c7:36:5b:d6:b7:5a:d8:62:c1:e6:5b:64:
2b:84:3b:74:57:e1:4f:04:4c:e8:49:0d:9d:6f:80:
cd:23:a7:06:8d:16:e5:72:ae:d4:0c:a7:7f:74:f9:
cd:c4:31:19:7d:9e:2e:05:68:a7:d5:63:09:a9:58:
8d:5d:c7:eb:8b:63:99:d0:fb:21:f7:c3:7e:9f:8b:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:56:91:E2:F3:A5:C9:21:62:62:D0:77:E8:4D:13:8E:FF:6A:76:F6
X509v3 Authority Key Identifier:
keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/2F7418BE7C8B11EFAD8D8E0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.130.0/23
Signature Algorithm: sha256WithRSAEncryption
23:5e:fe:d8:78:77:50:b9:48:a4:66:a4:00:bc:71:58:9b:d8:
47:8f:57:79:6d:24:48:74:f1:66:39:50:b1:10:a9:23:46:53:
e3:43:4d:e5:e9:84:8f:54:59:c1:18:c0:ac:a6:dd:6d:1d:e3:
9a:62:06:39:93:79:05:2f:e4:83:48:f0:66:36:cc:cd:a8:ec:
5b:49:7c:e6:a2:e6:b9:af:9a:0a:e4:f1:92:04:ce:4c:c1:fe:
4a:fa:b4:95:c7:b1:d7:94:95:62:4b:0a:06:02:51:f9:ab:67:
c5:ef:f5:8c:7f:ac:ac:93:dc:75:51:55:1c:52:dc:16:07:e5:
fd:8c:d5:02:9b:5a:fa:72:64:8d:96:b5:5d:f2:87:1d:c3:a4:
b9:7f:8d:ce:36:93:7c:24:a0:71:b1:f8:6e:dd:c3:12:62:e4:
58:a7:73:35:7c:c2:f0:d8:7f:33:41:bc:0e:15:ec:90:85:a9:
a9:c5:76:d7:fb:18:c1:70:84:02:f1:d8:60:89:25:ac:fe:a8:
ee:35:e2:8e:a6:d2:94:75:55:f2:8a:7b:34:91:ae:90:30:1e:
b9:cf:58:ad:30:82:9c:a8:7b:ee:3a:3c:e7:1f:7c:c1:45:f0:
f6:da:79:c2:68:73:87:88:ef:9b:f4:07:23:dc:94:f7:14:e1:
ac:40:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:57:47 2025 by rpki-client