Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/79A50468BCA911EE8F42E684C4F9AE02.roa
File: 79A50468BCA911EE8F42E684C4F9AE02.roa (raw, json)
Hash identifier: WCxfAGIVMH/a++ZJ4jx3iPBs/9NLSjs9q4Xkq6Czo34=
Subject key identifier: 59:DE:2D:6B:10:C4:08:03:65:5F:08:C4:FC:A0:12:E3:02:BF:00:63
Certificate issuer: /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial: B2
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/79A50468BCA911EE8F42E684C4F9AE02.roa
Signing time: Mon 30 Dec 2024 15:46:39 +0000
ROA not before: Mon 30 Dec 2024 15:46:39 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 151633
IP address blocks: 157.15.50.0/24 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C
Validity
Not Before: Dec 30 15:46:39 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6772c05e-a2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:b6:2f:53:e1:a4:e2:82:9f:3d:1d:db:3d:
9b:42:fe:b7:86:f0:58:d2:87:8f:7a:e5:34:a6:6e:
8d:c9:25:6c:3e:72:9c:bf:2a:e2:f0:8a:15:35:9a:
c9:c1:a8:ae:ef:96:a6:3d:57:c5:67:3d:05:df:7b:
2c:ff:78:84:61:e3:b8:57:c6:f8:ee:25:9e:3f:6b:
3c:e8:70:8f:9c:6c:1c:51:ca:80:a6:93:9c:67:25:
8b:a6:ce:f0:34:27:0e:43:c8:81:1c:f1:ae:b3:94:
d9:56:1b:6e:6a:b2:32:e7:ac:b3:65:d1:14:96:85:
30:e0:54:dc:2a:8f:46:47:72:c8:70:2b:99:3e:1a:
f3:17:74:fd:51:cc:e9:4d:ff:ff:c2:9e:8c:3b:62:
9c:ed:04:45:e7:de:23:ea:9d:45:61:66:47:07:3e:
2a:16:7c:26:1a:cd:48:8c:b7:c5:e9:f9:39:34:b1:
9f:2e:e2:04:a2:d8:8c:bd:7f:14:fd:de:a8:95:41:
c3:4b:e7:eb:22:30:d2:94:38:33:2d:65:00:f8:ae:
fb:a4:18:95:fb:40:be:81:74:d5:0c:a5:19:b5:e0:
03:07:e2:6c:25:f5:fb:08:48:82:fb:30:5a:ab:95:
d9:11:61:77:f9:aa:26:29:00:c6:8a:68:bc:6b:9f:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:2D:6B:10:C4:08:03:65:5F:08:C4:FC:A0:12:E3:02:BF:00:63
X509v3 Authority Key Identifier:
keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/79A50468BCA911EE8F42E684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.50.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6f:89:b3:ed:ac:ad:d8:1b:e9:87:f0:10:3f:5b:d3:f8:3a:
72:10:60:06:ac:5d:26:86:e2:fe:7e:af:1e:bb:63:a2:c8:6b:
8a:c2:47:3f:1d:3e:81:38:bf:a4:54:b3:22:cc:f3:5e:fb:3a:
b5:4e:7d:a3:e3:56:82:c9:1e:ff:45:5d:35:0d:de:61:57:3b:
1b:b4:16:6b:2a:7b:98:ba:01:37:b6:0e:da:41:02:2b:74:ab:
35:a9:d0:38:ea:62:8f:8a:5b:70:d3:cd:9f:54:24:ef:84:af:
ca:5f:20:a8:52:2a:2f:a5:0f:59:05:dd:0c:b6:bb:dc:39:aa:
d6:89:47:e0:38:c6:7f:00:81:80:04:d2:c9:d3:a1:41:2f:e8:
66:07:da:41:63:ad:7d:e7:88:86:4c:b3:f0:65:d8:1d:7a:49:
1b:df:cd:9e:6e:ca:0b:81:d3:f3:44:be:1e:d1:c8:7a:33:96:
35:a1:d2:c4:87:25:3e:ed:55:ba:48:9d:eb:78:e7:3f:41:e3:
3c:20:7f:1d:6a:c7:be:f7:c4:96:81:07:8a:c0:46:68:24:85:
73:8a:7f:bb:4d:1b:43:75:cc:c3:4e:1a:5a:82:9f:07:15:14:
ee:3e:0f:61:4a:7b:58:77:93:7e:c1:c1:1c:8d:e8:6b:b0:02:
fa:2c:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:36 2025 by rpki-client