Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
File: 2B4804B845B211EF9B812019C4F9AE02.roa (raw, json)
Hash identifier: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=
Subject key identifier: 84:A9:20:E3:0B:E2:81:B9:3C:C4:0C:09:99:0E:E3:C4:8C:31:BE:FD
Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial: 5D
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
Signing time: Thu 09 Jan 2025 05:20:06 +0000
ROA not before: Thu 09 Jan 2025 05:20:06 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152317
IP address blocks: 157.10.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED2B
Validity
Not Before: Jan 9 05:20:06 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677f5c85-c080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:4f:9c:38:c1:35:96:8a:b2:e6:14:e4:74:
0e:df:76:2c:4d:de:fb:c8:b6:d4:f4:cf:68:9b:0f:
47:cd:7b:59:01:83:5c:ee:14:f4:3f:fd:13:69:d4:
ad:2f:bb:20:84:d6:1d:64:f1:50:9a:fd:64:69:1b:
08:50:e4:08:b1:e8:9b:e5:b7:4f:36:c3:88:b4:3a:
93:84:35:0a:7e:77:c4:e9:a2:f7:9d:ef:3d:1f:f9:
5f:e3:0b:75:cf:58:be:40:a9:52:21:cd:4b:fd:a6:
fe:51:4c:d8:c6:5c:8d:dc:6d:66:7f:f6:0d:b0:28:
1c:26:86:e1:a0:61:a2:0f:c9:f5:d8:04:4a:ae:36:
fb:b5:bb:52:e0:6f:87:22:f6:2e:86:2e:4a:70:dd:
87:76:80:44:f4:36:10:24:61:d4:1d:28:1a:6d:84:
b5:37:81:bc:36:c1:bf:99:3b:e4:93:7c:27:51:c9:
ca:af:e0:bd:d7:5b:f6:99:77:c2:72:dd:d1:ed:db:
d5:5f:43:34:e6:0f:9b:36:db:38:7d:c3:92:83:7a:
10:43:c5:18:5f:42:6f:dd:c2:52:f7:0b:34:e8:e9:
ea:72:49:0b:dc:4f:b6:35:da:55:d8:ee:84:2b:80:
66:de:a4:3f:18:76:65:d9:3a:e5:bf:cf:36:e2:8d:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:20:E3:0B:E2:81:B9:3C:C4:0C:09:99:0E:E3:C4:8C:31:BE:FD
X509v3 Authority Key Identifier:
keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.122.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:e1:33:a1:c3:fd:3e:9f:a5:49:b7:94:0f:d4:2d:97:1f:2c:
5e:e2:d7:2e:23:59:da:af:7a:49:37:f9:1f:94:8c:25:3e:05:
3d:ef:cf:10:b8:b7:42:9c:82:81:48:0f:8c:cf:bb:01:cd:1d:
05:fb:91:4a:c8:38:81:7a:6d:ef:d2:4c:0a:2a:bf:72:94:51:
86:41:9e:7c:db:4c:ac:73:03:80:a0:01:8c:13:43:a7:49:f1:
4a:9d:1e:63:34:4e:7b:19:85:2d:d3:ec:3d:bb:c8:86:83:c5:
3b:38:4d:24:89:24:7b:bb:5e:74:7c:f1:3e:04:d5:fd:fb:88:
94:e5:e6:4f:9e:8f:12:21:18:0b:7f:22:32:94:94:fa:28:14:
e8:50:70:44:26:29:0c:f6:4a:9e:46:25:92:ec:c0:90:0c:4b:
b6:ef:6b:1b:40:df:42:a6:81:ad:44:95:30:aa:7f:87:65:f2:
c7:19:58:70:1a:fe:45:78:e2:47:83:88:21:d7:c1:cd:13:1d:
1d:74:3f:f1:3d:70:3a:f0:40:f6:33:8c:0b:ab:c0:42:c7:5f:
f3:21:d8:f5:f9:7c:8a:7b:ee:cf:4f:8e:f5:86:df:49:61:c8:
e9:be:d4:66:56:74:a3:fb:a9:92:31:5c:9d:54:12:d1:57:92:
c0:75:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:37:33 2025 by rpki-client