Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/E7780BD6D17411EE87F7325DC4F9AE02.roa
File: E7780BD6D17411EE87F7325DC4F9AE02.roa (raw, json)
Hash identifier: 2EzfaEZcvEqdfL3o4m+mh66hiNoNCrlQkH2IaWK10g8=
Subject key identifier: 4A:80:E8:E4:B2:8B:EF:76:CE:0E:9A:27:60:F3:23:FB:16:CA:18:D2
Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial: CC
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/E7780BD6D17411EE87F7325DC4F9AE02.roa
Signing time: Fri 07 Mar 2025 04:52:00 +0000
ROA not before: Fri 07 Mar 2025 04:52:00 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152585
IP address blocks: 157.20.77.0/24 maxlen: 24
160.191.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249
Validity
Not Before: Mar 7 04:52:00 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ca7b70-89da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:e3:ef:42:1a:b9:70:c9:9c:24:92:a9:d3:
e8:9a:7f:a5:99:31:30:a1:d1:02:b9:98:60:45:a8:
09:88:bb:0d:00:88:73:b1:e2:e8:64:b7:c1:fe:c3:
eb:dd:28:3f:3f:8d:10:f5:cb:be:78:37:26:93:0f:
0a:e1:b3:fa:69:0f:96:f2:2b:97:ad:9c:08:d1:f7:
eb:e0:47:71:4e:37:3e:f7:78:2b:c5:e3:9b:57:6a:
22:f3:14:66:25:34:5d:71:02:44:a5:59:2b:a6:82:
af:4b:88:b5:0a:80:d6:d1:9e:f1:0f:63:5d:ef:fb:
d5:79:79:74:fd:a8:c5:14:25:c3:6e:da:16:0e:f9:
5e:fd:4e:86:df:19:14:65:e9:6c:e3:80:19:6e:27:
dc:84:c8:3a:ad:1b:4b:8a:b2:ea:e7:c6:0f:11:40:
23:32:ed:76:dd:7f:fc:55:c3:b1:98:59:8d:3a:ba:
95:4d:7e:74:a6:49:4c:e3:de:42:91:ed:bd:55:d0:
d4:29:93:5d:73:b1:eb:40:92:c4:e6:c5:a3:c2:f5:
e1:e7:8a:dd:11:0b:b1:a5:0c:ef:27:20:d5:28:0c:
3c:77:5f:0f:0d:c6:f5:7e:a3:1c:40:be:54:a5:51:
ed:f6:07:1d:37:99:5a:73:f8:27:4f:9d:88:cb:41:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:E8:E4:B2:8B:EF:76:CE:0E:9A:27:60:F3:23:FB:16:CA:18:D2
X509v3 Authority Key Identifier:
keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/E7780BD6D17411EE87F7325DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.77.0/24
160.191.66.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f4:57:42:95:f9:d7:0a:77:84:8b:f4:99:f1:0f:ee:a1:9e:
ef:97:9d:6e:70:9c:ac:88:40:28:f0:56:83:61:5e:44:58:df:
ac:90:e5:cb:cc:b5:a5:e4:c5:68:6f:cd:45:df:5d:05:4f:b3:
17:2b:d8:ee:be:8a:9d:a7:c1:32:e9:63:7c:41:33:88:0c:a1:
5f:8f:0f:b1:f3:a1:ce:ab:75:9c:48:7c:a5:5e:fe:42:da:a1:
85:ce:3d:26:07:d0:81:45:ff:25:1c:a6:7e:0a:4a:41:a8:db:
ae:34:50:e0:e9:c2:95:ba:6b:4e:14:49:01:07:f8:88:78:f8:
e8:b1:9a:4a:90:96:69:fc:bc:65:e9:56:88:6f:0c:ed:11:42:
e7:e4:3d:ac:c3:01:3e:cf:f1:8b:ca:5b:20:bf:95:dd:32:a3:
2d:49:17:df:89:ba:99:15:a3:d2:22:fc:60:3f:b8:3f:39:50:
54:aa:67:6d:ca:28:9f:29:c9:99:8f:99:4c:f1:9e:8f:80:0a:
7c:87:8d:41:da:a3:a3:90:04:44:aa:56:99:c4:4f:b3:29:ca:
79:c1:6c:0f:a7:a5:d6:7b:2f:d8:38:a4:2c:8a:24:53:68:49:
80:9f:3a:43:a9:4a:ec:63:67:8d:9a:46:1a:36:9c:3a:bf:22:
83:26:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:08:15 2025 by rpki-client