Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/01D7E35CBC8411EFA72EDB72C4F9AE02.roa
File: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (raw, json)
Hash identifier: Q2O3UQQcNoLM1v/zHql7wsFe9RZlWk5/+eqvd3Q27EE=
Subject key identifier: DC:9C:38:BA:2F:8A:98:AD:3E:6F:5B:FD:F3:8C:10:B0:57:05:7B:54
Certificate issuer: /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial: 10
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/01D7E35CBC8411EFA72EDB72C4F9AE02.roa
Signing time: Tue 17 Dec 2024 14:34:22 +0000
ROA not before: Tue 17 Dec 2024 14:34:22 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 134424
IP address blocks: 160.187.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91879AC
Validity
Not Before: Dec 17 14:34:22 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67618bee-a12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:ae:42:ed:9e:d0:ea:0c:c7:8d:15:95:80:
70:fc:7a:d9:16:75:78:cf:fa:16:20:11:99:9c:20:
8b:6f:74:2e:e0:69:1f:87:8a:5e:ea:ed:4a:6d:f3:
cf:96:ed:18:3c:80:9f:af:ca:c7:ef:7d:1a:98:8b:
8a:eb:0d:b9:b5:48:50:46:be:73:56:87:0f:f3:02:
de:10:2b:1e:04:09:fc:5c:04:4e:f3:b4:8f:aa:5f:
73:e9:20:08:91:59:56:ae:1f:84:43:ae:9f:95:68:
f8:c3:30:da:84:7c:9d:76:1c:ca:eb:b3:52:4c:ec:
1b:6d:3e:03:9d:5b:12:ae:5e:3a:51:a4:00:0e:d0:
bb:b9:16:5d:6c:92:04:18:a1:44:a2:51:7d:cc:3e:
1c:f2:24:d1:d5:2e:c0:57:92:5d:d2:91:a7:33:00:
ad:41:a8:b8:85:9e:cf:08:a0:70:ba:3b:69:b9:19:
ba:97:07:60:e9:14:47:62:ab:a3:49:a1:23:13:8c:
06:0f:3c:8b:2f:9b:ee:b7:63:12:b6:20:3b:f9:6b:
65:bc:ac:af:35:8a:ed:78:a3:56:22:30:82:da:51:
6a:92:0c:fa:c5:98:4c:34:c6:7c:46:3d:e3:16:33:
17:34:52:38:77:dd:18:8c:da:47:55:6d:a1:ab:7e:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:38:BA:2F:8A:98:AD:3E:6F:5B:FD:F3:8C:10:B0:57:05:7B:54
X509v3 Authority Key Identifier:
keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/01D7E35CBC8411EFA72EDB72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.109.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:df:db:b2:16:0a:ac:fb:40:5c:7f:6c:db:17:09:c4:04:db:
78:76:63:25:96:5a:2e:9a:4c:c7:4b:6b:8b:39:b8:5b:45:81:
d5:f9:e4:43:3c:42:d0:26:37:76:e9:3f:42:04:b4:b5:3c:25:
ab:ba:07:14:37:78:ee:43:c0:65:8d:f1:9d:4f:24:e1:f2:87:
d3:b3:f6:20:2d:f8:b4:a7:5a:cf:5d:11:82:88:27:a0:0d:a6:
be:12:58:ef:83:7d:71:d4:2c:2c:97:b5:46:57:1d:9b:c0:78:
82:b7:7a:b1:ab:94:df:af:36:55:2a:0b:57:63:df:36:73:65:
44:74:99:fc:1d:fe:b9:19:6b:10:22:f0:1b:f5:46:03:3d:b3:
1e:b0:e4:9d:75:f4:2c:da:95:8b:d0:fb:d2:70:77:79:37:f8:
d7:3c:6d:cb:20:2a:61:c1:b9:48:99:e8:8c:49:00:76:5e:aa:
af:49:75:a6:0d:82:f6:59:4f:ed:81:05:d9:1a:0c:e3:13:12:
00:ce:42:30:27:33:71:86:71:d4:e5:e2:d9:5d:fb:02:ba:1f:
87:2f:5b:7d:12:9c:d3:25:e6:a5:9a:93:ca:64:86:f1:8e:1e:
c3:a2:18:ed:54:ca:78:8d:ce:00:11:ef:52:5a:0b:ae:37:9c:
8b:bf:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:29:09 2025 by rpki-client