Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
File: 29810CBE69B211EF9455261FC4F9AE02.roa (raw, json)
Hash identifier: 0G8uGJ4dZCfvjnpW8PUW3boGLhZJWfk4sCRw/L4gD5s=
Subject key identifier: AD:30:51:72:57:D6:AB:FE:5D:DA:27:1E:5D:F7:9E:A8:20:9C:A6:72
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1B27
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
Signing time: Tue 03 Sep 2024 05:05:40 +0000
ROA not before: Tue 03 Sep 2024 05:05:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135701
IP address blocks: 160.30.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6951 (0x1b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 3 05:05:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66d69923-59d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:43:e3:ec:8c:8c:be:54:b7:ea:45:c6:33:
a9:4e:5e:0f:83:d6:85:b2:89:d1:10:5b:c4:42:90:
69:4b:8b:36:78:76:45:1f:78:53:7a:d0:77:aa:07:
b8:65:05:9e:82:97:b0:b9:39:c8:fe:60:d9:f5:d9:
fe:dc:ef:90:89:07:82:2f:0e:f2:17:38:52:b9:65:
7c:17:b1:e0:8d:f7:b4:58:a0:26:db:44:2d:a1:cb:
2f:e9:95:a4:f4:a9:4b:58:67:38:d8:a7:79:5b:2d:
fa:42:db:2d:b4:8c:42:d0:b3:5f:40:86:6e:1c:71:
ba:15:49:a0:8d:1c:a5:62:da:22:52:30:30:da:46:
d6:ec:13:90:c8:ff:0f:66:65:8c:6f:3d:57:49:80:
b6:35:07:43:8a:3b:dc:01:8a:b7:bb:ad:9a:9a:75:
1d:73:34:80:3f:c0:99:cd:9a:b8:bd:fb:cb:e9:a6:
9e:05:fd:8a:db:59:c2:f7:b6:54:ff:a3:77:84:2e:
93:e4:51:a2:82:3c:15:2e:37:77:de:d9:30:11:20:
df:78:c4:8d:ff:fb:4f:97:5b:d6:de:ac:65:a2:5c:
ef:26:57:9a:c2:45:6f:e9:e3:45:49:4e:38:51:24:
67:6e:51:0e:26:81:b5:0a:9f:fc:2e:21:a6:11:d5:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:30:51:72:57:D6:AB:FE:5D:DA:27:1E:5D:F7:9E:A8:20:9C:A6:72
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.144.0/23
Signature Algorithm: sha256WithRSAEncryption
85:7f:54:5e:5c:68:f9:49:5e:ae:48:c8:79:bf:f7:1d:93:17:
dd:a2:93:9c:72:13:37:31:31:52:1b:12:65:84:2f:ad:fe:3d:
ba:3b:ce:1f:83:8d:c3:13:d9:6a:49:de:a2:31:6c:54:a3:a2:
e7:dc:e4:65:99:57:5a:26:2d:c0:91:10:49:72:c6:df:10:2e:
ac:e1:81:d0:65:9a:35:9f:14:07:33:85:b8:7a:39:0a:c6:ba:
73:76:76:00:a5:b8:0c:e4:15:8a:56:66:6b:76:0f:02:fc:8d:
72:d3:e4:1a:f1:56:63:67:d9:65:67:a2:f6:23:78:92:f8:96:
58:ba:21:c6:e9:ff:5f:23:e7:9f:80:d3:e4:b8:2f:74:0a:91:
e8:38:94:68:62:8d:fd:e1:44:17:b4:18:7b:28:a4:cc:b8:0a:
c3:52:2f:d5:16:73:20:b2:d2:9f:6e:9d:09:f6:25:94:d8:a1:
81:f3:fd:eb:52:67:b4:fa:9b:10:cc:21:11:37:c5:06:6c:92:
10:9f:f5:43:40:0a:4d:a9:99:9b:e1:7d:9f:8f:38:1e:36:d3:
10:ae:46:98:9f:f9:81:0a:c6:e0:31:30:b2:05:c8:36:bf:63:
85:86:5b:a0:4f:6f:71:b4:46:94:b0:b2:9c:a1:53:cc:80:5d:
6d:6b:42:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:17:42 2025 by rpki-client