Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/35B7F66EAB1B11EF838F5C5BC4F9AE02.roa
File: 35B7F66EAB1B11EF838F5C5BC4F9AE02.roa (raw, json)
Hash identifier: 4tGRzPD2QOajXwToA2iovZ+7BDe8jsGQfdKqbtKoTdM=
Subject key identifier: D5:2B:B8:C1:A6:87:B1:1E:F3:BF:2A:81:A2:C0:1D:10:2D:9E:9F:D1
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1BF7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/35B7F66EAB1B11EF838F5C5BC4F9AE02.roa
Signing time: Mon 25 Nov 2024 10:51:22 +0000
ROA not before: Mon 25 Nov 2024 10:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152541
IP address blocks: 160.25.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7159 (0x1bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 25 10:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674456aa-4c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:3b:4e:77:99:a8:09:3f:37:85:90:9d:66:
3b:f7:ba:25:98:12:cd:00:3d:e9:85:d4:35:a9:ed:
2d:ca:3b:d8:5b:69:56:c7:d0:1e:b0:20:0f:de:7c:
7e:08:b5:3d:7a:1d:8c:d5:06:3c:6b:eb:62:e7:82:
7b:7f:18:52:a5:42:1a:0d:d2:e4:76:65:0f:3a:e9:
24:99:a8:75:d1:48:96:d6:ed:b5:45:5a:85:fc:3e:
cf:04:48:ce:8a:6a:b5:a3:a1:d8:67:2b:a1:d1:03:
2c:63:4f:18:32:e2:1f:3b:46:25:cd:8d:5d:05:37:
fd:69:37:82:8a:84:57:db:22:d6:ce:cd:23:4c:aa:
ee:30:ed:64:e9:50:1e:55:07:58:b9:f2:51:b2:e9:
a6:a7:77:d6:b3:40:c8:00:43:08:30:85:af:86:81:
e3:fb:33:e8:2d:fe:ed:32:37:22:fd:eb:d8:ac:0c:
12:98:7d:b1:d0:76:e6:98:a9:2f:6b:f0:bd:0f:69:
65:a8:92:fa:4c:2c:75:5f:83:a4:32:35:e7:91:75:
93:b0:e8:2c:3a:5a:b1:c3:0a:5a:b4:e0:9b:1a:11:
d9:eb:d8:2e:d3:e2:af:35:29:29:62:d4:bd:38:b8:
19:fb:9b:4e:bc:06:43:17:0a:9e:1a:6b:95:37:1d:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:B8:C1:A6:87:B1:1E:F3:BF:2A:81:A2:C0:1D:10:2D:9E:9F:D1
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/35B7F66EAB1B11EF838F5C5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.28.0/23
Signature Algorithm: sha256WithRSAEncryption
77:f8:32:dc:97:96:20:93:e3:ad:80:7a:82:cf:d8:81:8d:8f:
6f:6a:09:9e:0e:41:d3:47:1d:30:c9:75:2e:cc:2b:5a:93:3e:
a4:bc:b4:46:ce:a2:f0:83:b6:c9:1f:5b:72:40:6d:1d:b4:37:
5b:c7:de:d3:94:53:9c:e9:e4:25:52:2e:6e:a1:6a:3d:e1:12:
4b:0d:3c:49:79:8e:db:93:d1:6f:54:b7:83:ea:f9:ca:bf:cf:
db:59:ad:1e:36:20:7b:33:16:6b:1d:83:a7:c9:22:35:12:a5:
b7:0f:15:cb:86:7b:fe:b7:3a:26:6a:9e:64:56:05:6d:4c:fd:
e5:71:a4:60:77:24:ed:c1:2f:3e:8d:6f:16:2b:d4:f5:0c:a2:
ba:4a:59:31:bb:7c:db:c2:4a:0e:68:d6:27:a3:2b:33:de:57:
23:fe:95:b4:b7:3c:dd:c6:0e:ec:e4:bf:7c:90:15:e5:4e:24:
1b:b9:c1:89:3d:3c:60:84:06:4d:20:e8:67:c9:39:90:66:5f:
8e:6d:7b:24:ba:20:05:56:8e:18:93:20:e2:46:b5:d9:6e:44:
49:0e:86:b7:27:1b:fd:12:82:72:e3:eb:d5:30:74:60:8b:ef:
a0:91:57:e1:e5:b7:0a:8f:d1:d3:21:3c:af:bf:19:f1:49:ae:
86:74:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:17:08 2025 by rpki-client