Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/371753E4C75211EFAC090A85C4F9AE02.roa
File: 371753E4C75211EFAC090A85C4F9AE02.roa (raw, json)
Hash identifier: +AVSXz3SjGAIfotj/pMssdHIlS25VXss5nJnbkCFWic=
Subject key identifier: 5D:A2:F0:12:75:6F:C0:97:43:B8:2E:BC:9B:8F:1D:61:E6:68:D4:D2
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1C5D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/371753E4C75211EFAC090A85C4F9AE02.roa
Signing time: Tue 31 Dec 2024 08:35:40 +0000
ROA not before: Tue 31 Dec 2024 08:35:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150627
IP address blocks: 161.248.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7261 (0x1c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 31 08:35:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6773acdb-d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:3f:00:a7:3b:af:90:7c:04:4f:5a:8d:99:
cc:ae:58:cf:fa:99:94:3b:5e:d5:5d:58:15:93:86:
2f:12:1e:67:d8:e9:70:4f:56:6a:a2:b5:a3:c3:e0:
0e:50:74:da:67:0d:b1:13:ea:9e:1e:ef:28:ad:59:
8f:92:f5:84:4a:f6:4a:71:ba:1c:06:84:51:13:fe:
cd:ad:58:89:34:92:2b:81:c3:f6:f5:8f:cd:48:24:
b4:42:07:61:8c:b0:45:d7:47:e8:06:86:16:70:6c:
61:f5:75:5e:d1:dd:d5:f7:15:3f:76:0e:3c:c0:b9:
b2:73:89:9d:9a:4b:65:87:84:8e:47:c2:12:46:1d:
99:78:fb:09:5d:58:db:c4:ca:1a:fb:64:3d:cf:8d:
71:72:27:53:24:2f:b6:34:7f:63:6f:01:a8:7c:d3:
21:7d:f8:71:2d:c9:a5:b3:ff:47:96:f9:a4:13:b3:
14:ca:ea:83:7a:e7:5b:3d:3a:a0:38:14:6e:81:36:
23:e4:d0:27:da:24:98:98:c2:17:65:63:19:27:6d:
47:89:df:44:2c:b2:53:1b:86:12:db:f0:dc:3f:b4:
d2:13:71:e3:58:54:9c:bb:91:8f:4e:7a:6e:50:b0:
62:44:e8:4e:f4:78:f0:aa:79:7d:2a:0e:a2:84:1e:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:F0:12:75:6F:C0:97:43:B8:2E:BC:9B:8F:1D:61:E6:68:D4:D2
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/371753E4C75211EFAC090A85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.54.0/23
Signature Algorithm: sha256WithRSAEncryption
95:ed:40:4e:44:11:18:c1:5c:32:b0:d4:cd:21:3a:cb:64:7d:
ce:0f:f2:f9:9a:3e:dc:fe:eb:be:aa:2e:f9:46:2d:98:50:3c:
a7:2b:11:eb:d5:04:8b:48:c2:41:80:01:b3:e8:66:e4:10:dc:
95:df:8a:58:23:e1:a0:46:d4:ff:ae:1b:3b:80:ac:2c:66:5d:
fd:b9:b9:60:bc:01:e4:0f:b5:b0:0e:91:e2:f4:c5:38:5c:e5:
47:12:d7:09:1a:29:05:a0:16:f7:ed:c2:26:64:69:a3:b4:f1:
f8:d6:43:6a:4b:b8:18:6b:d9:90:56:41:f8:86:6d:84:28:3c:
b5:84:e1:dc:e9:cf:02:4f:7e:dc:85:62:69:65:f1:20:a0:14:
8c:84:4d:11:bc:6e:c7:ed:43:f3:67:d3:ca:0a:1e:e6:1e:fc:
4c:ca:71:ab:9d:2a:e2:6f:6e:df:ac:d1:ad:6b:51:dc:65:08:
93:d5:e7:eb:57:56:40:6b:53:e7:2e:93:07:ef:f8:c4:c4:a8:
c8:d2:dd:d7:08:34:27:c1:d9:d5:e7:7b:3a:d0:d5:21:b0:68:
a9:a6:8e:5b:8e:63:9c:2d:bd:19:c7:bb:bf:ff:59:5a:e8:b9:
22:87:ab:01:30:3e:65:0a:2b:d5:bb:cb:00:89:9b:db:07:72:
b6:ac:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:42:12 2025 by rpki-client