Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/547741A8B06711EFBE408C69C4F9AE02.roa
File: 547741A8B06711EFBE408C69C4F9AE02.roa (raw, json)
Hash identifier: i8dZDKV8PtrKNq1eldbMoX/OaY3EC1wYSzbNcbAfTy4=
Subject key identifier: 13:2E:A7:0B:A2:F4:12:4C:BC:9F:56:C7:9D:FF:E2:94:AD:3E:DF:B3
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1C0C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/547741A8B06711EFBE408C69C4F9AE02.roa
Signing time: Mon 02 Dec 2024 04:38:52 +0000
ROA not before: Mon 02 Dec 2024 04:38:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153253
IP address blocks: 160.250.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7180 (0x1c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 2 04:38:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674d39db-f9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:9d:1a:f3:9c:0e:fb:62:4b:a7:73:9c:f0:
21:f0:8f:69:73:aa:d3:d1:11:08:22:b6:ed:b5:96:
1d:51:8b:c6:7b:6c:7f:e4:d3:0e:bf:b0:cc:29:aa:
af:25:1e:0b:64:eb:5d:ae:d8:7d:e7:c5:3e:e4:e4:
c2:86:72:1d:4b:8f:96:45:d4:73:23:c3:12:88:3a:
3a:01:5a:6c:70:d1:df:fe:ad:88:9e:06:6f:06:bb:
ba:8d:91:b0:e9:25:59:16:cc:dc:b2:97:6e:50:5d:
a5:40:44:7b:dc:d6:11:c2:5d:d7:48:96:31:59:5f:
3a:59:1a:6c:e0:7e:6d:3c:28:a4:98:e3:50:e4:58:
31:21:f1:3e:44:f7:0c:dd:2f:8c:a5:63:c0:c5:b4:
fa:c0:fb:8c:13:f2:19:1f:61:a9:10:e2:32:a0:a1:
8e:15:de:f2:f6:64:8f:46:98:b5:9c:ee:0f:c3:21:
21:15:ed:d7:4c:96:91:b0:84:44:6f:22:73:86:6b:
f1:85:87:59:c1:fa:97:af:5e:6e:01:df:8f:2c:5c:
68:b2:f2:6e:7a:b8:b4:d7:91:cc:38:8d:08:0d:13:
b2:76:14:17:a8:2d:c7:25:d2:ec:6b:8c:f6:d9:94:
cc:23:c5:05:a3:d5:6e:5c:fe:fe:ff:a8:c9:ec:d3:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:A7:0B:A2:F4:12:4C:BC:9F:56:C7:9D:FF:E2:94:AD:3E:DF:B3
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/547741A8B06711EFBE408C69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.118.0/23
Signature Algorithm: sha256WithRSAEncryption
78:16:3a:69:b6:0c:04:a9:05:87:cf:41:96:85:62:63:71:fc:
be:f4:95:70:91:2f:34:bc:4c:10:07:e1:a3:17:1d:74:67:5e:
4f:8e:6f:61:22:95:4f:7b:1b:73:a2:eb:45:69:56:29:38:c0:
a3:f0:7a:ef:98:e6:a2:80:f6:5e:26:b8:4b:d8:c5:30:8b:ef:
ab:5d:31:62:9b:df:49:47:2a:70:76:40:9c:e1:1a:86:4f:9d:
0a:81:28:bc:86:80:c7:fe:9f:03:03:84:0a:da:5c:87:89:0a:
86:10:73:70:8f:48:17:72:05:2f:8f:e6:bc:a5:5e:86:af:b6:
95:68:78:94:b0:87:a1:7b:0a:79:87:68:61:cc:e2:b1:f1:8a:
6c:2f:f1:4f:b5:51:c3:a8:4e:bc:72:79:84:35:65:67:a9:7b:
54:ca:02:27:61:57:fb:6e:a9:cc:d7:71:54:ce:0b:8d:bc:d5:
8b:5b:09:eb:01:16:8e:e7:36:2d:38:2f:7c:7c:93:bc:d1:05:
c6:7d:7e:21:15:9b:ac:4a:11:bf:7a:40:61:79:6d:8b:de:7f:
31:b0:6e:ab:f6:3d:b2:ef:37:4d:8d:58:e1:a3:6b:18:84:89:
b6:82:d1:89:8e:72:04:9d:d0:95:86:f4:78:15:86:61:97:98:
69:ca:7f:ba
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQxMjAyMDQzODUyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRkMzlkYi1mOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4O6dGvOcDvtiS6dznPAh8I9pc6rT0REIIrbttZYdUYvGe2x/5NMOv7DMKaqv
JR4LZOtdrth958U+5OTChnIdS4+WRdRzI8MSiDo6AVpscNHf/q2IngZvBru6jZGw
6SVZFszcspduUF2lQER73NYRwl3XSJYxWV86WRps4H5tPCikmONQ5FgxIfE+RPcM
3S+MpWPAxbT6wPuME/IZH2GpEOIyoKGOFd7y9mSPRpi1nO4PwyEhFe3XTJaRsIRE
byJzhmvxhYdZwfqXr15uAd+PLFxosvJueri015HMOI0IDROydhQXqC3HJdLsa4z2
2ZTMI8UFo9VuXP7+/6jJ7NOqbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBMupwui
9BJMvJ9Wx53/4pStPt+zMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTQ3NzQxQThC
MDY3MTFFRkJFNDA4QzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGg+nYwDQYJKoZIhvcNAQELBQADggEBAHgWOmm2DASpBYfP
QZaFYmNx/L70lXCRLzS8TBAH4aMXHXRnXk+Ob2EilU97G3Oi60VpVik4wKPweu+Y
5qKA9l4muEvYxTCL76tdMWKb30lHKnB2QJzhGoZPnQqBKLyGgMf+nwMDhAraXIeJ
CoYQc3CPSBdyBS+P5rylXoavtpVoeJSwh6F7CnmHaGHM4rHximwv8U+1UcOoTrxy
eYQ1ZWepe1TKAidhV/tuqczXcVTOC4281YtbCesBFo7nNi04L3x8k7zRBcZ9fiEV
m6xKEb96QGF5bYvefzGwbqv2PbLvN02NWOGjaxiEibaC0YmOcgSd0JWG9HgVhmGX
mGnKf7o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:03 2025 by rpki-client