Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
File: 58256D9AC4A711EEBE4ED82BC4F9AE02.roa (raw, json)
Hash identifier: 16yzlRAUCbN2L2nGaZ3zfiT9Z4v6PepeACDznHhCgZg=
Subject key identifier: CA:93:14:BC:6B:DB:7E:CA:3F:F0:91:97:88:E0:83:C7:FD:50:F7:FE
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 19F8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
Signing time: Thu 30 May 2024 15:52:44 +0000
ROA not before: Thu 30 May 2024 15:52:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150099
IP address blocks: 157.10.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6648 (0x19f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:52:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a0cb-9730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:d4:d6:f8:cc:eb:dc:e9:b0:f7:1b:de:cc:
37:97:eb:b5:4b:3f:93:23:af:62:a5:47:e9:31:db:
60:3f:3a:16:04:76:7c:28:f6:6d:25:14:3e:5a:f2:
56:06:8d:a3:04:df:74:c0:11:0f:40:ce:06:cb:fa:
74:0f:20:e6:1f:a7:95:4d:79:e7:ee:d5:f2:4d:f5:
c0:2c:9d:63:2d:a9:67:bc:fb:fb:ba:d0:e7:25:a9:
ca:ba:24:8b:3b:c1:ea:c4:74:b9:a8:bc:c3:67:2a:
16:47:16:57:04:f0:e6:15:ab:90:70:f9:5c:6c:4c:
94:b0:cd:ea:ec:8a:1c:da:52:b5:cc:16:52:9c:0f:
20:b3:48:c9:d4:e8:eb:7c:ce:72:72:ba:25:7d:9e:
24:c6:2b:59:d7:f1:ce:ef:a4:1a:6c:ba:5b:df:c4:
36:e2:72:41:48:36:60:79:f0:aa:74:e2:8c:3a:fe:
c0:6b:f7:6b:dc:0c:e2:6c:ab:68:ff:f6:cf:4e:58:
68:04:2a:d4:d7:9f:70:3b:09:9a:39:94:4c:1e:d5:
6e:ab:90:dc:41:ef:5a:a0:31:95:e4:2c:3f:46:86:
85:04:c3:4e:b8:96:b8:ea:82:06:be:ec:4e:cf:b3:
49:ba:ae:f9:8e:15:14:78:d1:57:d6:6a:23:29:ab:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:14:BC:6B:DB:7E:CA:3F:F0:91:97:88:E0:83:C7:FD:50:F7:FE
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:45:4a:31:7c:a8:58:27:f1:fe:61:05:4b:35:cc:11:51:5d:
00:49:b3:36:6f:5a:1f:d2:ca:f6:18:5b:29:15:cb:bc:6b:72:
00:46:0d:0c:e1:2d:97:84:84:c7:73:16:42:a6:66:e0:f0:27:
7c:b0:b4:82:9d:6d:c4:b3:a7:51:17:b0:33:f7:ef:0a:a3:b7:
01:d1:d6:70:30:e5:67:f8:6e:20:14:b6:a9:17:25:47:be:47:
94:23:5f:6e:c6:ab:33:a2:05:4d:7a:c2:4c:ca:d1:03:2c:e7:
3f:f4:47:bc:08:31:d9:39:b7:e3:e1:37:5d:ca:96:83:86:37:
04:3e:71:94:bf:4e:8b:1e:25:31:b8:84:ec:92:8c:18:7e:bd:
d2:c0:4f:8d:26:47:db:f4:94:00:6e:5d:65:9c:e4:c5:53:8b:
d5:6e:ff:55:5c:5a:4b:6b:7c:2f:3b:f3:5f:a9:e5:df:53:3c:
bd:b2:43:39:00:fa:52:4d:2d:2c:70:74:24:5d:13:eb:f8:c3:
59:ce:c7:3a:d5:de:b7:0b:ed:4a:38:29:6a:be:d6:a3:a5:17:
56:bf:7c:7e:d7:73:ce:a1:f0:cc:e4:6f:27:8d:c4:22:60:98:
63:15:65:21:eb:9b:42:57:cb:ca:95:b1:7b:2e:c8:66:1a:c2:
73:e6:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:31 2025 by rpki-client