Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa
File: 9A80C87203EB11F0AA408709C4F9AE02.roa (raw, json)
Hash identifier: L1TW7NB2u0bznxEwdQDvjQHqpFShSa6smnYfKg96pVk=
Subject key identifier: 8A:39:7A:D5:DA:8D:9F:40:16:EA:22:F7:7F:35:24:8D:94:4E:98:60
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1CE9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa
Signing time: Wed 19 Mar 2025 08:06:52 +0000
ROA not before: Wed 19 Mar 2025 08:06:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134912
IP address blocks: 160.30.124.0/24 maxlen: 24
160.30.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7401 (0x1ce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 19 08:06:52 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67da7b1b-bbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:37:4f:af:e3:38:3c:5d:27:16:84:1f:91:
5f:84:5b:e4:17:64:e8:5d:b6:25:cc:41:39:cb:24:
c3:54:48:92:b9:2b:94:c0:2c:92:b3:8a:6b:3d:fe:
70:db:46:34:b9:21:58:22:b1:b7:ec:5d:49:88:00:
46:a5:91:63:41:48:37:ca:cf:4a:e4:7d:93:05:bb:
f3:4f:32:20:58:9b:56:02:64:5d:c7:31:0e:aa:c7:
24:e5:b4:6f:9d:97:44:06:18:df:ba:4f:98:d4:21:
32:29:5a:61:d3:76:6d:cd:b5:71:3a:a3:35:a0:74:
9e:a1:f5:7a:a3:ca:7c:7c:cb:a6:99:24:fd:f6:d2:
af:1c:c9:a4:f0:8f:ec:c6:77:6c:ea:08:a3:31:41:
c7:ac:48:85:6d:05:88:17:2f:29:eb:58:6b:16:a6:
b9:0c:c1:f7:ab:07:8f:9c:77:a0:32:2f:b7:e8:3c:
dc:be:99:a8:ef:4d:60:b3:22:76:99:8d:ff:65:b3:
cb:6b:4c:70:ed:fd:bd:20:34:41:21:eb:a6:4f:f9:
1c:81:b2:93:9e:c4:d0:04:84:ef:25:cf:f3:13:da:
ac:82:d7:6b:f0:0c:99:ab:b9:67:d6:a1:e7:7e:03:
92:63:0c:2b:45:01:7c:ab:73:61:91:77:65:73:83:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:39:7A:D5:DA:8D:9F:40:16:EA:22:F7:7F:35:24:8D:94:4E:98:60
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.124.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:db:10:c5:76:2f:56:48:85:f2:9b:4f:fa:fc:87:58:43:21:
e8:31:3e:08:4a:7b:59:7b:f5:4e:74:de:2f:91:d5:98:f4:b1:
49:89:0a:00:90:1f:14:bc:2b:d9:1b:a3:e8:a3:b2:3d:2f:84:
e5:72:61:7e:3b:24:bb:4b:40:95:77:16:f3:58:51:f2:7b:c5:
df:bf:6d:25:9f:03:d1:17:10:a3:84:7e:55:d7:aa:13:fa:2c:
98:69:17:02:aa:1b:74:fa:ec:0d:d1:9e:3a:eb:f9:b9:6c:3d:
82:d8:3a:ae:a8:7c:59:1a:d5:8d:89:15:4f:bd:91:de:a3:a9:
be:35:16:22:92:e2:a3:34:e8:5b:f2:e8:e9:ba:1c:f1:02:60:
43:09:7f:d7:ed:6b:83:6e:94:b8:da:0b:f3:1f:02:45:1e:1f:
64:1f:64:13:0b:2c:f6:d4:95:88:86:72:4a:8b:53:59:f6:4f:
10:04:4e:18:5b:8d:c1:bf:39:f8:e3:ab:84:5d:bf:64:5a:a9:
17:7e:3f:98:46:7f:ac:6b:9a:d6:3e:de:87:f1:1b:1a:d2:c5:
31:93:47:50:3f:5d:3a:a5:76:ed:7b:f2:0b:52:62:61:e3:0d:
5d:d3:16:ea:09:98:11:d1:ff:c2:d7:78:b4:c9:95:bd:99:96:
0c:f5:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:04:56 2025 by rpki-client