Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9DDB0A72798611EFA1C4AC37C4F9AE02.roa
File: 9DDB0A72798611EFA1C4AC37C4F9AE02.roa (raw, json)
Hash identifier: DBtg83+i5qy3yACRedGiPQ5vuqvQ/PvK53qPlOxg7P8=
Subject key identifier: 1F:49:3E:85:93:89:40:8A:00:ED:91:52:DB:E9:10:1F:8D:B7:8E:B4
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1C05
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9DDB0A72798611EFA1C4AC37C4F9AE02.roa
Signing time: Fri 29 Nov 2024 06:02:49 +0000
ROA not before: Fri 29 Nov 2024 06:02:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140171
IP address blocks: 160.30.214.0/23 maxlen: 24
160.187.82.0/24 maxlen: 24
160.187.83.0/24 maxlen: 24
160.187.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7173 (0x1c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 29 06:02:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67495909-8aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:e2:ed:72:62:09:fa:21:15:a5:ec:75:21:
20:fe:44:da:0c:82:d0:84:0b:90:36:e9:f7:b6:b2:
04:77:bf:57:3b:51:6b:37:a7:7d:8d:44:84:16:a9:
c8:76:4c:a6:b3:8c:f1:f2:e9:33:b0:8e:6b:c9:02:
06:a6:7c:e5:ce:88:2b:22:74:b9:18:93:de:24:3e:
9e:77:6d:af:7a:5d:fe:ec:c3:6c:c6:06:68:f7:2e:
1c:9c:31:24:f6:bb:63:7a:6e:61:09:88:5c:6d:bb:
5e:f8:51:7b:c3:f0:f4:16:54:92:73:d0:8b:84:9c:
3b:02:66:c5:21:d6:aa:5b:f4:b4:56:dd:40:d4:07:
c3:4b:a2:42:5d:8a:db:c6:ea:c7:4b:64:85:fc:a4:
58:4c:b2:85:84:a8:ce:bf:11:52:11:79:68:44:b0:
e1:b2:78:48:d5:c2:87:d9:6b:28:5e:04:8d:dc:76:
9e:1b:e3:03:19:ab:15:b9:5c:83:55:33:c8:08:0f:
29:cc:51:11:a6:ce:7e:4c:92:d4:3a:7b:00:9b:9e:
d8:84:8e:ed:c7:bb:cc:b8:35:2f:35:71:41:6b:fd:
9d:72:13:46:75:ed:f2:52:ac:03:3c:25:ca:9f:ea:
09:06:ca:19:a6:4e:b1:41:5d:32:7a:b2:2e:e6:51:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:3E:85:93:89:40:8A:00:ED:91:52:DB:E9:10:1F:8D:B7:8E:B4
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9DDB0A72798611EFA1C4AC37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.214.0/23
160.187.82.0/23
160.187.140.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:0b:8a:ee:c3:1e:bb:3f:ce:ab:b3:42:03:07:27:98:36:ab:
a8:e1:99:88:0b:5f:19:62:b4:cf:82:56:c2:d0:eb:e8:69:a2:
87:cf:74:ed:c1:30:6b:c6:9e:83:1f:cd:a4:d3:f8:c4:9a:85:
00:85:1f:3a:20:6c:98:81:b4:c6:85:50:50:1b:92:48:8c:9e:
c8:02:0c:82:85:a3:2e:08:5a:f1:50:38:53:c8:5e:d2:0e:69:
c6:f2:2d:f8:a0:2f:69:f0:9c:b6:2e:d9:d7:de:e6:f2:94:c4:
96:c0:6b:27:26:f7:96:57:24:6c:22:a5:c4:43:25:ac:c7:5c:
94:80:4c:cb:50:86:db:f8:25:25:44:ec:39:54:93:2f:57:84:
78:1a:67:82:e4:96:18:59:1d:f9:ec:0a:da:8a:af:37:3a:72:
87:5b:59:23:8f:9e:66:5c:5a:d4:6d:73:2e:37:f6:73:2e:86:
eb:c6:0f:94:6b:a5:14:73:e2:1c:d5:26:7d:a8:8a:e1:8c:16:
e0:cd:4a:02:c5:cf:4d:5e:99:06:3d:b8:dd:d1:c0:7c:f2:fa:
db:56:12:66:19:c6:7f:17:be:75:f0:52:fb:f2:d2:4d:76:a6:
50:96:b1:bc:1a:c6:e0:39:fa:1f:ad:43:83:cd:a2:d5:84:98:
41:7e:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:16:58 2025 by rpki-client