Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa
File: BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa (raw, json)
Hash identifier: jWXaw+vsEqNCSoqrX2PHx2VLs9YbU7riUxGhi8oNLnE=
Subject key identifier: 9D:4C:50:69:F1:81:A2:7F:63:4B:47:8D:8F:91:1D:CE:EB:D5:69:D4
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1C8E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa
Signing time: Tue 21 Jan 2025 11:34:53 +0000
ROA not before: Tue 21 Jan 2025 11:34:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153299
IP address blocks: 161.248.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7310 (0x1c8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 21 11:34:53 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=678f865c-aedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:cd:e1:46:9d:6c:1a:9b:eb:6e:4c:8f:e1:
84:33:83:1d:bc:af:0d:44:5d:73:90:5c:54:07:e3:
01:92:ec:de:4a:e0:5c:70:3d:14:dd:fc:5f:ee:b5:
d0:c7:a6:cc:35:6b:56:f7:80:4a:2d:76:b3:86:8d:
b8:43:56:ff:2e:a6:aa:b8:46:1a:61:ef:2b:00:ad:
1b:bd:c0:b1:5d:34:32:8e:45:33:72:25:94:e8:ae:
77:34:c9:03:15:23:b3:55:f4:e0:3c:2d:d4:51:f6:
17:b6:90:c2:bc:e6:63:99:3d:0a:fe:3e:7b:85:09:
83:ca:30:da:f1:00:c1:e2:87:ac:db:03:34:b7:33:
c0:d9:07:30:d1:d4:88:7c:94:6b:57:82:15:55:a4:
c7:8e:b0:26:a2:6f:7d:57:91:c0:67:cc:98:cf:cf:
7b:a3:85:a7:6b:8c:77:6d:04:1e:0d:a6:3a:ee:92:
4d:75:16:d8:2b:a8:b3:c9:83:33:db:5f:02:a9:d6:
b9:ed:29:90:ac:74:b9:0e:60:d7:c9:ba:93:48:88:
a5:da:c2:9a:68:69:0b:49:51:ab:93:a7:b1:6d:04:
b3:36:88:38:92:4b:43:78:a2:82:2d:d6:f1:80:9f:
58:4c:59:84:b5:d7:2c:bb:0f:02:ed:63:0b:bb:dc:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4C:50:69:F1:81:A2:7F:63:4B:47:8D:8F:91:1D:CE:EB:D5:69:D4
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.230.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:ec:0f:ea:1b:ba:a7:5f:22:a1:88:2d:7f:23:76:05:93:a4:
5a:11:f6:bf:9a:ff:ef:85:88:f9:1d:85:46:52:ba:49:1a:13:
d5:e5:c0:91:b2:34:e1:3d:e7:1e:40:bb:78:ef:3c:78:71:74:
5f:c7:79:4e:02:ea:08:07:f0:37:28:9c:1d:f3:ad:00:66:4a:
ff:b0:53:33:fb:4b:d2:bd:75:f3:e2:7a:c8:17:18:68:a0:b0:
d5:5d:54:6d:e1:bb:e5:0c:1a:ea:08:08:cc:00:5c:dd:0b:8b:
ec:c8:e9:de:61:ed:5d:80:55:c0:40:0c:37:ec:38:2d:70:b4:
31:0f:3a:90:79:c5:80:8b:8d:65:cc:06:13:8f:f9:1a:4f:d2:
26:78:eb:b8:94:d8:45:66:a8:cd:a9:3f:43:2e:43:2d:ba:e0:
e4:d1:17:e1:ca:fb:28:ec:a6:ce:bb:e7:93:88:eb:45:50:3c:
5b:c8:e3:8d:a4:a4:58:3f:c4:09:84:66:d6:50:d7:e8:3e:a0:
d1:2b:5f:f5:5a:51:f1:26:5c:d0:9a:f3:b0:6c:a4:f3:c5:86:
7a:f3:b1:d5:fc:1d:22:c2:a8:52:0a:e0:67:0e:7f:45:37:4c:
88:aa:c1:89:e5:f3:dd:62:f0:bf:46:e3:f2:b6:aa:4b:f1:2f:
95:4e:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:30:47 2025 by rpki-client