Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
File: BE63E1C2FE1D11EE9E701774C4F9AE02.roa (raw, json)
Hash identifier: oGIqh9S0MpzX9n7MXgah+aw/64qK8M0gziNGFc58g5Y=
Subject key identifier: 58:26:36:80:1E:A5:B9:0D:12:3A:CF:18:C8:DA:EA:3F:8F:4E:DF:92
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 19E2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
Signing time: Thu 30 May 2024 15:52:23 +0000
ROA not before: Thu 30 May 2024 15:52:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134926
IP address blocks: 157.20.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6626 (0x19e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:52:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a0b7-924f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:61:53:5f:bc:05:1e:f5:6e:01:f9:7e:49:
fe:f3:3b:23:b6:bd:d2:f9:45:98:d1:f3:0e:24:0f:
6e:21:75:04:32:50:7a:5b:02:02:23:1b:ef:24:56:
24:63:01:aa:2f:cc:f2:c3:22:7f:77:ff:68:51:57:
01:16:ef:76:98:ea:0d:0e:a5:fc:bd:f0:26:52:7f:
b8:ed:f8:77:4c:18:90:aa:00:9a:76:63:d8:f9:6d:
a3:4d:d2:67:67:b1:e3:0c:a5:81:a0:93:0c:b1:4b:
13:69:79:ae:b4:fe:74:38:44:9c:b6:2d:05:42:09:
c8:bd:8e:eb:c2:4d:da:a2:dd:7b:c5:b0:df:34:34:
35:a2:de:4e:6f:47:f6:49:f1:ac:3f:45:c3:99:c7:
4b:e1:6c:27:bf:5a:e0:38:3b:89:47:41:85:7d:37:
92:41:6c:86:1e:01:98:39:99:fb:24:fd:fb:a5:a3:
75:8a:d8:3e:46:ea:6a:ed:f8:81:25:c4:34:e8:27:
d3:d8:44:e4:c0:7b:3e:23:fa:31:fe:1f:35:fd:35:
08:86:4e:77:8c:6f:57:f3:85:f1:aa:d7:66:d2:fd:
d0:4f:bb:d1:7e:bf:ca:c8:37:4c:50:41:9c:80:b3:
78:c2:31:68:b0:23:2e:48:02:2d:21:01:da:32:83:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:36:80:1E:A5:B9:0D:12:3A:CF:18:C8:DA:EA:3F:8F:4E:DF:92
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.214.0/23
Signature Algorithm: sha256WithRSAEncryption
37:37:e4:39:6d:cd:93:f2:e7:2a:f5:3d:65:d2:ec:b1:45:c0:
2b:e6:eb:e4:04:95:94:d3:1c:c3:d8:98:08:b4:6b:aa:da:74:
a1:dd:e4:c8:c7:af:c2:ee:70:46:f7:9a:fe:48:cd:a9:2c:bd:
22:b5:58:de:72:2c:18:77:6d:f2:e4:0e:03:30:c2:93:a3:6d:
e3:4b:8b:e1:bc:9f:d2:b5:ed:76:b8:7b:13:50:43:21:90:0a:
ad:e3:18:3d:9f:1e:a1:5a:8b:e7:c3:6e:c4:0d:85:ff:b6:08:
ae:ec:0d:31:85:17:78:d0:33:cb:33:91:3e:13:67:2b:01:d8:
5c:ab:e9:ef:f3:b8:f2:2f:39:04:4b:b9:0d:3b:27:77:51:55:
42:ab:f0:a8:a3:bd:bc:f6:78:bb:b8:96:e5:93:5f:bb:fa:6b:
97:c1:06:ae:c0:34:2f:2f:5f:81:23:82:c9:91:30:a5:cd:9a:
16:cd:39:91:c5:3b:b4:26:1f:d2:1e:b5:c2:c2:78:6c:9e:92:
2d:2a:e8:7d:6f:20:09:99:e4:93:4b:98:e0:9f:3a:16:70:b2:
fc:63:d2:f6:aa:61:ce:55:d3:7f:82:6f:c4:f9:c1:58:bc:fc:
f4:d6:9b:ed:7b:d0:11:98:48:6e:4d:fe:c6:1e:aa:e7:0a:82:
ce:69:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:59:31 2025 by rpki-client