Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa
File: D52B5F46BB4E11EE9496B14FC4F9AE02.roa (raw, json)
Hash identifier: anAo9b4LIiGPHNXFHfvC2DhOXlPORvs7NKpNFYPuhRA=
Subject key identifier: 9A:6C:DE:30:E2:6B:F2:18:93:8D:EC:55:9A:94:BC:CA:01:70:48:C9
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1A01
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa
Signing time: Thu 30 May 2024 15:52:52 +0000
ROA not before: Thu 30 May 2024 15:52:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151719
IP address blocks: 157.15.10.0/23 maxlen: 24
157.20.180.0/23 maxlen: 24
157.66.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6657 (0x1a01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:52:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a0d4-0f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:e3:ef:58:67:01:c9:35:39:45:d1:d5:c4:
df:7b:72:ce:95:bc:1a:64:94:b7:78:95:2d:dc:e5:
a3:58:ec:f9:64:0e:cb:10:45:bf:ed:59:8b:52:77:
d4:10:35:4b:fe:f8:d1:00:b1:cf:75:08:19:47:fd:
da:37:7d:fc:48:0b:33:37:66:18:53:b0:87:f0:01:
de:7c:8e:95:f0:f1:e0:7d:e5:32:47:2d:80:80:25:
33:8f:42:40:34:57:a5:a2:92:94:60:98:0b:a2:34:
b3:28:cb:df:30:65:2e:98:5c:c5:8c:68:eb:d3:ca:
1d:1d:85:69:b5:77:00:75:f5:54:b5:ff:99:03:8e:
ca:29:18:3d:89:ef:1c:3e:46:fc:17:01:a2:24:e3:
19:bc:b1:1d:9b:7b:f3:f5:cb:28:3b:2d:f2:ef:bf:
62:7f:ad:dd:2f:f3:c8:5e:0f:b6:5f:3e:45:46:72:
3a:5c:7a:41:b8:ae:2d:f0:fc:3f:22:b3:83:13:7e:
b6:87:41:e4:d8:60:58:0c:93:01:f0:d4:48:b0:f0:
84:33:2f:c1:25:38:dd:68:e4:8a:33:43:91:6d:1a:
b0:7e:f6:c2:f7:ea:61:24:87:79:05:6c:fb:f8:d9:
11:1a:49:c4:7b:72:00:f7:ff:a4:4b:c9:1c:0a:14:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:DE:30:E2:6B:F2:18:93:8D:EC:55:9A:94:BC:CA:01:70:48:C9
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.10.0/23
157.20.180.0/23
157.66.118.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:33:02:0d:d2:b5:39:a2:ee:b5:2a:bf:65:4a:77:71:1f:90:
b3:92:e7:32:35:bc:80:e9:5b:73:84:33:b7:05:c1:32:8f:fb:
a5:90:fc:36:85:4f:e6:8c:24:2d:ba:7c:8e:a0:4c:37:53:aa:
bf:d6:1f:b5:79:56:e4:b5:e6:46:25:a8:c4:f7:4b:85:c6:f4:
89:c6:d2:6c:e1:51:e1:dd:bd:ee:ac:be:f8:81:c7:a5:81:b2:
2a:d9:97:80:e9:97:2b:33:81:08:5d:1a:e7:db:d1:71:c7:97:
7f:11:72:c3:74:52:3f:34:45:8a:df:84:0e:59:ec:d0:fb:a2:
0a:18:7e:93:d9:5c:27:f8:e5:70:7a:4e:96:9a:d6:76:54:ab:
f5:d1:1c:b3:cd:cb:94:72:15:c3:f8:5b:7f:1a:8d:dd:23:df:
18:c6:8f:e4:87:ac:ef:08:71:22:4c:ac:20:c6:4e:d4:4e:e2:
bb:ff:78:cf:41:c3:b1:5c:01:a8:8a:d8:f3:4a:4c:67:f8:0a:
b6:bb:62:32:2e:1c:f8:0e:0d:ce:09:e1:65:5c:a0:10:82:ec:
00:dd:93:02:07:b0:ee:28:e7:60:10:dc:da:85:1e:33:26:54:
b5:d4:55:ec:87:2d:cb:0f:12:0b:f6:35:a0:33:4d:ad:9a:34:
0c:6b:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:44:05 2025 by rpki-client