Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5C145586B5411EFAD68A564C4F9AE02.roa
File: E5C145586B5411EFAD68A564C4F9AE02.roa (raw, json)
Hash identifier: vw4fIq6FxDco5GgBxpNa8dHQOtILVXkHdDn+jgOEYoc=
Subject key identifier: 61:6A:6E:35:C4:03:98:7D:4B:2A:72:A3:BC:58:3F:1A:6D:E1:1C:04
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1B2B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5C145586B5411EFAD68A564C4F9AE02.roa
Signing time: Thu 05 Sep 2024 07:03:05 +0000
ROA not before: Thu 05 Sep 2024 07:03:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153210
IP address blocks: 160.30.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6955 (0x1b2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 5 07:03:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66d957a9-336c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:8f:45:b4:81:9a:ef:2f:1b:1b:28:38:d8:
66:49:23:03:27:91:c3:72:76:07:4a:49:76:73:17:
0d:ad:61:6b:e0:b4:a5:51:ff:61:f0:56:cf:32:e8:
69:c7:c6:1d:d3:de:a4:2a:7e:e1:5b:b6:1d:81:51:
86:26:b5:fd:a3:d8:de:a8:29:e0:54:9b:e3:aa:04:
19:95:24:60:91:e4:eb:fb:0d:95:2f:3c:27:f7:e9:
26:6e:17:df:29:00:55:50:2f:ca:90:fc:84:ea:0d:
f7:76:0a:01:f2:8e:31:76:37:b1:8a:c4:31:c6:69:
3a:20:9a:78:ff:f2:9c:6d:c0:83:c4:d6:23:62:ae:
a4:bb:ed:26:fa:e3:d2:ab:7a:f2:80:9a:ec:71:6a:
d4:08:26:9c:cc:03:fe:d1:e7:76:8a:8f:c2:15:cb:
76:87:53:ea:d1:36:47:79:06:ad:6f:9e:eb:77:b3:
78:11:f0:7a:db:47:fa:ec:8d:e4:27:bd:9a:9d:e9:
30:d9:89:2e:8a:f1:cf:e2:40:d4:49:db:c8:9f:72:
27:63:6b:49:37:29:79:7e:26:e4:97:af:f6:63:f0:
5d:5b:8f:f8:16:66:da:21:2a:89:33:12:bd:90:8b:
4e:45:ba:94:39:b3:82:24:78:7e:c5:d5:6f:78:8a:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:6E:35:C4:03:98:7D:4B:2A:72:A3:BC:58:3F:1A:6D:E1:1C:04
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5C145586B5411EFAD68A564C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.244.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:56:cb:92:f9:fa:0d:95:88:57:64:7d:dd:a8:e3:29:9f:74:
c0:07:a3:a6:69:aa:64:f1:98:bf:37:71:48:78:d6:cd:8c:38:
7e:f6:05:a2:a7:4c:cc:0c:53:4f:ad:ca:43:78:a6:a0:33:6d:
99:85:37:58:6b:2c:d1:ee:ea:59:e4:b8:15:8a:3c:82:11:6a:
b5:fb:85:0e:36:b3:50:a0:21:5e:30:55:55:ab:b8:9b:11:5a:
c0:ea:70:72:b1:3a:74:67:bd:5f:54:ab:6d:ca:f5:a2:67:47:
db:8c:71:63:30:7e:ef:f0:b3:a0:c4:8b:7d:72:2d:b0:9e:60:
53:65:e2:8f:a4:72:56:95:ad:42:6d:88:c3:7c:cc:eb:10:63:
64:47:c4:c2:44:63:be:3d:77:b7:3b:ac:5a:f8:ed:35:5a:da:
51:c9:3f:52:cb:31:79:90:be:a2:d0:ef:f7:7d:92:e9:99:2a:
00:21:6e:8b:ca:a7:3e:fa:b2:67:9f:72:a2:1b:55:64:61:8d:
08:e1:e9:4d:91:ae:d4:13:43:c8:7c:4a:3c:bd:b2:1e:a8:2e:
d3:86:30:f7:f7:05:10:aa:3e:4b:e1:df:ff:52:0f:d6:67:31:
b9:0c:0f:26:0d:5a:d5:02:11:6f:6a:c8:1e:6f:ef:2c:ca:31:
95:8e:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:18:10 2025 by rpki-client