Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F137A988E90611EF95D7D661C4F9AE02.roa
File: F137A988E90611EF95D7D661C4F9AE02.roa (raw, json)
Hash identifier: 80WDqCb3eKBA7LtXsc8xZ8RnTcqlPIdD3P77d0ensqM=
Subject key identifier: B9:BF:ED:69:CC:48:6F:38:16:7B:AF:EC:26:0B:99:E8:CB:20:DB:55
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1CBE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F137A988E90611EF95D7D661C4F9AE02.roa
Signing time: Wed 12 Feb 2025 06:02:30 +0000
ROA not before: Wed 12 Feb 2025 06:02:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149539
IP address blocks: 160.187.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7358 (0x1cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 12 06:02:30 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ac3976-78e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:e4:0a:a9:91:5b:34:f5:f0:b8:75:ad:ff:
78:b0:cb:7a:3c:28:bf:53:75:f8:00:45:4c:90:b5:
fd:57:dc:5e:1f:2a:b6:47:4e:13:78:6d:83:e3:a7:
dd:0e:44:e4:80:d0:d7:79:ba:71:73:b3:ff:7d:72:
c2:d8:7c:18:a7:7e:a0:36:3e:84:ba:f4:74:8a:58:
55:7a:13:b0:3d:4c:21:92:76:f0:08:15:45:d7:88:
75:f5:17:16:5f:fb:07:12:d3:16:e3:7b:ef:5a:ac:
dd:65:5f:d3:87:5a:ae:20:4f:31:bb:f0:ae:06:c6:
0d:e5:f1:64:67:5f:57:49:5c:01:a4:26:d8:59:be:
d1:f7:1c:43:25:88:69:16:df:13:5c:ad:23:a9:17:
c9:5c:a7:9f:4e:8a:2b:b0:3a:d1:c8:dc:9d:49:89:
0d:76:c7:f0:83:e7:30:db:ef:23:a7:bd:e8:0c:e9:
df:77:64:a9:bf:9f:c8:75:d5:61:14:36:4f:01:2d:
e8:39:ca:b6:cd:76:8d:fd:47:bb:e0:e4:42:eb:67:
26:bb:e6:93:df:0c:65:f1:8e:57:e3:4c:96:43:b2:
57:3f:02:da:c5:ff:64:fd:e8:9b:b6:cc:d2:44:83:
e4:1c:8c:7b:e4:46:17:87:23:50:ac:c2:04:04:1f:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BF:ED:69:CC:48:6F:38:16:7B:AF:EC:26:0B:99:E8:CB:20:DB:55
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F137A988E90611EF95D7D661C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.70.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f6:32:31:80:94:1d:19:cc:3a:65:2e:6d:fe:95:12:db:53:
9d:c6:fb:c6:ff:88:94:1a:fa:41:86:77:2e:bf:dd:ea:23:24:
dc:73:f1:ea:02:a8:32:a8:16:b9:a9:7d:32:24:7d:d7:66:c5:
8a:de:e9:17:fd:d1:ed:37:05:36:ff:6a:49:9e:99:e5:cc:26:
5d:85:33:ec:6a:1e:de:c8:cd:77:1e:ac:5a:f2:a2:0f:00:c3:
ea:57:bf:be:e9:59:ef:06:e1:62:5f:c9:29:21:96:b6:32:b0:
57:2d:45:78:3f:39:14:59:97:9c:73:ca:9c:a2:6f:e2:57:8e:
08:58:4b:4f:c0:04:14:c6:b3:08:85:10:fb:ee:72:78:3f:34:
59:9b:7d:7a:7b:4f:20:37:27:fc:10:8c:a5:15:40:a3:2a:ad:
a1:ab:2b:11:65:ee:df:12:20:ea:e1:28:4a:51:12:24:22:2c:
66:66:ca:b8:c2:65:09:7f:62:d9:f1:d7:f3:c3:39:7d:87:48:
77:87:b8:d9:d2:a6:fb:c0:f3:71:b5:d5:44:ae:31:c9:3e:87:
66:44:c8:44:31:3d:ff:c8:e7:9d:d2:63:17:5c:15:ae:72:e1:
89:72:8c:8a:a3:e9:4a:3e:24:28:63:f6:60:a5:ea:58:51:6f:
84:7b:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:10 2025 by rpki-client