Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/7151B356EAD411EFBA2AB40EC4F9AE02.roa
File: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (raw, json)
Hash identifier: VSF4aaLno+UR3o6W3Jl8Y30MNxvgZ99sJu4IeD9pONk=
Subject key identifier: 05:EE:70:F3:59:ED:AA:B8:7D:96:F2:7D:B8:87:AB:C6:00:DB:8A:29
Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Certificate serial: 02
Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/7151B356EAD411EFBA2AB40EC4F9AE02.roa
Signing time: Fri 14 Feb 2025 13:06:03 +0000
ROA not before: Fri 14 Feb 2025 13:06:03 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138106
IP address blocks: 161.248.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919874A
Validity
Not Before: Feb 14 13:06:03 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67af3fbb-9a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:1d:cc:4e:a3:c0:ae:52:fc:b5:b8:fd:cd:
ad:12:e8:ae:96:2c:ee:42:43:44:c0:6f:e3:8e:56:
88:1e:b6:31:d0:17:3e:fa:d2:24:32:60:08:58:b5:
21:93:bb:5a:4a:5f:38:6f:5e:c8:a2:d4:ec:53:7e:
58:9c:b8:f0:e8:39:65:a5:46:c9:1b:eb:41:f0:93:
94:6e:77:b2:a3:1d:21:f7:ce:a5:56:81:43:ca:da:
cd:a3:b3:12:47:62:07:62:13:69:2f:07:5b:ac:5e:
41:f2:a9:f9:90:bc:f3:3f:78:e9:e2:b1:a8:d9:5e:
18:b3:74:fc:b5:19:ca:9c:53:fb:79:0b:ba:bb:36:
33:82:97:26:60:c0:16:27:98:ad:76:00:b6:6e:f1:
09:d5:9d:78:ab:56:e2:52:23:90:bd:e5:e3:2d:5f:
e9:7f:ab:c7:96:09:1d:ad:e8:5d:f4:82:34:8d:67:
42:9f:f6:8d:b7:18:90:95:e1:86:a4:98:c3:3e:95:
f6:8d:b6:9a:8d:e1:09:9d:0f:2a:2f:d5:f7:45:d9:
6d:31:2b:e3:1a:e3:b6:3d:77:b1:56:49:67:df:5a:
4a:61:52:3d:c2:25:12:c9:01:53:d6:ec:9a:de:74:
ca:6d:fc:a6:90:00:23:d9:f8:99:40:98:81:16:f1:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:70:F3:59:ED:AA:B8:7D:96:F2:7D:B8:87:AB:C6:00:DB:8A:29
X509v3 Authority Key Identifier:
keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/7151B356EAD411EFBA2AB40EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a3:27:9b:f8:76:69:a8:41:70:d4:ed:77:ba:6a:00:56:95:
07:2d:78:e0:02:ca:36:da:59:aa:c6:48:62:3e:0c:90:b5:ce:
df:eb:fe:61:11:88:d7:2e:01:2e:58:c0:ad:f4:80:07:bc:f8:
d2:cb:68:2e:cb:1d:5f:da:75:65:4e:50:77:a6:cd:41:0b:47:
5e:cf:39:2a:e1:e8:d1:47:d4:d5:4d:ca:85:bf:a0:c2:35:ef:
76:b0:de:69:95:e0:51:e8:6f:6f:6a:a5:ee:85:34:99:cc:e2:
d1:53:4d:5d:7c:f4:43:ab:dd:9c:80:66:d5:80:82:0c:e7:52:
af:9c:5f:9c:29:89:60:b0:f9:1f:91:b6:f5:f7:f3:8a:81:1c:
81:05:64:08:e9:99:b9:4a:ec:ac:f3:d4:4a:3a:d2:e7:06:0b:
58:ad:13:2b:9b:3b:29:2c:b4:7e:8c:a5:80:cc:a6:da:16:f9:
76:72:11:16:eb:d0:a4:a3:71:e9:ea:ca:31:7b:74:ef:28:4c:
68:f4:6a:98:21:80:22:e2:fa:1b:c5:30:6b:c6:1f:24:21:b3:
da:47:57:67:5d:48:3c:a6:c5:3c:c8:55:be:2b:23:c1:ca:7f:
4a:0c:72:4b:fd:af:37:e4:63:fd:96:75:f7:2f:8f:17:8a:e8:
ed:f3:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:51:10 2025 by rpki-client