Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa
File: 431868FE2EC811EFBB3A6574C4F9AE02.roa (raw, json)
Hash identifier: yYqs2C5AMpVdcomEvwsEelNt35bcShUcpatPOoqg3y0=
Subject key identifier: A7:4B:66:25:BF:DD:64:8A:EB:CD:73:98:1D:5A:AB:8B:0F:82:CD:E9
Certificate issuer: /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Certificate serial: 02
Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa
Signing time: Thu 20 Jun 2024 05:45:12 +0000
ROA not before: Thu 20 Jun 2024 05:45:12 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 138997
IP address blocks: 160.22.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A15FB
Validity
Not Before: Jun 20 05:45:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6673c1e8-958a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:6f:d0:c7:47:e6:db:6f:4f:ed:1a:10:86:
52:96:44:94:30:40:af:de:5f:12:cc:cb:dc:ae:e8:
00:63:5a:91:67:8d:66:4a:91:12:5a:b8:3b:f1:68:
ee:65:b2:9e:93:23:e4:ca:31:5b:ad:4f:f9:ed:03:
22:1f:4c:51:63:aa:90:fc:a7:40:11:37:84:62:5a:
5f:79:fe:30:20:a6:52:8c:0a:ec:63:8d:a2:4b:2e:
5c:a2:e0:0b:a8:15:65:6d:da:d1:a9:83:62:14:7b:
5b:cb:97:f6:6f:12:9c:52:3f:a1:6f:9a:44:ae:ff:
e2:aa:21:28:c6:c6:fc:3c:8e:ad:b9:b7:3f:d1:8d:
63:7c:19:34:77:1f:dc:e9:e4:e8:b2:c1:f0:66:59:
4e:4b:1f:e3:58:f5:eb:46:89:51:83:1c:1c:0d:db:
40:8b:f8:b1:e4:86:31:33:fd:66:f0:52:d2:d7:52:
83:7b:f3:83:2c:7c:9f:c9:da:25:a0:be:c2:54:30:
02:36:22:f7:ea:b2:eb:91:e6:aa:c9:75:c9:26:b9:
09:9b:bd:5e:2a:31:bb:3d:43:c2:7b:d9:a0:3d:4f:
9c:17:8f:9b:fb:5f:fa:e6:6c:5b:a0:5c:a6:43:b7:
96:57:1a:38:b2:d4:df:6c:bf:b8:f8:cd:ae:6d:d7:
d7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4B:66:25:BF:DD:64:8A:EB:CD:73:98:1D:5A:AB:8B:0F:82:CD:E9
X509v3 Authority Key Identifier:
keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.48.0/23
Signature Algorithm: sha256WithRSAEncryption
95:da:73:e0:07:e7:61:87:12:80:ed:c5:d0:c7:82:e1:b2:86:
87:93:14:4f:99:76:0f:4d:c2:b2:4a:13:1d:97:44:16:cd:63:
28:e3:5c:68:1c:8a:41:1b:20:17:52:1d:fe:16:c9:91:ae:25:
d2:e9:03:eb:9f:33:0e:3e:6f:03:ec:8c:4f:df:94:79:dc:17:
af:fd:11:aa:7b:56:c8:cc:5c:1d:0e:bc:43:41:51:d5:bc:20:
f0:1b:ae:8f:67:51:a4:8e:6d:4c:b0:79:45:55:aa:54:2b:65:
f1:f4:8e:2d:32:b1:21:50:64:23:b7:d3:f4:b9:22:6e:78:96:
b8:02:2f:98:4d:ad:2f:7c:7c:86:a5:c8:13:30:be:bd:57:aa:
0f:4b:81:6e:5d:94:0d:44:2b:0f:45:89:b0:79:fb:ca:e8:e5:
f3:94:9f:d7:b9:1a:3c:fa:53:4e:91:3c:50:08:e6:91:c1:a9:
94:42:5e:eb:30:aa:e5:fb:7b:94:b0:76:37:71:e2:e5:4d:a7:
6c:dc:fb:b8:a6:ef:7a:01:30:83:de:c7:b9:47:19:ec:fd:e1:
5c:d4:65:d7:82:40:4a:3b:a2:8d:11:c3:f4:b3:b7:cf:9a:92:
69:45:d9:13:f5:37:7c:96:9f:48:43:e9:09:1e:84:54:86:2d:
7e:80:2e:65
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MTVGQjExMC8GA1UEBRMoOTJFNjMzOTc4RjNDNUMyRDA4NjBBQ0RCMEUxREQ1MTIx
MDBFODlFRjAeFw0yNDA2MjAwNTQ1MTJaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NzNjMWU4LTk1OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+Gm/Qx0fm229P7RoQhlKWRJQwQK/eXxLMy9yu6ABjWpFnjWZKkRJauDvxaO5l
sp6TI+TKMVutT/ntAyIfTFFjqpD8p0ARN4RiWl95/jAgplKMCuxjjaJLLlyi4Auo
FWVt2tGpg2IUe1vLl/ZvEpxSP6FvmkSu/+KqISjGxvw8jq25tz/RjWN8GTR3H9zp
5OiywfBmWU5LH+NY9etGiVGDHBwN20CL+LHkhjEz/WbwUtLXUoN784MsfJ/J2iWg
vsJUMAI2IvfqsuuR5qrJdckmuQmbvV4qMbs9Q8J72aA9T5wXj5v7X/rmbFugXKZD
t5ZXGjiy1N9sv7j4za5t19fXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp0tmJb/d
ZIrrzXOYHVqriw+CzekwHwYDVR0jBBgwFoAUkuYzl488XC0IYKzbDh3VEhAOie8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNUZCL0JFODhBNzBDMkVD
NzExRUY4MjIwODI3M0M0RjlBRTAyL2t1WXpsNDg4WEMwSVlLemJEaDNWRWhBT2ll
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIva3VZemw0ODhYQzBJWUt6YkRoM1ZFaEFPaWU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTVGQi9CRTg4QTcwQzJFQzcxMUVGODIyMDgyNzNDNEY5QUUwMi80MzE4NjhGRTJF
QzgxMUVGQkIzQTY1NzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaAWMDANBgkqhkiG9w0BAQsFAAOCAQEAldpz4AfnYYcSgO3F
0MeC4bKGh5MUT5l2D03CskoTHZdEFs1jKONcaByKQRsgF1Id/hbJka4l0ukD658z
Dj5vA+yMT9+UedwXr/0RqntWyMxcHQ68Q0FR1bwg8Buuj2dRpI5tTLB5RVWqVCtl
8fSOLTKxIVBkI7fT9LkibniWuAIvmE2tL3x8hqXIEzC+vVeqD0uBbl2UDUQrD0WJ
sHn7yujl85Sf17kaPPpTTpE8UAjmkcGplEJe6zCq5ft7lLB2N3Hi5U2nbNz7uKbv
egEwg97HuUcZ7P3hXNRl14JASjuijRHD9LO3z5qSaUXZE/U3fJafSEPpCR6EVIYt
foAuZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:46:52 2025 by rpki-client