Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa
File: 32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa (raw, json)
Hash identifier: ahyXQ4Lm+79APPoe5vKdDvkPQen1I/FoTAFBCvMh1/Y=
Subject key identifier: DF:97:14:C5:8B:94:90:13:94:2D:FA:15:D6:DC:81:2A:39:FC:F2:2A
Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial: 0C
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa
Signing time: Wed 10 Jan 2024 08:21:05 +0000
ROA not before: Wed 10 Jan 2024 08:21:05 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152322
IP address blocks: 157.10.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39
Validity
Not Before: Jan 10 08:21:05 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=659e5371-f8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:58:15:02:4a:81:d3:4c:8b:bc:02:17:f2:
86:79:77:07:02:ce:c1:16:3f:8e:bc:dd:fe:74:36:
c3:ae:4b:10:a2:2c:38:f4:51:cd:9b:d4:ed:43:4b:
0c:19:5e:28:21:5d:33:a4:88:5b:50:f3:f4:5e:9c:
bc:4d:02:c0:ef:f7:da:66:c7:cb:e9:c8:ed:0d:35:
53:04:d9:34:20:0e:7c:85:83:8d:d4:a7:c0:f0:b7:
c2:89:cc:cc:d5:16:95:79:e2:0b:e0:2f:be:27:94:
83:e5:0a:f0:9f:55:54:2f:45:52:76:9b:e8:d6:14:
6d:2c:e6:94:b6:6b:bf:38:31:0b:39:4c:1a:82:4c:
fa:0c:a4:a4:35:8c:cf:36:d2:04:31:4d:84:d0:ca:
9f:57:cf:4d:89:0e:48:58:d6:95:ea:e6:a2:13:a3:
64:98:f0:41:d9:75:9a:7a:59:05:fb:34:d8:c9:d9:
87:8b:fc:01:d0:13:75:80:35:f1:8b:f6:5f:0e:b4:
1c:23:8a:f4:3f:36:a5:14:2e:81:5b:2c:a1:5a:96:
0c:e8:b6:8b:30:f3:b2:1a:8f:fb:2d:cb:47:f5:5d:
2a:37:d6:51:2d:2a:d4:ec:12:e6:a7:96:45:36:b4:
8a:b7:36:1b:a5:99:44:74:9e:1c:05:00:a0:3c:ca:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:14:C5:8B:94:90:13:94:2D:FA:15:D6:DC:81:2A:39:FC:F2:2A
X509v3 Authority Key Identifier:
keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.134.0/23
Signature Algorithm: sha256WithRSAEncryption
68:89:e8:1a:1f:44:e3:13:77:75:8d:b5:1a:43:99:5e:d7:15:
bd:d2:6c:98:6e:24:87:aa:2a:0b:22:10:88:23:d4:5e:df:3c:
6b:e7:2d:5d:3e:90:ae:b1:17:29:fe:9f:cf:5e:fd:0e:f4:c5:
13:9a:22:8e:e5:5e:f4:a5:44:c4:57:64:fe:6a:a3:52:ee:6c:
99:95:c6:79:72:f9:4a:f8:36:9c:7e:11:cb:4d:6a:fe:ab:7c:
c4:e8:e1:72:f7:54:4b:b2:a4:58:a5:8f:23:24:df:cd:5b:1f:
2e:31:e0:97:ae:49:ed:1e:a5:33:56:61:22:70:7b:e5:bb:3c:
f6:fc:94:b8:0b:83:fe:27:a4:49:e3:33:68:e4:77:13:5e:e6:
77:14:ea:82:98:1b:36:32:7f:9c:96:7d:fe:a1:bb:d3:60:a7:
76:b1:e8:70:60:47:1a:ee:55:49:76:e1:fd:59:11:8f:46:d7:
74:cd:76:3c:f2:79:41:f2:b2:cf:6f:bb:31:18:db:51:6e:29:
40:fa:eb:3b:08:7f:f5:f6:1b:1d:2f:fb:9d:91:d4:fb:5c:ad:
b0:98:2e:3d:b9:e8:9c:91:e9:84:e5:5f:a8:3b:dd:7a:57:a3:
4a:cb:bb:41:2a:9b:5e:df:33:94:c8:b7:5c:e6:df:0c:42:d8:
17:b5:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:25:47 2025 by rpki-client