Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0FECD496C69011EF9334B50FC4F9AE02.roa
File: 0FECD496C69011EF9334B50FC4F9AE02.roa (raw, json)
Hash identifier: gi3skRv/QQej0KuaBuW/GLj/aVgE8K47OrUKJK84SZs=
Subject key identifier: 38:77:3A:50:4A:1B:59:C7:0A:95:44:9A:54:10:14:AD:99:BD:39:CF
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 04C2
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0FECD496C69011EF9334B50FC4F9AE02.roa
Signing time: Mon 30 Dec 2024 09:25:52 +0000
ROA not before: Mon 30 Dec 2024 09:25:52 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 152969
IP address blocks: 160.30.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Dec 30 09:25:52 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6772671f-fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:f1:f8:4e:74:ba:16:43:09:ab:39:29:9e:
3e:86:b7:bb:0e:4e:54:98:84:2e:e0:b4:38:7d:41:
c5:06:f7:be:c9:91:ce:7a:df:70:2a:fd:b0:9b:68:
00:8c:50:ab:6b:9e:30:bf:c2:c7:13:07:27:90:92:
ca:97:22:0d:71:c2:de:cc:d0:9c:ec:d5:49:76:56:
55:9a:80:89:30:21:49:a8:38:ac:c5:78:ab:b2:be:
e1:7c:c0:8d:82:8a:0f:d9:d0:5f:7d:4b:5b:49:c9:
ab:8b:34:63:bc:ba:86:a6:32:81:a8:f8:b1:40:5e:
20:23:1d:e2:c5:39:d1:73:ff:ca:a2:60:c7:0e:0b:
f4:9e:da:13:04:ca:f3:f1:61:4a:ff:97:2c:c6:5c:
cd:da:c3:ca:19:19:e5:10:17:26:fb:3f:ce:11:64:
b5:6a:0b:94:5e:34:f5:94:1b:ca:44:6b:b7:ac:46:
2a:bb:d0:8e:62:53:19:de:57:2a:ec:58:0f:c3:85:
ce:a4:41:7d:35:66:77:a0:a0:d1:96:8f:5e:40:de:
73:25:a7:10:48:1e:bc:4e:82:99:5d:f6:76:97:7f:
b1:23:9a:b4:b6:aa:62:9a:3d:de:7b:17:5b:94:cf:
62:f0:80:e3:61:75:ab:e2:5a:bc:fd:0a:f2:67:9d:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:3A:50:4A:1B:59:C7:0A:95:44:9A:54:10:14:AD:99:BD:39:CF
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0FECD496C69011EF9334B50FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.80.0/23
Signature Algorithm: sha256WithRSAEncryption
45:bc:d0:a0:fe:ae:1d:47:e2:5f:d7:4a:98:b1:b1:64:55:bc:
50:ef:e0:0f:d6:43:70:0f:6a:c8:f3:ec:6d:77:36:89:e8:32:
67:77:51:aa:09:13:b5:86:3f:a7:e7:76:b8:96:3d:4f:7d:31:
d5:75:82:57:82:97:fa:e2:51:77:36:d3:6b:05:fe:a1:f1:6c:
e2:43:ee:8a:2e:fb:56:1f:5e:5b:f3:2b:b7:52:60:50:6d:57:
c5:6c:4a:8b:8d:94:98:4c:d2:1d:74:25:9d:40:d1:4c:d5:84:
a8:05:01:70:ac:ca:dc:3f:0e:c5:b4:bf:50:d2:aa:4a:17:a9:
f7:07:27:b2:bf:f9:fa:77:95:50:64:d2:8d:63:4b:77:1a:39:
8a:5b:e5:3c:8a:a0:8f:05:40:88:b7:42:ca:db:ab:8b:d5:f9:
cc:27:a8:c8:5f:a2:35:2f:02:70:ab:de:e9:38:88:84:be:a1:
9a:f3:86:8e:23:2d:36:cf:fa:88:15:19:46:e8:e9:67:23:ef:
b0:47:30:f7:45:e0:a8:b0:be:c4:28:e4:5b:3a:45:ce:b2:89:
02:fc:ad:6d:43:11:ea:dd:9f:47:25:60:00:82:ae:29:14:68:
fb:8c:3a:e1:d4:1e:6c:50:a8:89:59:2b:8f:78:2b:ca:57:de:
c1:5a:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:36:48 2025 by rpki-client