Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa
File: 2171B7C0B7A111EF88C1E184C4F9AE02.roa (raw, json)
Hash identifier: +Y7cNl+t5CObIVrNa3uJBHfKKnueLVG5/k2srwejSAM=
Subject key identifier: D2:FF:F3:BB:58:FD:48:0B:0F:0F:72:F8:AB:D1:B2:77:65:81:42:E9
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 049B
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa
Signing time: Wed 11 Dec 2024 09:20:15 +0000
ROA not before: Wed 11 Dec 2024 09:20:15 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153435
IP address blocks: 160.250.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Dec 11 09:20:15 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6759594f-06d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:28:00:33:fc:69:12:0c:aa:a9:f2:2f:1a:
18:4d:d2:73:7d:4a:f9:f9:b1:51:8f:16:32:95:98:
32:f3:39:8a:e5:7d:a0:32:dc:5d:37:59:f2:92:df:
9d:96:e5:8b:e1:9a:31:d6:60:48:d1:37:60:94:f5:
6a:53:9c:91:06:53:7b:ad:d4:cb:ce:98:1d:b2:a6:
7e:09:9c:a3:a5:66:c7:14:e4:d4:13:59:fd:3e:b0:
f2:be:ca:33:5a:2e:16:46:28:db:7b:96:05:2e:92:
80:75:0f:46:f4:2e:4a:15:04:b7:68:d6:60:da:f3:
56:df:7d:ab:90:ec:ab:cf:76:02:d6:7d:9d:4b:06:
93:fb:83:1c:d1:b5:33:2a:07:cb:ac:ae:eb:b0:d6:
99:45:2e:a5:72:e6:7b:43:9f:9b:e5:12:e8:e4:da:
4a:38:5b:75:fc:4e:c5:f1:cd:19:59:13:98:72:11:
ec:8c:f1:37:d4:a5:a1:af:57:fa:29:f8:90:0b:7e:
cb:65:42:e7:a4:05:97:21:78:d8:db:7a:82:69:17:
ee:f7:c0:5d:94:a7:40:83:25:60:ae:4a:a2:38:47:
29:d1:1b:59:b5:8f:7d:e9:fe:68:95:1a:6c:fb:e4:
75:5b:9e:24:a0:64:b0:3c:3c:cc:40:79:c8:52:85:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FF:F3:BB:58:FD:48:0B:0F:0F:72:F8:AB:D1:B2:77:65:81:42:E9
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.124.0/23
Signature Algorithm: sha256WithRSAEncryption
91:f1:31:ec:04:be:3a:05:77:d4:e0:f0:2d:b1:f7:d0:cb:22:
70:06:b7:84:26:bc:c3:32:c7:25:2f:5f:62:c4:d5:b7:b0:71:
82:ae:23:85:ce:9e:ff:15:93:31:cd:8e:6e:82:98:30:68:4f:
5e:9c:4a:b9:5d:dc:b4:43:a7:e9:68:65:4a:a2:cb:c6:f1:69:
3a:b8:6c:5a:5f:f6:07:1f:38:6f:75:71:35:eb:68:3a:81:9f:
dc:1e:0a:64:8a:b8:c6:4d:7b:d7:f0:f4:9b:2a:01:07:f0:be:
02:fd:02:05:fd:8c:15:c8:74:a5:bb:cb:72:c4:00:8d:dc:3b:
60:90:04:88:0e:54:f8:29:7d:39:9e:5d:8a:55:77:c6:35:a9:
77:6b:5b:23:2d:03:5c:fc:ba:62:c8:b2:eb:4c:20:0e:c0:6e:
53:2b:f2:be:4b:88:28:d9:b7:dc:c6:04:89:6b:b5:fd:b8:02:
45:90:87:39:69:60:ad:70:e5:9b:6d:50:bf:40:a2:0d:dc:87:
4b:be:d0:5e:96:a8:59:43:2c:5a:74:b4:aa:dc:8c:e4:8e:ef:
33:10:74:25:56:7b:eb:3a:45:73:f9:1e:10:12:1e:8e:23:57:
38:b3:0c:d9:ef:17:39:27:82:64:f0:fa:40:fe:64:93:d5:46:
01:e7:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:48 2025 by rpki-client