Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
File: 5D5359F8E3AA11EFA9ED913FC4F9AE02.roa (raw, json)
Hash identifier: FTD4IcL/b+GkS1lkv2F4Qn7LkQd5dpRssagZnS6VmyY=
Subject key identifier: A5:AC:98:D7:CD:09:22:FC:72:5E:46:BE:DD:CE:D3:C2:C6:EA:7B:E1
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 051C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
Signing time: Wed 05 Feb 2025 10:17:12 +0000
ROA not before: Wed 05 Feb 2025 10:17:12 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153543
IP address blocks: 161.248.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Feb 5 10:17:12 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67a33aa8-ef51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:ff:b7:b2:f9:88:84:1d:42:80:36:0d:89:
48:62:5b:bd:04:93:df:2f:cf:3e:eb:e8:44:b6:f6:
b0:33:d4:8d:8c:a8:e1:0d:dd:3a:c5:0e:74:6d:88:
a4:1f:ff:ca:fb:bf:fe:3d:ab:ae:23:b7:d8:2f:a4:
17:e5:5a:90:e0:98:c2:42:b3:7c:b2:07:9d:b1:2b:
1c:96:f5:28:75:75:ad:0c:86:89:9c:0f:b7:de:57:
0b:83:8f:37:92:3e:6f:a7:d3:60:81:72:45:ae:be:
68:f7:76:91:a2:7e:d9:86:05:3f:46:d0:df:18:d3:
be:1f:f2:46:3a:af:ca:03:51:60:58:b9:e1:c1:bf:
c3:39:e5:44:19:0a:b7:54:06:6a:a5:8e:d3:50:cc:
79:ad:e8:17:49:57:3e:fb:4d:36:b1:fc:7b:db:4c:
61:05:d8:30:a5:e5:36:0c:93:19:83:a0:c9:af:e5:
86:fb:66:cf:ff:35:b9:72:58:4b:2d:05:14:e9:df:
a6:10:e0:6b:14:c6:09:1c:20:56:5c:9f:e8:cb:f8:
83:3a:a2:f2:61:a0:97:8a:d2:d6:e9:62:97:b5:90:
11:33:a3:36:c6:51:98:04:d6:f7:b4:17:ca:45:22:
3d:33:ab:1f:be:94:ae:8c:fd:cf:46:23:38:4c:23:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AC:98:D7:CD:09:22:FC:72:5E:46:BE:DD:CE:D3:C2:C6:EA:7B:E1
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.212.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:fd:81:b5:dd:a7:5a:ab:70:7a:dc:a1:47:4e:e8:43:45:99:
1c:d6:52:0d:34:87:9f:4c:e3:3f:9a:dc:8b:ac:b9:ed:e6:f2:
03:92:dd:f3:a5:f7:8b:86:dd:1c:7a:2b:d9:f3:5f:25:a0:bb:
14:81:08:ca:4f:ed:7f:ae:76:9a:ca:2c:9c:04:de:9e:85:a9:
21:e6:32:01:16:3a:a4:7c:b7:0d:6a:23:b7:46:5a:af:70:6c:
41:51:f1:22:a8:d6:3d:54:df:2f:dd:b4:60:48:65:07:e2:b0:
dd:48:c5:eb:5d:72:0a:e9:0c:54:65:6b:6f:33:d3:bd:12:b0:
57:c5:ad:cb:9a:6c:1c:6e:1c:49:04:f8:49:ba:18:84:1b:d2:
7a:a6:49:d8:fb:46:13:d1:f3:68:7b:2b:22:65:54:09:c7:19:
86:f0:21:32:f3:60:3d:41:4a:c5:83:58:d0:5f:d2:4c:ed:d2:
ef:0d:2a:34:79:f1:d1:bf:bf:20:b9:e3:18:16:32:90:bb:74:
f3:2d:75:ea:de:0c:b0:3d:f7:4b:e5:f2:43:e6:42:9b:b2:e2:
0b:ec:02:93:5e:c0:c6:e7:a5:f0:7a:e9:ba:c6:43:9e:e9:e9:
1e:18:cb:f4:1c:f9:67:1f:0e:7c:4b:4f:44:ed:75:23:c3:cf:
5e:c1:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:20:54 2025 by rpki-client