Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
File: 7746DBBAA87111EF81AAB431C4F9AE02.roa (raw, json)
Hash identifier: 8M/kOk+cOTXPOGKNKYFuLAknZGZLe44g3bvkq9VdVzw=
Subject key identifier: B9:7A:25:36:BF:CB:B5:BE:49:88:62:DC:43:5F:D4:11:09:C0:29:58
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0418
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
Signing time: Fri 22 Nov 2024 01:31:16 +0000
ROA not before: Fri 22 Nov 2024 01:31:16 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 151866
IP address blocks: 160.187.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048 (0x418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Nov 22 01:31:16 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=673fdee4-bac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:02:b3:46:78:53:13:c1:50:33:04:49:e0:
c9:25:26:b9:c8:cb:19:32:69:43:c0:6c:73:07:48:
3a:8b:93:31:b7:ff:66:69:96:44:9f:60:a8:36:bf:
0e:22:c7:1a:02:3c:92:cb:46:43:45:3e:11:31:22:
42:af:4f:97:86:a3:e5:2a:f6:52:33:91:39:71:46:
48:45:71:a0:39:5c:d4:f4:bd:23:6c:ba:81:7d:d2:
30:8c:18:ab:9d:40:b6:5d:b9:13:3b:48:28:9d:da:
a8:5a:3d:60:8f:c4:92:43:7f:19:40:e2:d4:9a:1a:
77:d2:8d:e6:d0:54:e1:fc:22:60:61:a6:51:54:26:
19:4a:49:ad:6d:e6:3d:ad:01:5a:72:e7:5e:a3:f4:
b8:02:c0:f3:82:ee:82:ca:d9:f7:64:01:8d:e6:d8:
b8:1d:d7:81:22:f3:99:91:55:d9:67:0a:d3:3b:90:
69:5e:f4:d9:55:7a:b0:9d:4b:63:53:7e:cb:c7:2c:
18:4d:82:39:5f:29:00:4b:5e:9b:08:13:9b:27:a1:
19:cd:db:93:c7:fe:84:bf:79:bc:60:4d:b0:f2:7a:
84:2f:55:33:a0:74:7c:99:01:a3:6e:43:2e:a1:99:
02:06:0f:dd:94:ef:b2:df:8d:1b:bc:cb:b7:c0:a4:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:25:36:BF:CB:B5:BE:49:88:62:DC:43:5F:D4:11:09:C0:29:58
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.94.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ed:72:17:65:7d:0a:97:f2:0e:25:c1:eb:3c:95:d4:cf:3a:
16:11:d3:69:05:be:df:e3:66:fd:f9:0a:1c:33:d0:d0:cb:f0:
a2:93:7c:b9:c0:6d:d6:ac:fe:0b:42:19:02:18:0e:e5:83:55:
7f:09:b5:6a:5a:f0:d8:3e:d9:f3:15:19:10:bd:08:94:e8:26:
fb:64:11:b7:c3:c4:3e:ed:e6:9e:46:71:46:e8:26:0c:a5:e0:
be:da:af:1b:82:c8:6f:cf:69:f1:04:89:8b:0d:5b:f9:72:28:
94:e3:d6:12:7f:6d:42:fa:c8:ad:5f:b5:ae:70:0f:a8:d8:11:
37:c2:03:95:6d:a8:af:ef:e8:16:40:6f:c0:ab:0f:e5:1f:79:
a1:53:cd:d3:85:a8:3f:40:29:c9:54:a4:46:6b:dc:ff:c7:e7:
c1:c5:1a:14:87:91:c2:1b:8d:3c:a8:35:10:47:fb:10:38:05:
c0:ae:55:1a:2b:29:47:f4:2d:60:f2:7d:19:de:5e:8a:fc:b1:
7b:51:e5:19:60:fc:c3:ce:79:dd:19:da:c1:e0:92:c3:b9:d1:
b5:b9:ec:07:7a:fb:e9:7e:fb:2d:65:0f:0d:be:01:1d:9f:c2:
29:86:19:0d:b4:1e:23:83:e6:b9:7e:e9:f4:0d:31:0d:fe:88:
bc:4f:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:31:57 2025 by rpki-client