Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8092DB4C718011EF8BEC2931C4F9AE02.roa
File: 8092DB4C718011EF8BEC2931C4F9AE02.roa (raw, json)
Hash identifier: tTwg1knSyPXQq8svPYGeEvisc1BFSaAuD2cz9vpVfhQ=
Subject key identifier: 5C:2C:F3:C6:DD:31:D5:74:95:41:93:A4:89:81:93:61:F3:29:58:A0
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0522
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8092DB4C718011EF8BEC2931C4F9AE02.roa
Signing time: Sat 08 Feb 2025 12:51:47 +0000
ROA not before: Sat 08 Feb 2025 12:51:47 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140822
IP address blocks: 160.30.254.0/23 maxlen: 23
160.187.88.0/23 maxlen: 23
160.187.90.0/23 maxlen: 23
160.187.242.0/23 maxlen: 23
160.187.244.0/23 maxlen: 23
160.191.36.0/23 maxlen: 23
160.191.90.0/23 maxlen: 23
160.191.92.0/23 maxlen: 23
160.191.94.0/23 maxlen: 23
160.191.96.0/23 maxlen: 23
160.191.98.0/23 maxlen: 23
160.191.216.0/23 maxlen: 23
160.191.218.0/23 maxlen: 23
160.191.222.0/23 maxlen: 23
160.191.252.0/23 maxlen: 23
160.191.254.0/23 maxlen: 23
160.250.0.0/23 maxlen: 23
160.250.2.0/23 maxlen: 23
160.250.30.0/23 maxlen: 23
160.250.32.0/23 maxlen: 23
161.248.34.0/23 maxlen: 23
161.248.72.0/23 maxlen: 23
161.248.76.0/23 maxlen: 23
161.248.182.0/23 maxlen: 23
161.248.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Feb 8 12:51:47 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67a75363-c439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:e0:6c:b2:f7:3e:96:d7:29:18:ff:6c:18:
2b:50:c5:74:56:51:7b:0b:e5:5d:19:02:b4:57:c9:
f7:2b:3c:7a:d7:1b:3e:26:52:75:4c:68:6c:58:fd:
0d:e7:64:33:20:dc:8e:f7:d5:93:47:9e:4e:47:ac:
03:19:ee:7a:fd:88:00:f9:d9:04:6f:8b:6c:8b:a5:
50:24:42:23:cc:1a:f3:24:5c:03:b1:79:ed:4e:11:
2e:01:8b:1e:57:ff:44:e9:13:91:04:18:52:35:eb:
e3:05:40:b4:50:f1:38:47:25:dc:35:08:54:85:dd:
38:42:0f:b7:44:90:e7:02:72:a6:31:a1:93:8c:59:
c1:bd:17:a4:6e:fb:bd:f8:7d:dd:97:29:aa:72:8a:
43:42:8a:87:4e:bb:3a:1b:7c:fc:8a:3c:dd:92:0d:
b9:19:f6:85:86:6f:43:2a:42:73:2e:30:cc:bc:30:
ff:ae:20:d3:09:08:55:75:07:2d:4f:d6:cc:0c:69:
bd:fd:87:8f:7b:7b:05:ee:33:d5:97:fc:8e:b2:01:
2e:1e:cc:96:d8:d7:3e:c8:2a:1e:46:e2:03:97:18:
d2:eb:e4:74:4d:63:c8:bd:f2:32:e4:93:0f:ff:a2:
db:41:9f:de:7f:6d:4c:b4:e4:e3:a4:41:3c:6d:a5:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2C:F3:C6:DD:31:D5:74:95:41:93:A4:89:81:93:61:F3:29:58:A0
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8092DB4C718011EF8BEC2931C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.254.0/23
160.187.88.0/22
160.187.242.0-160.187.245.255
160.191.36.0/23
160.191.90.0-160.191.99.255
160.191.216.0/22
160.191.222.0/23
160.191.252.0/22
160.250.0.0/22
160.250.30.0-160.250.33.255
161.248.34.0/23
161.248.72.0/23
161.248.76.0/23
161.248.182.0/23
161.248.236.0/23
Signature Algorithm: sha256WithRSAEncryption
92:5c:10:28:e0:66:7d:a6:87:2b:8b:2f:01:12:28:7e:d5:35:
08:1e:37:e0:82:e3:40:51:0c:35:2f:9f:29:22:c5:22:b0:5b:
09:be:f6:4a:4c:87:a5:43:57:a2:3f:b8:1d:26:2a:c1:01:60:
4a:df:17:b1:57:e4:30:21:70:57:37:b6:7e:c0:49:76:c1:3e:
aa:ae:8e:8e:7f:16:76:11:9b:55:15:ac:e6:cd:26:7c:be:0f:
72:ee:ef:8f:69:0c:27:07:3e:56:9c:e9:3f:f1:ca:6c:22:f2:
05:f7:7e:9f:a9:4a:e6:c1:b3:55:16:63:0c:de:c1:a4:e5:1f:
9d:7a:21:cd:23:da:d8:c7:13:a4:50:3d:b8:5c:f7:f2:31:32:
ce:28:bc:96:98:44:cb:b5:89:8b:61:95:5c:c0:10:58:75:f4:
22:3b:58:0f:fb:d8:91:36:1f:46:d5:af:c1:65:30:66:50:eb:
da:07:be:61:1f:81:e4:29:44:fe:a4:88:a3:d3:e0:fc:88:f4:
63:10:6e:62:8f:c6:1c:d8:0a:06:22:c8:45:8a:a5:7b:24:cb:
21:9e:d4:ef:67:b2:81:fc:f1:98:59:5d:db:3d:6a:ca:45:83:
61:5c:f0:f4:23:ca:35:52:e0:18:c5:34:43:c5:8c:74:9c:43:
da:f1:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:33:10 2025 by rpki-client