Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/8BDA27AECD8211EF9AF32B60C4F9AE02.roa
File: 8BDA27AECD8211EF9AF32B60C4F9AE02.roa (raw, json)
Hash identifier: SRE4u+ZLkkQwTNZtgQHHWugE/1HeTsB1q8P4gYfjQs4=
Subject key identifier: D2:92:DA:A3:3C:40:93:34:5C:D6:16:CA:15:D8:92:D7:4D:B4:71:10
Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475
Certificate serial: 21
Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/8BDA27AECD8211EF9AF32B60C4F9AE02.roa
Signing time: Wed 08 Jan 2025 05:36:45 +0000
ROA not before: Wed 08 Jan 2025 05:36:45 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 140219
IP address blocks: 160.187.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B165F
Validity
Not Before: Jan 8 05:36:45 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=677e0eed-bc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:49:25:33:e5:14:28:c8:cc:ac:1a:c3:e6:
42:a4:0d:b1:c2:21:16:da:ca:b1:aa:a1:5d:e9:1e:
4f:df:dc:42:e7:5e:ee:47:74:19:e5:a1:c0:92:90:
d5:30:69:19:d8:bc:e3:95:9c:6a:e8:e9:93:2c:2b:
ae:61:9d:ef:82:79:2f:17:dc:83:75:9f:48:93:a6:
39:d7:bc:4e:6f:19:e6:89:aa:b1:b7:94:4d:68:ea:
c1:80:1d:7a:c6:a0:b8:d0:ee:3a:14:71:2b:0c:e2:
4f:a1:a0:f1:37:90:d5:2f:71:65:cb:56:ab:8f:3c:
8f:b1:b2:0a:b1:eb:c5:cc:8f:52:a6:67:2d:07:09:
b4:ce:ec:7e:0b:59:ce:68:04:4a:5b:e6:a4:51:0a:
ad:f6:0b:87:c5:75:c5:9d:dd:28:37:45:95:78:27:
20:07:42:b6:19:f9:a5:3c:7c:74:89:94:be:e2:ee:
13:76:ae:e3:0a:6c:90:4d:8e:1d:fb:02:7c:03:4f:
7e:11:85:97:cd:cb:eb:5f:e9:bc:d7:9f:99:d8:45:
e1:89:d1:a7:c0:65:c1:83:91:6e:d1:23:cb:f0:6a:
66:49:b7:4e:13:de:c9:a6:3b:96:8d:77:b9:c5:56:
39:5a:f4:7c:05:a6:72:e7:9c:be:a6:00:9c:5b:2e:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:92:DA:A3:3C:40:93:34:5C:D6:16:CA:15:D8:92:D7:4D:B4:71:10
X509v3 Authority Key Identifier:
keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/8BDA27AECD8211EF9AF32B60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:81:7e:a2:3d:58:23:3a:94:54:42:4d:39:cd:34:18:10:f7:
26:8c:ac:91:73:60:66:27:4e:73:5e:6d:7e:94:a4:c4:b5:61:
af:d5:3a:df:78:21:94:b6:c9:90:71:6a:bc:14:cb:93:d1:ba:
6f:2f:27:03:87:26:bb:93:39:83:12:ba:56:81:a6:bc:26:d5:
d6:7e:98:68:a6:eb:9b:de:d6:56:d9:5e:39:fb:61:b1:7d:38:
d1:b8:79:c6:2e:70:32:63:5a:e3:81:bd:a5:b5:4d:fd:61:7e:
eb:77:fd:f5:c0:2a:95:37:4f:15:46:15:e5:26:87:a0:ca:fe:
15:e5:b3:e1:be:c2:92:d7:73:77:dd:2e:b8:c9:29:08:a5:9b:
16:98:1a:74:24:8e:ef:3d:9f:4a:69:9f:91:ad:a3:d4:dc:43:
cc:34:0e:73:b6:f1:d4:2b:fc:b8:a4:19:89:af:af:a0:0b:50:
68:b1:86:16:70:aa:18:da:41:0f:b4:42:98:13:be:20:7b:d3:
c8:1a:54:7b:f0:53:46:ae:34:da:62:c8:0f:3f:e8:e0:c9:c7:
31:1f:9a:8f:37:1f:f9:17:9f:54:7a:40:f3:12:4b:e0:3c:7c:
da:11:2a:f6:87:67:7e:42:74:e5:9c:ef:e3:78:eb:20:16:0e:
55:23:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:46:00 2025 by rpki-client