Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa
File: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (raw, json)
Hash identifier: bllAWJknG6t7sgMmQWLY59vxPXpNHKXKelWOMC8ypAI=
Subject key identifier: B5:90:80:11:75:73:B5:FE:B8:34:23:10:4B:40:79:4E:4A:31:66:C6
Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Certificate serial: 5D
Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa
Signing time: Thu 09 Jan 2025 05:20:18 +0000
ROA not before: Thu 09 Jan 2025 05:20:18 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152317
IP address blocks: 157.10.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB629
Validity
Not Before: Jan 9 05:20:18 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677f5c92-a632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:a5:33:98:5d:7b:7a:2d:63:76:ba:a3:f0:
71:29:fc:b6:05:80:d5:8c:cf:92:29:0a:5a:73:c7:
b2:93:96:a3:bc:42:bb:f3:71:fb:c3:f5:26:db:ed:
87:43:5f:0f:b0:0c:ed:0c:50:4b:3c:11:75:21:fe:
c2:19:a6:00:8d:72:2e:6d:bc:54:37:dc:30:6c:8a:
03:96:f6:13:5b:cd:dc:84:f2:cd:ba:51:c1:ae:0c:
67:17:be:aa:5d:7a:85:73:74:23:f8:bd:18:0d:16:
c8:fd:80:38:61:6a:1d:e4:cf:56:15:2e:27:d3:61:
49:3d:08:ce:22:7c:a6:1a:31:5a:e3:47:6a:a5:4b:
0d:d0:79:b6:48:92:b2:4b:8e:7b:8c:88:c1:b9:43:
aa:52:04:fc:4d:c3:1c:7b:9b:f6:e6:a5:de:eb:8d:
24:94:5b:e7:cc:1f:03:6a:91:33:8e:ab:11:e2:c9:
55:98:e4:5e:7d:3a:f6:1d:a9:63:2a:d4:a5:95:b3:
19:83:65:73:74:ce:7a:b1:04:11:7c:b8:3e:56:63:
7c:86:59:5b:ed:5f:b3:86:3d:37:54:60:4f:bc:28:
80:dc:43:df:22:95:93:83:aa:5e:86:18:d3:65:2c:
47:bc:10:14:90:4d:e9:a3:45:d6:fe:02:86:4e:30:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:80:11:75:73:B5:FE:B8:34:23:10:4B:40:79:4E:4A:31:66:C6
X509v3 Authority Key Identifier:
keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.140.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:d0:46:b8:91:ef:9d:d0:c0:c7:c9:b9:6c:43:08:c9:18:ff:
90:6e:e9:84:b3:11:4e:ec:73:7f:dc:c8:8d:96:07:97:f3:2d:
71:a9:ff:ef:2c:f7:c9:3d:b3:a5:56:cb:67:34:52:b8:c6:87:
13:02:c1:fb:85:2c:c7:10:e1:76:e6:7b:b1:dc:c6:02:8a:f4:
49:79:08:a1:e2:75:21:35:08:2a:04:c1:6f:a6:15:16:73:56:
a8:10:a4:08:d4:05:4c:4e:7f:35:b4:0f:45:11:d6:b5:b8:98:
77:40:90:a3:eb:bc:ba:b9:2d:11:c3:ce:87:19:f4:7b:1d:0c:
db:7e:14:de:50:56:74:89:5f:93:b6:2d:ec:8d:70:ec:d8:19:
ad:58:fa:56:9e:58:d9:60:63:2e:12:e0:2e:0e:be:9e:89:8e:
d7:67:e1:55:a7:d6:d8:d7:c7:e1:3f:9b:29:30:5d:f4:b0:6f:
f9:a0:8b:77:35:d7:99:a2:9a:1b:7f:51:d2:11:bb:76:55:bf:
41:33:53:f0:bc:e5:f3:2b:c0:e8:8c:7a:12:e2:bd:06:81:9c:
49:3b:84:c6:44:63:bc:32:1d:ba:46:ad:c0:2b:70:bc:2d:c7:
1e:36:15:b0:e6:c3:b9:fd:9f:9b:b6:91:ee:b9:29:34:81:63:
08:34:a1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:12:09 2025 by rpki-client