Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa
File: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (raw, json)
Hash identifier: ymGuQNubHZmih1/MlsNM4UjPPYjnvk5QIBxrno55/zE=
Subject key identifier: 64:26:89:BA:DE:34:33:C8:70:BA:26:55:51:EA:A8:E1:0A:6E:3B:1F
Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial: 05
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa
Signing time: Thu 30 May 2024 10:26:49 +0000
ROA not before: Thu 30 May 2024 10:26:49 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 152886
IP address blocks: 160.22.18.0/23 maxlen: 23
160.22.18.0/24 maxlen: 24
160.22.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31B7
Validity
Not Before: May 30 10:26:49 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66585469-d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:52:8d:57:8e:94:82:d6:fd:67:5b:3f:ef:
ce:38:ec:cd:b2:d7:92:1b:96:be:94:38:c8:98:4a:
ce:fc:f4:b9:ba:0b:0a:15:99:3d:0e:90:56:ea:ce:
fe:be:8c:63:25:42:84:e4:be:06:c4:de:cc:dd:8e:
35:78:2e:ef:d9:18:1a:7a:f0:28:35:cc:28:b1:22:
25:db:f6:7d:af:ef:ba:73:90:e8:56:17:4e:a7:f1:
51:b6:de:2c:79:03:73:3b:0f:46:fe:37:b2:8a:6e:
e3:4d:c9:70:af:cf:3f:f3:16:ca:b2:58:76:a6:78:
e9:07:18:0a:c7:b1:93:ac:1a:a5:41:cf:57:4f:89:
48:28:26:1f:fb:ec:5d:7e:2e:e8:6a:98:dc:ee:b1:
06:f2:38:ff:7e:4d:0a:fe:5f:f6:b3:a1:65:05:e5:
57:30:91:f0:0c:07:61:16:62:05:cf:ba:23:7a:06:
bf:07:76:69:7d:69:73:83:96:73:8c:96:4a:5e:69:
88:11:3b:91:b6:56:47:36:0f:84:73:7a:d4:c1:77:
22:79:2d:f8:db:bb:5b:85:23:eb:a1:ad:82:9b:a4:
23:b3:0b:46:70:d4:ad:af:8e:0f:b5:04:7f:6f:ec:
19:8c:3d:49:86:b9:a6:26:15:6a:68:75:07:d5:f5:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:26:89:BA:DE:34:33:C8:70:BA:26:55:51:EA:A8:E1:0A:6E:3B:1F
X509v3 Authority Key Identifier:
keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:4f:25:43:d2:97:56:81:a0:88:7b:c5:dc:ae:03:be:86:e3:
7b:2a:f7:67:26:2f:3e:7c:4e:56:d4:8a:ca:3c:f2:e8:0e:9d:
99:c8:ad:4f:bd:55:9a:80:ad:c2:6b:fa:f6:10:b0:ec:e2:86:
90:19:e2:34:8b:04:5b:c0:30:f3:b0:e4:9c:ec:c3:b5:3b:45:
2f:48:d4:45:9e:1e:75:4f:a6:18:dc:23:60:bb:c6:23:20:2a:
8e:32:f2:dd:9f:7f:13:5b:ad:79:7d:ff:71:fc:88:63:ec:12:
ed:93:68:2f:e5:c3:64:0c:3b:99:ae:2f:1f:46:df:28:39:17:
32:78:28:82:27:c1:a4:cd:3f:3f:8b:8e:b1:13:9c:d3:48:74:
09:20:79:be:2a:3e:19:91:d5:6b:3e:7a:ec:4d:b7:db:43:4d:
e9:cf:4e:0c:b1:56:2d:4c:6c:1f:8c:12:42:77:e1:cc:71:0a:
53:06:84:3f:5c:17:58:88:46:f1:36:98:45:b2:9d:ca:3c:5c:
09:d2:b8:d2:24:f3:c7:e9:b5:7c:fd:75:71:58:07:85:95:bc:
99:44:9a:72:e8:a5:fb:10:d1:0d:36:37:05:32:d6:7a:a9:93:
56:bb:5e:9d:f0:bf:6a:6e:d7:f6:6b:1d:5b:7c:33:c6:00:89:
6d:20:0a:f4
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
MzFCNzExMC8GA1UEBRMoNEMzMzlDQUJGQzgwQTVGNDE5REYzM0RGQjA2ODg1QzFD
MzQ4OEIyRDAeFw0yNDA1MzAxMDI2NDlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NTg1NDY5LWQ3NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDrM1KNV46Ugtb9Z1s/78447M2y15Iblr6UOMiYSs789Lm6CwoVmT0OkFbqzv6+
jGMlQoTkvgbE3szdjjV4Lu/ZGBp68Cg1zCixIiXb9n2v77pzkOhWF06n8VG23ix5
A3M7D0b+N7KKbuNNyXCvzz/zFsqyWHameOkHGArHsZOsGqVBz1dPiUgoJh/77F1+
LuhqmNzusQbyOP9+TQr+X/azoWUF5VcwkfAMB2EWYgXPuiN6Br8Hdml9aXODlnOM
lkpeaYgRO5G2Vkc2D4RzetTBdyJ5Lfjbu1uFI+uhrYKbpCOzC0Zw1K2vjg+1BH9v
7BmMPUmGuaYmFWpodQfV9SZTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZCaJut40
M8hwuiZVUeqo4QpuOx8wHwYDVR0jBBgwFoAUTDOcq/yApfQZ3zPfsGiFwcNIiy0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzMUI3L0YyQTU3MzJFMUU2
QjExRUZBQzBFOTE0RUM0RjlBRTAyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVERPY3FfeUFwZlFaM3pQZnNHaUZ3Y05JaXkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi8xRkMzQjBERTFF
NkYxMUVGQjM5MkQ5MzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaAWEjANBgkqhkiG9w0BAQsFAAOCAQEAS08lQ9KXVoGgiHvF
3K4Dvobjeyr3ZyYvPnxOVtSKyjzy6A6dmcitT71VmoCtwmv69hCw7OKGkBniNIsE
W8Aw87DknOzDtTtFL0jURZ4edU+mGNwjYLvGIyAqjjLy3Z9/E1uteX3/cfyIY+wS
7ZNoL+XDZAw7ma4vH0bfKDkXMngogifBpM0/P4uOsROc00h0CSB5vio+GZHVaz56
7E2320NN6c9ODLFWLUxsH4wSQnfhzHEKUwaEP1wXWIhG8TaYRbKdyjxcCdK40iTz
x+m1fP11cVgHhZW8mUSacuil+xDRDTY3BTLWeqmTVrtenfC/am7X9msdW3wzxgCJ
bSAK9A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:42 2025 by rpki-client