Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
File: 77E54B78C45111EF9D399128C4F9AE02.roa (raw, json)
Hash identifier: kZrd3mAtaTduvChHj54cupYMhDS7pTsrXNeCRQqiQrc=
Subject key identifier: 13:D0:D9:83:87:CE:86:D5:B8:45:42:A6:73:85:BD:FA:6C:C1:F8:C6
Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial: 9E
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
Signing time: Fri 27 Dec 2024 12:52:46 +0000
ROA not before: Fri 27 Dec 2024 12:52:46 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 151349
IP address blocks: 160.20.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0
Validity
Not Before: Dec 27 12:52:46 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=676ea31d-fc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:97:73:cf:d2:f6:bc:7e:4b:2e:9a:32:69:
fe:b0:f3:21:89:21:3d:1a:6f:67:a9:b5:26:da:eb:
9d:11:75:9f:0c:65:48:49:6b:9d:50:c4:09:1e:1e:
12:64:84:cc:5b:01:dc:18:d6:f0:da:c2:0f:93:af:
35:71:e7:36:8d:f3:bd:cd:4d:05:f4:05:95:c7:eb:
f8:45:fc:9a:64:1a:c0:ab:51:82:c8:99:8b:5d:9d:
b4:8e:9a:56:46:f2:d8:fe:b5:28:d9:2e:bb:ff:2c:
b1:0d:d4:f4:84:99:5f:22:c8:d5:b2:9f:1c:64:e9:
eb:c6:62:49:23:1b:19:60:ef:ea:f6:88:37:e9:b5:
e2:16:b8:34:92:49:d7:a0:6b:6a:4c:f7:20:0c:3e:
22:21:f3:f4:2d:e0:96:f8:50:df:45:1f:c1:e3:86:
d8:6a:fb:5a:ab:ef:ec:9b:67:06:89:18:4d:66:d1:
7a:e1:b1:48:1b:5f:ce:85:e0:c5:b1:80:f9:1b:8b:
94:aa:a7:f1:8f:9a:c5:b3:0d:26:3f:07:34:39:67:
58:66:07:54:e3:32:1d:cf:eb:0e:0f:2b:f2:bb:b7:
f2:95:5a:e1:1c:82:ab:4e:16:83:26:6e:b4:e0:1b:
7b:33:04:ab:09:d6:c6:e6:2b:60:1b:0a:ca:66:0e:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:D9:83:87:CE:86:D5:B8:45:42:A6:73:85:BD:FA:6C:C1:F8:C6
X509v3 Authority Key Identifier:
keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:62:83:97:8d:b2:a7:c8:ed:2f:10:e4:6d:51:06:70:ab:95:
a0:99:6a:93:f8:46:07:70:57:53:47:19:75:0f:6d:3e:e7:ad:
47:2d:a1:2b:cc:38:22:12:7d:a2:e2:c3:df:87:4a:59:10:3a:
1c:d4:ad:37:30:dd:8e:e7:a0:53:6c:4f:17:02:52:74:2f:75:
8a:79:39:08:6b:93:39:6d:4e:8f:23:83:43:83:4b:1e:73:6d:
69:10:0a:fa:1a:b7:d9:0d:5f:ec:4a:2f:82:58:0a:0b:c9:00:
d0:77:c1:a3:25:97:7b:d1:38:0a:58:c3:8b:50:16:a4:84:6b:
12:90:1d:7c:92:69:01:19:00:e7:0b:fb:5c:c0:4f:03:6a:3d:
ea:21:33:d5:1c:52:4f:3d:7d:04:aa:17:3c:98:f3:cb:8f:e4:
92:23:25:71:55:1d:dc:80:3f:72:49:30:d7:b8:fa:0c:de:b5:
cf:8e:49:e7:18:8f:02:7c:da:c7:0d:bb:15:d8:d4:4c:c3:c5:
49:bc:ad:c4:d7:4d:02:69:5a:4e:10:83:e2:bc:a6:94:28:1d:
ac:df:eb:68:2c:4c:e6:d1:af:46:ab:5b:f7:ab:03:2b:f1:e0:
d7:63:50:8c:81:d4:6b:b2:52:ae:cc:14:7e:f3:e7:fb:d1:05:
17:a1:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:42 2025 by rpki-client