Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa
File: C2838C8245B011EFAE60CC76C4F9AE02.roa (raw, json)
Hash identifier: dwidYpMLAJTM9jddkunL1qdnHKOnW/Pf1EZaeXyq6Fk=
Subject key identifier: E3:03:91:84:26:29:4C:C3:7B:CA:BA:90:D1:3C:82:E9:28:84:34:A7
Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial: 5E
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa
Signing time: Thu 09 Jan 2025 05:19:53 +0000
ROA not before: Thu 09 Jan 2025 05:19:53 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152317
IP address blocks: 157.10.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85
Validity
Not Before: Jan 9 05:19:53 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677f5c79-1b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:9f:b8:ae:b7:87:bb:67:5f:41:28:cd:dc:
29:c9:fd:6b:4d:54:6b:7e:c1:b8:9a:a5:1e:24:4c:
25:b9:60:ed:a4:fa:d0:93:e3:46:09:89:58:5b:94:
06:c6:df:8d:00:b8:3d:a0:bb:83:30:ff:41:91:89:
20:49:c2:70:7d:d2:36:bf:0d:57:83:85:c3:99:85:
44:a2:57:12:8a:35:eb:25:64:8c:13:59:d9:7c:59:
03:d5:32:b1:d3:c4:ed:d1:44:b5:90:ec:f3:40:b7:
b1:7c:c9:ff:7f:59:61:d7:80:d7:7d:07:af:e6:e5:
8e:b7:3a:5a:09:de:81:cf:bf:ad:0f:b7:b4:91:f4:
e7:7c:ea:96:f8:6c:1c:74:23:85:9d:8d:7d:98:63:
53:f6:fd:6c:db:0e:fa:25:dc:41:1e:e3:87:e8:1d:
4d:db:71:26:6e:6a:d9:4d:1c:36:8d:46:c6:41:cf:
7a:d8:96:b0:87:fd:cd:43:b3:4d:0e:50:88:1a:9f:
1a:05:78:4f:3e:a0:0c:f8:2e:94:cd:a7:8c:cf:41:
b3:3b:13:7e:35:07:d9:c8:59:d2:fe:dd:8a:38:0a:
5b:42:b5:eb:5e:15:e0:c2:18:0d:ae:dd:f6:43:c5:
a3:b3:c7:72:38:72:2c:1e:2c:4f:0c:50:17:80:ab:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:91:84:26:29:4C:C3:7B:CA:BA:90:D1:3C:82:E9:28:84:34:A7
X509v3 Authority Key Identifier:
keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.120.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:71:7e:d7:bc:76:12:fd:05:df:a0:2d:d9:f1:86:5b:9e:98:
2a:8d:c7:d2:66:4a:18:87:66:a3:b7:8d:4d:7b:07:b2:21:1c:
c5:92:84:1e:e7:a6:bf:c0:ae:e8:7b:51:6a:c2:bb:bf:3b:d0:
66:20:52:9d:e1:52:5d:a9:80:2e:06:3a:40:6a:52:99:80:29:
e1:91:3e:1e:50:60:90:ff:5d:db:70:5d:e5:d2:70:e9:e8:8d:
00:17:90:fe:18:55:e2:e5:bc:e7:06:79:b0:5b:e4:59:7d:03:
20:f6:db:77:af:06:08:90:92:27:c0:2a:9a:02:2d:6c:ce:ab:
4d:c0:0c:7c:77:66:bb:33:05:6f:9f:29:d1:c9:26:0c:b2:14:
dd:af:6c:40:d5:c9:bb:95:62:da:7e:ae:60:3d:1a:a0:44:45:
3e:64:bf:8f:7b:6a:3b:a4:22:7a:ac:9a:09:bd:a7:a6:c2:b9:
8e:f1:67:2d:5e:1e:8b:97:35:7e:33:58:57:04:4a:cf:08:76:
ac:7f:15:a5:29:b9:8e:73:8c:12:9b:4b:be:2e:a3:f5:8b:e4:
04:bf:8d:7b:da:8e:7e:84:8a:60:e6:5e:db:2e:c8:eb:b9:90:
b7:b3:2d:a1:f3:dc:b1:ad:ee:96:cd:2e:ca:ed:3b:93:41:dd:
88:96:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:22 2025 by rpki-client