Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/5231E7A6D87E11EFA9DC2D37C4F9AE02.roa
File: 5231E7A6D87E11EFA9DC2D37C4F9AE02.roa (raw, json)
Hash identifier: fNHPrPKu4eNlZ2x0cHPTJwyOcvxUN3Q3rykOH2dvILM=
Subject key identifier: 4B:E9:40:CA:D7:9D:53:92:7A:79:B8:F0:BD:E8:26:5B:96:E6:FE:EF
Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0
Certificate serial: 26
Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/5231E7A6D87E11EFA9DC2D37C4F9AE02.roa
Signing time: Wed 22 Jan 2025 05:04:13 +0000
ROA not before: Wed 22 Jan 2025 05:04:13 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150696
IP address blocks: 160.250.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC
Validity
Not Before: Jan 22 05:04:13 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67907c4d-5256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:05:80:91:14:e0:a3:b8:0b:0d:f2:a5:7e:
d7:1f:f2:7a:d5:f6:b3:65:25:b4:b0:2e:ed:09:fd:
f9:d5:23:ce:ee:ce:32:1f:08:09:86:45:1a:a2:22:
af:54:c1:fa:f9:1d:36:85:db:a7:11:77:05:ff:0f:
2e:5f:45:bc:2a:bb:bd:30:d5:23:46:32:63:81:a3:
0d:33:72:e7:bd:c8:fb:14:cf:80:1d:8b:46:21:d1:
a9:c3:ab:57:94:10:9f:4f:6f:19:9f:50:a1:d8:4a:
52:ed:2b:d7:e0:94:51:a5:4e:27:8c:40:71:0f:a0:
42:54:56:72:d5:f1:e6:23:55:67:5f:71:9d:94:f5:
37:fe:26:9e:56:64:53:e0:ba:0b:67:62:56:d5:f6:
ae:c2:92:78:5b:72:b0:05:0d:3a:71:5b:f6:1b:4d:
71:9c:d5:05:bd:3c:3b:2d:8c:bf:3e:1b:4b:ff:09:
89:b9:0c:a4:14:b8:04:c7:ee:b2:1e:ca:7b:ed:9a:
23:83:02:d5:89:f8:ed:19:aa:ec:86:56:c0:3b:9d:
f4:4f:7a:86:0a:09:5a:91:97:0e:06:69:90:58:c0:
d0:4c:05:93:1d:c1:ab:88:bc:08:e3:35:ea:98:56:
18:df:95:d8:c3:af:f0:78:d8:d9:ef:f9:46:2f:0a:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:40:CA:D7:9D:53:92:7A:79:B8:F0:BD:E8:26:5B:96:E6:FE:EF
X509v3 Authority Key Identifier:
keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/5231E7A6D87E11EFA9DC2D37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:33:6f:49:cc:6d:25:b3:4e:8d:db:ca:d6:4e:8e:ea:73:76:
74:e4:42:39:b1:57:6a:3f:d5:c7:2a:fb:69:7b:47:04:5e:db:
b5:a7:59:55:58:92:4b:46:5a:f8:bb:4b:48:74:30:8f:d4:0b:
6c:6e:8d:8b:37:26:34:1a:67:1d:7a:74:cb:3e:9b:cd:0a:35:
9c:8b:f6:5b:b8:1a:7f:d1:12:7f:95:28:9a:89:bb:43:2d:38:
ce:df:db:13:02:a5:f6:4e:87:8a:c9:bd:1f:40:c3:dc:07:39:
c1:d6:4a:9a:ac:f0:bd:c8:68:4b:17:7b:0c:d1:37:df:ad:79:
bf:00:04:7f:0b:05:44:80:9c:d8:66:2f:cd:9e:29:07:89:9a:
8f:e3:76:e4:1e:c9:6c:9e:17:fb:69:b8:bf:96:b2:d7:8a:ea:
47:42:3a:07:5b:1b:e7:7e:2e:ea:bf:32:7f:40:21:1f:bf:41:
69:e3:94:12:aa:c4:9f:e2:81:18:04:94:ea:24:8d:01:85:04:
01:14:41:98:dc:c1:da:c3:c4:cc:3c:c7:c1:f0:51:ba:38:74:
67:90:23:dd:3a:7f:22:a1:d3:5b:e2:74:3c:27:56:d2:a0:f9:
93:99:9a:62:13:95:8c:bc:3a:84:67:ea:c1:27:53:5b:46:17:
53:eb:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:59:39 2025 by rpki-client