Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
File: B23569E2756511EFB018F20DC4F9AE02.roa (raw, json)
Hash identifier: r6mTJvt8SukGGtNb+WgynqBgaxV1KBCRpaFxjoCbFH8=
Subject key identifier: D3:1F:BA:23:B2:2A:65:97:65:6A:9A:4E:71:C9:EC:DE:2D:7E:C8:4B
Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD
Certificate serial: 10
Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
Signing time: Wed 18 Sep 2024 02:29:09 +0000
ROA not before: Wed 18 Sep 2024 02:29:09 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 138166
IP address blocks: 160.30.212.0/24 maxlen: 24
160.30.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D44BE
Validity
Not Before: Sep 18 02:29:09 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66ea3af5-1f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:1d:25:88:9e:2d:c9:f8:54:cd:4b:78:cd:
7a:9a:2b:67:03:f7:7a:2e:5b:24:43:3a:8f:bf:61:
6a:cc:aa:8d:d5:c2:a9:96:49:b6:10:7c:d5:50:a2:
3e:07:03:2e:67:c6:71:d2:4e:6c:cd:59:14:84:5f:
21:0e:6a:aa:ab:46:ab:88:15:58:cf:8a:cb:6f:5e:
f8:05:d3:e8:da:00:56:de:13:0e:e6:ce:b5:7c:1c:
d8:3b:bd:59:db:c8:d9:ff:28:08:66:1e:06:48:c9:
4f:a0:9a:7f:14:d4:a8:25:86:be:2e:7a:c8:7f:74:
b9:b2:4e:2b:cd:c1:b8:07:c8:c9:26:ad:d6:00:77:
bf:bf:ca:5b:23:66:3a:3a:36:93:75:37:6a:63:e1:
17:aa:79:6b:63:e7:0a:e2:d3:27:a1:59:dd:b6:e8:
9c:20:94:30:6e:bb:11:66:9e:cb:e2:d1:db:7c:86:
ea:07:10:97:c9:8b:a3:5c:f3:68:82:a5:5e:e3:93:
9a:df:b9:c0:c0:53:4a:9c:41:7e:4c:d0:cf:d3:89:
54:35:a5:08:25:c3:f1:9f:00:2c:72:a4:14:67:b0:
73:5e:fc:92:cd:f5:15:37:af:fa:1e:bd:e0:84:31:
29:83:98:fd:6c:c8:5e:01:26:f6:99:f2:00:29:19:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1F:BA:23:B2:2A:65:97:65:6A:9A:4E:71:C9:EC:DE:2D:7E:C8:4B
X509v3 Authority Key Identifier:
keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.212.0/23
Signature Algorithm: sha256WithRSAEncryption
37:03:1a:c2:4b:59:bb:0a:41:2a:c6:fa:57:82:80:c9:5b:29:
e8:fd:24:2c:cc:20:9e:c2:5a:48:ed:3a:a6:01:6c:48:bf:19:
d3:f7:ec:86:4e:b0:a1:c5:5d:83:97:78:7d:97:73:d1:b1:1f:
ac:83:5d:31:5c:67:08:93:1f:6a:dd:9d:67:98:ef:1e:95:3c:
26:24:f4:33:ee:fa:6a:8a:28:5b:e0:df:d3:89:13:45:b5:44:
8b:3e:83:bb:dd:4a:fc:b4:66:b8:13:5e:4c:37:0d:14:0f:b1:
c4:3a:63:ba:0d:47:cd:e3:18:35:bb:9d:2b:21:39:7f:08:93:
13:c5:83:3c:5f:4e:3d:e7:b9:28:07:7f:93:38:88:8b:0f:f7:
41:c9:54:30:80:88:a3:8f:84:6f:e7:33:61:7d:45:e3:34:a6:
3d:d1:64:b1:25:44:55:33:d5:ea:cf:08:57:d7:87:38:31:ef:
1c:af:87:af:53:b7:8a:c0:43:4f:a9:4d:fd:58:5a:c3:9c:b3:
d5:2d:80:6b:13:fe:80:fa:57:08:e3:7c:f2:a8:fa:a2:9f:9e:
97:29:b3:6a:d0:50:b4:46:6d:ff:5a:65:d2:41:07:c7:58:24:
18:a6:b1:b1:d1:2d:4c:ad:37:ad:94:f3:43:09:53:31:71:d6:
d7:ec:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:02 2025 by rpki-client