Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/E77278DCCE6311EFA284E23EC4F9AE02.roa
File: E77278DCCE6311EFA284E23EC4F9AE02.roa (raw, json)
Hash identifier: DpN2zcLRAjgpftEu2Dp5lPwXsj2XxFGFEx1c1E4KncU=
Subject key identifier: 30:8B:C9:EE:F5:0E:5C:E7:FB:44:C0:22:FD:B3:A9:A5:BB:58:B0:67
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: 22
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/E77278DCCE6311EFA284E23EC4F9AE02.roa
Signing time: Thu 09 Jan 2025 08:29:55 +0000
ROA not before: Thu 09 Jan 2025 08:29:55 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137868
IP address blocks: 160.250.8.0/24 maxlen: 24
160.250.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537
Validity
Not Before: Jan 9 08:29:55 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=677f8903-f456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:f5:e5:91:94:0c:56:02:a6:06:59:a6:3a:
8a:ad:4d:c0:39:6e:2b:19:03:e4:8d:99:07:e3:f4:
5b:e1:86:6e:3d:3e:76:3b:25:bd:53:4f:25:e6:1c:
c0:6a:28:d3:53:1e:bb:58:b9:48:53:ee:8b:87:25:
73:56:c8:be:1e:a4:49:89:19:75:c9:86:74:99:3c:
23:d2:80:71:68:53:80:81:62:d0:69:e1:2f:9c:21:
e1:c1:8c:c5:4d:87:d2:b7:80:c0:58:4d:02:9f:d9:
5d:e5:4f:64:dc:09:93:40:0a:46:8d:66:bf:db:2d:
b2:3e:4d:a1:2f:dc:4f:1b:16:ca:c0:de:7b:2c:bb:
2d:4a:b5:86:d8:d3:41:5e:88:59:95:a7:1c:b6:ec:
de:7f:08:71:a3:50:b1:29:66:9d:81:d8:a6:66:51:
fa:69:23:94:75:48:5a:ab:cf:23:f3:21:19:d5:fd:
11:2f:3a:26:81:e6:83:96:b7:df:81:bf:19:11:8d:
29:a2:d1:11:8b:1f:0d:45:71:c9:8d:35:7b:25:2e:
06:76:64:2e:5d:a6:d3:38:9c:d9:bb:c9:16:29:47:
71:23:9f:f8:2a:90:a7:e2:13:9a:78:cd:43:be:87:
9f:56:62:6f:16:7d:4d:a4:92:36:46:d8:b3:51:7a:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8B:C9:EE:F5:0E:5C:E7:FB:44:C0:22:FD:B3:A9:A5:BB:58:B0:67
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/E77278DCCE6311EFA284E23EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.8.0/23
Signature Algorithm: sha256WithRSAEncryption
63:6a:0d:8c:30:30:70:77:7c:e3:57:b3:63:0d:93:ce:f0:32:
c7:7e:37:d6:68:ba:56:de:b8:b1:8c:7b:5a:0f:cb:32:86:c5:
ff:f9:8e:a0:c9:19:96:d9:40:3e:4a:fe:7d:a0:20:cd:ba:0b:
a5:df:bb:0b:d5:ed:c9:fd:2f:73:e4:93:f0:3b:7e:76:a7:bf:
3f:c3:95:92:f9:a0:98:5e:a4:ba:9a:9b:32:95:1d:b9:be:74:
5b:d3:e0:0d:30:86:ca:2b:18:50:02:36:7f:74:44:b1:3b:23:
67:ea:df:39:17:4a:57:b8:d2:c6:40:e2:1b:a4:af:c3:b1:2f:
90:83:c5:20:d9:86:78:9b:a9:3f:49:f6:fa:9e:71:02:97:a3:
ad:15:cf:d9:c5:b3:6e:dc:09:2d:c6:3b:ab:ae:e9:ff:49:4d:
85:47:fc:93:f1:84:bb:b5:da:ca:61:09:e5:cd:e9:1b:b5:b8:
2c:80:0e:d3:1a:67:1d:7b:a0:b5:af:e5:bb:21:96:3d:a7:36:
f2:6d:fe:23:51:a8:14:04:35:24:e5:f6:df:13:42:4e:02:36:
f0:18:b6:bf:a5:4e:12:64:35:1e:4a:0e:6f:39:47:57:d8:2b:
29:97:1d:03:71:c6:b2:c5:f8:e2:59:cf:50:f2:51:03:bb:a2:
f5:d8:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:42:38 2025 by rpki-client