Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa
File: E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa (raw, json)
Hash identifier: ocuR2Hl1fEV1kEiOTalZsois6FYQCpb4hxRd/pLXgjo=
Subject key identifier: 7A:31:45:67:F4:3E:D1:B0:9C:8B:DD:CF:C4:D3:1C:84:C7:4B:47:0A
Certificate issuer: /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial: 08B9
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa
Signing time: Wed 24 Apr 2024 07:40:19 +0000
ROA not before: Wed 24 Apr 2024 07:40:19 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 206283
IP address blocks: 119.160.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919690C
Validity
Not Before: Apr 24 07:40:19 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6628b762-5e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:98:f4:2c:d5:16:76:fc:ce:0a:32:0d:02:
cc:fb:96:7e:c2:cf:a7:f8:30:b3:74:db:d5:67:3b:
f0:44:7b:4e:34:f1:0b:48:48:94:e4:e0:6b:16:aa:
8c:dc:cc:ea:90:3f:35:a5:50:fe:d3:40:2d:95:d7:
93:26:2f:b9:ee:b5:0a:df:d7:70:1a:81:0d:5d:4b:
ae:d1:19:79:0d:c8:ca:a0:a3:a0:7a:b5:a4:54:cf:
30:ce:6a:5c:b3:37:6a:45:5a:af:7b:ba:ec:53:fe:
23:68:dc:38:ab:b6:bf:96:eb:f8:93:fa:17:41:00:
ed:16:0b:2d:d7:39:4e:5e:33:ad:3b:7f:cc:11:12:
87:29:6c:e3:c4:02:5a:00:8e:c9:36:09:4d:14:0c:
72:4d:ab:01:7b:6a:be:10:45:61:d0:23:72:0c:5a:
70:2d:2c:5e:80:19:4a:3c:ed:59:31:7e:ed:e6:6d:
ed:6f:58:5c:8e:14:a1:ae:d4:b8:fa:89:0e:36:af:
e7:97:4a:c9:5c:71:74:b0:bc:21:71:84:53:3d:94:
a8:cd:4d:6d:c8:6b:fc:15:42:14:de:bc:2f:4d:1e:
d7:7b:37:7b:fc:d0:1d:3e:c9:5c:42:97:40:50:28:
11:0a:41:81:ee:37:ea:4b:0d:42:03:0e:e5:39:97:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:31:45:67:F4:3E:D1:B0:9C:8B:DD:CF:C4:D3:1C:84:C7:4B:47:0A
X509v3 Authority Key Identifier:
keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.160.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:97:e2:5c:c6:0e:b0:c2:72:5c:0e:75:d1:06:fd:14:8b:57:
19:93:de:03:e4:d3:d3:e6:70:f2:01:84:54:a2:d0:56:2c:54:
4e:88:92:89:74:df:a7:e6:b3:61:0b:e9:15:98:aa:af:7b:7f:
d7:be:2e:75:a0:9c:bd:d7:ba:a0:63:0f:5e:ac:fa:ef:2c:db:
ec:36:be:62:b5:bf:81:cd:58:d9:88:1e:1d:bf:0f:79:08:05:
7b:e9:9f:b6:66:47:f2:a4:e0:08:2a:c5:5f:09:a4:7a:cd:b3:
74:5a:71:ad:ed:af:80:94:fd:d8:c8:cf:98:ed:3c:84:08:ea:
b9:65:f1:f9:33:e1:0a:66:a9:59:a9:47:a1:db:c3:86:a5:54:
98:8b:0e:9c:80:e1:a0:4d:dd:4d:21:80:5e:45:da:0a:cc:bd:
c3:f6:a5:1f:87:af:d4:18:75:2d:c4:a5:0c:fc:e4:0d:b2:e5:
e2:55:5b:81:ab:21:7d:78:49:b8:0e:d3:d0:4e:82:e4:77:e6:
fe:86:2c:e3:96:6d:bc:a4:83:1e:96:c0:3b:a9:9e:43:e2:0a:
35:ed:d6:c8:9f:7d:c3:08:eb:66:b6:7a:b2:4e:63:4e:9f:7b:
2d:34:43:8d:88:72:88:dd:bf:e0:1a:ce:79:ea:3a:e3:d3:75:
7d:95:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:22:44 2025 by rpki-client