Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
File: FF233C70E62111EFACA87766C4F9AE02.roa (raw, json)
Hash identifier: J5BMXPUW8m7K2bOF3471IMNvup3jPF22uZ9URvu627E=
Subject key identifier: 61:9B:34:97:6F:DF:81:5C:18:C5:02:88:C6:69:2F:BE:6D:52:F0:CF
Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial: B8
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
Signing time: Sat 08 Feb 2025 13:38:36 +0000
ROA not before: Sat 08 Feb 2025 13:38:36 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 214189
IP address blocks: 160.22.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0
Validity
Not Before: Feb 8 13:38:36 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67a75e5c-1ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:94:57:28:40:f4:be:7a:a0:79:65:38:6f:
ed:f8:8e:4a:c8:0d:24:25:94:b0:c1:8e:f7:65:4f:
69:81:52:16:33:93:c8:29:d9:41:6c:d4:c1:7f:d1:
9f:e5:99:d6:69:5f:91:99:0d:5f:18:19:a0:c0:ea:
33:e6:03:09:53:97:90:8a:c7:01:a2:3c:99:ec:60:
07:f9:c0:6d:e4:99:36:2d:de:09:d4:08:47:3f:37:
7c:64:fb:67:61:59:a0:c0:ca:5c:f6:58:91:58:d9:
e8:34:0c:53:46:98:85:b9:06:15:a5:7c:7d:b7:d5:
56:2a:02:d8:19:94:17:81:72:9e:d7:40:b1:df:67:
77:ad:18:e2:8e:99:59:65:47:6a:77:fc:90:6a:1c:
ff:ae:6c:49:dd:34:72:4b:0a:33:d3:c3:57:e3:1d:
43:3f:c1:b3:94:4a:81:78:2c:78:77:0b:c0:84:7e:
5b:db:87:e2:85:50:4d:c9:87:a8:e9:f5:36:4e:05:
be:38:eb:6d:81:95:3b:d2:c9:ee:6c:47:fb:bc:46:
3f:94:dc:75:f7:48:a1:38:f3:0b:e9:85:fe:f5:53:
e5:a6:a9:f3:9c:bf:8f:89:b9:7c:04:96:bf:4d:ac:
f5:71:e4:d1:67:80:b7:0d:e1:ab:c7:c3:fe:ac:99:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9B:34:97:6F:DF:81:5C:18:C5:02:88:C6:69:2F:BE:6D:52:F0:CF
X509v3 Authority Key Identifier:
keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.155.0/24
Signature Algorithm: sha256WithRSAEncryption
98:19:d1:cf:b1:3d:91:d8:80:e1:e3:0b:7c:62:fe:a8:4f:f7:
c1:19:55:3d:8d:98:2f:aa:1d:f6:4f:49:36:eb:5e:7c:3c:3c:
b3:b2:03:4b:53:ea:41:98:1e:8c:16:4e:1d:51:61:be:7b:6e:
34:63:c9:25:55:48:f8:19:7d:ef:98:90:62:03:d8:67:eb:71:
1d:f4:b5:be:bd:79:3b:cc:f6:23:77:bf:d9:f8:90:64:cb:56:
a3:1a:fb:57:11:c5:b1:5c:50:47:ec:28:7a:fa:a7:06:98:dd:
a8:0e:b8:cf:5a:a0:0d:99:c8:04:a8:de:13:40:37:28:a3:42:
a3:06:19:f4:fc:fd:7c:54:bd:3c:e7:b8:60:e1:d1:76:a1:06:
87:2a:6f:96:ec:55:d0:f3:4b:b0:bc:bd:99:47:3f:c4:e9:a9:
75:1a:53:db:bd:96:55:96:bf:5f:c9:23:af:63:9c:1c:e6:94:
09:d4:b9:bb:42:c0:76:59:a2:e0:83:ae:47:0b:6d:7f:07:ae:
87:0c:0f:9c:97:96:5d:08:a4:5d:5a:0c:cb:45:27:9c:91:b4:
37:22:88:b7:3c:00:b9:7f:41:b2:0b:d6:47:cc:9d:22:1c:ea:
cd:a1:71:83:f6:67:bd:9a:c2:56:13:e3:e2:df:30:e6:b9:6e:
74:7b:b9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:46:26 2025 by rpki-client