Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/B852EAA6C2A611EEB2AC4B6BC4F9AE02.roa
File: B852EAA6C2A611EEB2AC4B6BC4F9AE02.roa (raw, json)
Hash identifier: AJLTI2EsLKZasGOhjxU4aYYDsbw9jLv+XGx/grDKIug=
Subject key identifier: 01:D9:74:24:98:3E:50:C8:8D:3B:00:CB:C3:8C:28:EC:C9:C7:8F:86
Certificate issuer: /CN=A91EC8F7/serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE
Certificate serial: E4
Authority key identifier: DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/B852EAA6C2A611EEB2AC4B6BC4F9AE02.roa
Signing time: Sat 01 Mar 2025 07:38:30 +0000
ROA not before: Sat 01 Mar 2025 07:38:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152324
IP address blocks: 157.10.176.0/23 maxlen: 23
157.10.176.0/24 maxlen: 24
157.10.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC8F7, serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE
Validity
Not Before: Mar 1 07:38:30 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c2b975-dcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:84:3b:e7:cc:73:2f:44:f9:89:d3:5f:86:
dd:3f:d6:5c:9b:e9:b4:96:a9:30:a3:73:88:1a:2c:
de:1f:f5:57:0b:09:e9:f8:5b:21:4c:ec:8e:54:ec:
a8:f4:4d:1e:55:4b:13:8c:0f:b6:da:7f:61:49:26:
ad:8c:96:4d:e1:c8:72:e6:f2:a1:aa:35:72:52:a0:
8e:78:b3:fd:52:e1:cf:d1:22:57:73:10:ab:0f:fd:
5b:b3:ec:3c:00:23:f7:d2:73:bc:a3:d6:f1:a9:11:
cb:6c:d6:84:cd:56:e9:d2:22:07:cb:7c:13:b6:b7:
1f:a8:62:bf:5e:68:01:4a:37:bf:2f:53:f1:e7:9d:
35:61:a5:48:e1:2c:90:49:26:d0:54:a6:28:23:18:
57:1c:0b:a2:9d:8e:70:4f:94:6e:b3:67:cb:0e:d2:
26:56:df:f1:eb:e8:69:a3:e2:7d:ed:0d:1f:51:df:
1e:19:ac:52:b4:3f:48:3c:e0:a8:01:66:ef:16:97:
a7:3c:1a:0a:d8:cf:4d:0a:58:88:fd:e8:73:74:4b:
12:28:31:8b:64:15:d7:9c:5f:18:37:6a:7b:b7:1e:
ab:b1:81:e7:0b:41:53:75:00:25:36:0c:7e:84:a3:
da:bb:af:36:3e:2b:c5:a8:e8:01:5b:ee:f7:42:7a:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:74:24:98:3E:50:C8:8D:3B:00:CB:C3:8C:28:EC:C9:C7:8F:86
X509v3 Authority Key Identifier:
keyid:DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/B852EAA6C2A611EEB2AC4B6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.176.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:ee:dc:a1:b0:83:b1:c8:d9:54:48:0e:ad:98:27:78:f5:fe:
41:7d:f9:b1:86:12:ba:ec:db:1d:0c:bb:69:98:2c:fa:ec:8f:
92:84:53:4f:cd:3d:e3:39:ff:af:b9:39:8a:75:a1:5d:93:cd:
64:08:22:77:68:69:ba:ae:66:71:65:a7:cc:ef:65:7b:69:d6:
09:71:3c:be:1e:7d:58:1d:c2:5f:e9:77:6e:6a:e2:af:e7:44:
85:81:6a:55:6c:11:d2:aa:14:81:02:b5:0a:ef:4c:56:f5:12:
11:86:02:8f:0b:95:13:97:44:e8:d4:a5:e2:9c:c5:57:98:79:
6e:59:3d:d4:2c:0d:74:0b:c2:19:10:2b:6b:25:6d:01:c7:d6:
60:bb:19:2e:95:1d:06:84:47:e7:82:3f:3d:39:48:79:da:73:
b3:0c:12:8e:ff:51:b9:78:5a:5e:77:e1:68:8b:f1:c3:f5:8e:
bd:07:90:4e:31:f2:3b:9f:fc:5f:1c:a3:ff:74:6b:5b:5a:f5:
7b:8b:8f:02:6e:bb:1e:af:02:35:2d:cf:bb:cb:64:41:9c:f9:
90:e0:fb:67:90:d1:c8:81:d2:4b:e1:08:fb:0c:3a:2a:d7:36:
17:c5:dd:0c:78:d2:9c:9c:d3:c3:3c:16:6a:b1:24:d0:df:75:
69:3e:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:05 2025 by rpki-client