Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
File: A98668464EEB11EFB3305C85C4F9AE02.roa (raw, json)
Hash identifier: o00oY1mvFq1qalSn730w1Zx7f6lSQNkyqzmPEMq0qK4=
Subject key identifier: 90:5B:86:A5:A5:80:48:EE:F8:93:24:49:0D:8E:86:69:5F:FE:B3:F5
Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial: 072B
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
Signing time: Wed 31 Jul 2024 03:19:14 +0000
ROA not before: Wed 31 Jul 2024 03:19:14 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132793
IP address blocks: 202.92.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Validity
Not Before: Jul 31 03:19:14 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a9ad32-4f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:00:ac:df:d2:62:d7:1f:9b:71:1b:2b:b1:
db:f8:21:06:64:0c:11:af:a7:6b:23:a0:83:15:c3:
97:83:a3:d7:a4:c1:0a:37:10:45:c2:dc:6d:50:57:
b4:bc:91:82:a0:7a:3f:24:c7:51:b5:b7:44:43:92:
a4:35:51:ac:8a:f5:83:dd:f3:27:e0:ca:3b:e4:fe:
44:50:d0:44:b1:0a:5e:ea:1e:b8:13:b2:d1:7f:c7:
ba:0e:e4:a6:3a:e7:7c:14:56:c3:54:10:27:d0:98:
88:81:9b:c3:85:ab:2b:e3:61:c5:b6:2f:43:f6:49:
89:8f:c2:57:64:5b:52:c7:c5:fc:fa:d0:c6:33:27:
3e:ef:2d:fa:b9:6e:df:57:64:15:08:93:1e:fa:00:
d5:37:ec:0b:32:2b:1f:5b:4a:a9:f5:fc:e1:ec:a7:
e6:38:90:c8:ed:12:d4:aa:75:be:5b:09:9e:b7:a6:
6b:5a:1e:92:59:27:78:7a:3a:9c:0d:34:d8:16:54:
49:78:07:1a:86:67:00:b7:b3:d7:40:b1:8e:39:a3:
9c:82:a9:a3:32:fb:7c:90:28:5f:de:f9:37:d8:b4:
2f:85:93:f8:70:77:05:b2:7c:16:f1:51:37:e2:a1:
09:48:5a:03:47:d3:55:f5:d6:50:d9:6a:e9:99:13:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:86:A5:A5:80:48:EE:F8:93:24:49:0D:8E:86:69:5F:FE:B3:F5
X509v3 Authority Key Identifier:
keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.92.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bf:ae:96:6e:30:f8:b0:c6:f6:62:1e:1f:22:5e:48:48:66:
e3:61:41:27:76:f5:9b:cd:e7:dd:42:b2:c2:a5:5c:57:a7:be:
1b:0c:6c:56:d4:bb:f0:f8:76:5b:70:7e:b7:20:de:90:85:ce:
40:63:06:47:18:2d:97:a3:d6:b6:06:59:8d:a1:19:c9:cd:f3:
58:3e:f0:ac:ca:1e:d0:b4:e2:3f:42:09:02:85:ce:19:27:b9:
5a:a7:10:3d:0e:d5:54:c3:69:87:84:e2:af:0a:f8:2e:a2:4b:
21:28:7c:f0:15:fa:4b:95:c3:92:02:89:1a:c3:35:9e:9e:c2:
32:84:d3:19:6d:86:78:8e:07:31:0d:7c:f0:cb:aa:3b:1d:65:
db:83:4a:ba:d5:e4:ac:f7:fc:81:38:5f:a3:75:21:95:23:dd:
58:7f:df:4a:e8:89:6b:20:d3:08:48:6b:7f:80:b3:92:bb:11:
f1:3f:38:72:3c:0e:f1:73:74:d4:90:c8:ba:ca:ec:21:d1:58:
1e:c2:5f:22:c8:b9:1c:19:ee:6e:23:5f:bd:a3:a3:7a:e2:3d:
28:52:ed:68:00:fa:50:81:0f:1c:57:12:12:cb:66:8f:8d:f8:
15:dd:ed:13:4d:f2:65:fb:85:96:d4:ee:bb:66:15:4a:5a:f0:
6a:ce:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:12:50 2025 by rpki-client