Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa
File: 64B67878AE7711EA98E12731C4F9AE02.roa (raw, json)
Hash identifier: whniw/rt8w3AT9eiCUwlSP3EPH0+CO0/R53FHraLneY=
Subject key identifier: C8:6C:21:5F:CB:13:11:13:43:64:20:11:2A:67:AB:BC:77:DF:1D:3B
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0AA8
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa
Signing time: Fri 02 Aug 2024 20:29:24 +0000
ROA not before: Fri 02 Aug 2024 20:29:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 7262
IP address blocks: 116.66.218.0/24 maxlen: 24
116.66.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2728 (0xaa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Aug 2 20:29:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66ad41a3-7246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:55:c6:64:c3:56:02:29:db:c3:b8:9b:47:
fa:40:e1:e2:bb:c7:1a:f5:69:21:aa:04:1e:e5:0a:
6c:e4:77:b7:37:62:96:71:9b:3d:66:74:c7:51:73:
94:30:a6:d8:4a:e3:be:9e:f4:b1:1b:c8:5b:a4:5b:
57:48:41:db:a0:ae:41:69:f5:5e:a1:23:af:a0:a8:
6a:5b:7a:36:47:a0:06:6e:2a:82:a6:67:8b:1a:b3:
16:73:eb:07:1b:df:48:e8:ec:d6:be:54:88:26:68:
66:4f:d2:85:a3:2b:af:01:78:75:47:3f:4e:c9:28:
f8:df:1c:01:42:df:fc:0e:94:e7:33:53:3f:20:59:
89:96:4e:8f:09:cf:e6:42:a6:f9:c9:da:fa:4b:52:
59:7b:1c:57:d2:39:fe:93:cd:50:79:88:6c:ea:8c:
11:0f:81:54:9e:52:da:1d:43:f1:de:e1:73:d3:dc:
4d:30:c5:94:d8:20:28:c1:f1:aa:5f:67:b5:1e:95:
77:04:03:af:09:d9:31:33:2d:ab:e6:f1:fb:ce:f2:
28:25:a7:58:d8:4c:76:2d:ce:93:65:40:3c:a5:e0:
dd:8f:e4:04:69:44:7a:a6:91:64:f1:4c:ff:2d:5b:
83:5b:ca:f2:57:e6:f5:15:41:60:bf:d6:c9:59:75:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:21:5F:CB:13:11:13:43:64:20:11:2A:67:AB:BC:77:DF:1D:3B
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.66.218.0/23
Signature Algorithm: sha256WithRSAEncryption
22:ad:d1:0f:bf:51:40:a1:3d:c0:32:53:11:79:0f:d6:bf:21:
4a:e6:46:74:88:38:52:a4:d9:0c:31:10:00:6d:71:a1:cc:29:
bc:3d:53:1b:f5:91:53:62:eb:09:a0:eb:ac:cd:9c:fb:38:7c:
48:92:59:19:09:12:76:0c:cd:4b:48:cb:ff:df:80:8f:24:0f:
8a:2c:26:47:7a:47:39:1f:fb:65:97:ed:0b:12:3a:85:7d:b0:
76:b6:b6:fb:c0:c9:fc:60:ef:a3:f3:3f:7f:46:5e:a0:f7:63:
56:d8:7f:ec:d1:98:af:29:cc:99:6e:71:3e:61:4e:a8:bd:db:
e1:d5:16:0f:fd:25:e0:ad:91:30:55:97:30:2d:69:75:3a:28:
58:70:23:10:3e:23:41:70:be:ae:1a:ca:cc:85:99:f6:39:34:
8d:93:20:9e:5a:27:16:40:75:cb:c1:d6:f6:bc:58:ce:ce:0a:
55:8e:84:56:14:47:c9:52:39:5a:27:17:d5:2e:27:cd:e6:3a:
66:a6:ce:2b:12:db:a6:1b:4d:ef:be:78:14:b0:76:03:92:e2:
5e:d4:64:05:af:ac:4c:5c:8b:15:d8:53:6a:a5:79:0e:93:33:
27:41:95:98:62:ce:5b:1a:c5:b0:76:1a:7d:f8:b0:92:4f:4e:
a0:d2:f4:0e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB
OTNDMjYzQUEwHhcNMjQwODAyMjAyOTI0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmFkNDFhMy03MjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFRVxmTDVgIp28O4m0f6QOHiu8ca9WkhqgQe5Qps5He3N2KWcZs9ZnTHUXOU
MKbYSuO+nvSxG8hbpFtXSEHboK5BafVeoSOvoKhqW3o2R6AGbiqCpmeLGrMWc+sH
G99I6OzWvlSIJmhmT9KFoyuvAXh1Rz9OySj43xwBQt/8DpTnM1M/IFmJlk6PCc/m
Qqb5ydr6S1JZexxX0jn+k81QeYhs6owRD4FUnlLaHUPx3uFz09xNMMWU2CAowfGq
X2e1HpV3BAOvCdkxMy2r5vH7zvIoJadY2Ex2Lc6TZUA8peDdj+QEaUR6ppFk8Uz/
LVuDW8ryV+b1FUFgv9bJWXWObQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMhsIV/L
ExETQ2QgESpnq7x33x07MB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2
NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvNjRCNjc4NzhB
RTc3MTFFQTk4RTEyNzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAF0QtowDQYJKoZIhvcNAQELBQADggEBACKt0Q+/UUChPcAy
UxF5D9a/IUrmRnSIOFKk2QwxEABtcaHMKbw9Uxv1kVNi6wmg66zNnPs4fEiSWRkJ
EnYMzUtIy//fgI8kD4osJkd6Rzkf+2WX7QsSOoV9sHa2tvvAyfxg76PzP39GXqD3
Y1bYf+zRmK8pzJlucT5hTqi92+HVFg/9JeCtkTBVlzAtaXU6KFhwIxA+I0Fwvq4a
ysyFmfY5NI2TIJ5aJxZAdcvB1va8WM7OClWOhFYUR8lSOVonF9UuJ83mOmamzisS
26YbTe++eBSwdgOS4l7UZAWvrExcixXYU2qleQ6TMydBlZhizlsaxbB2Gn34sJJP
TqDS9A4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:34:42 2025 by rpki-client