Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/50DCDB40BC1311EFB0390A15C4F9AE02.roa
File: 50DCDB40BC1311EFB0390A15C4F9AE02.roa (raw, json)
Hash identifier: a+r+rXtdKU6kbYxj1+MOJyG4hTknk1GIGc+/Lq187n4=
Subject key identifier: 0E:95:53:1A:FF:0E:03:9E:34:E2:2A:A2:82:CB:9A:E5:17:73:1A:B7
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 09B8
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/50DCDB40BC1311EFB0390A15C4F9AE02.roa
Signing time: Tue 17 Dec 2024 01:07:42 +0000
ROA not before: Tue 17 Dec 2024 01:07:42 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9908
IP address blocks: 61.10.0.0/16 maxlen: 16
61.10.0.0/17 maxlen: 17
61.10.0.0/18 maxlen: 20
61.10.64.0/18 maxlen: 18
61.10.64.0/19 maxlen: 20
61.10.96.0/19 maxlen: 20
61.10.128.0/17 maxlen: 20
61.15.0.0/16 maxlen: 16
61.15.0.0/17 maxlen: 20
61.15.128.0/17 maxlen: 20
61.18.0.0/16 maxlen: 20
125.59.0.0/16 maxlen: 20
203.83.64.0/18 maxlen: 18
203.168.192.0/18 maxlen: 20
203.168.208.0/21 maxlen: 22
218.252.0.0/16 maxlen: 16
218.252.0.0/17 maxlen: 20
218.252.128.0/17 maxlen: 20
218.253.0.0/18 maxlen: 20
222.166.0.0/16 maxlen: 20
222.167.0.0/16 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Dec 17 01:07:42 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6760cede-8f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:23:4e:e3:e5:49:d1:95:c3:ef:18:b6:80:
f4:48:88:9c:48:78:e4:59:44:73:58:00:d3:86:ae:
47:a7:38:78:79:50:31:8e:2c:5e:8a:e7:66:ad:1a:
37:e1:96:a4:f7:54:52:32:64:44:a5:f5:f7:fb:84:
73:fe:4f:ef:cc:41:87:82:e0:9c:70:fd:96:08:c9:
9d:04:48:16:3b:24:78:be:af:0f:31:ff:94:94:bf:
5d:c9:39:70:82:cb:ab:b2:d1:f1:b4:1d:14:91:48:
4b:75:92:48:36:6e:cb:cc:7e:10:f7:ad:da:b9:36:
18:7c:d4:b7:2b:32:33:f0:36:22:5d:94:fa:8b:4a:
b1:3f:c2:d3:f6:52:f7:07:39:a9:56:30:1e:d0:e3:
81:34:1b:a1:c8:e0:0d:57:cf:e4:e5:eb:f8:b0:fc:
93:01:db:b3:27:f0:49:76:34:d7:5b:73:52:8e:ea:
30:dc:59:5a:7c:83:fa:8c:df:27:b7:b2:0c:8c:19:
be:5e:ba:ba:1f:63:d3:96:77:42:8c:43:4e:c5:8d:
b3:f5:39:2e:b6:e9:8e:85:27:28:96:fc:d7:cb:9c:
75:5b:33:e0:c9:38:c9:52:e0:96:40:50:fc:85:81:
7f:c9:65:b0:6b:93:f4:72:b7:cd:dd:f7:34:c6:17:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:95:53:1A:FF:0E:03:9E:34:E2:2A:A2:82:CB:9A:E5:17:73:1A:B7
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/50DCDB40BC1311EFB0390A15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.10.0.0/16
61.15.0.0/16
61.18.0.0/16
125.59.0.0/16
203.83.64.0/18
203.168.192.0/18
218.252.0.0-218.253.63.255
222.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
aa:ac:5f:37:dc:0b:21:c3:ec:cc:89:85:6f:60:2c:b1:c0:84:
ac:05:6f:ab:35:60:9c:e7:be:02:56:82:8b:85:eb:14:d5:20:
c9:a5:6b:2e:6a:75:17:e9:1a:bb:c9:bf:81:fa:1f:d7:36:6e:
83:f5:ab:6b:12:4c:df:f6:75:e2:98:ca:6b:d6:38:ea:cb:8c:
b3:94:a6:b1:c8:84:b4:c7:ab:6a:b5:56:cc:6d:f8:c6:ab:6d:
c0:20:52:66:e4:2d:b9:24:35:74:3a:84:20:38:62:6d:e8:5e:
c9:58:9e:05:8a:8f:80:eb:75:2c:47:dc:d0:78:56:f1:41:6e:
80:0b:c3:cb:b5:b1:17:f5:1e:4b:3a:22:3f:84:6a:0b:cd:d3:
23:93:82:71:0a:ef:51:5a:f9:de:0e:39:ce:3a:c6:5f:53:a0:
b0:b6:56:b2:19:1a:d3:4f:89:d5:f6:f7:1f:56:3b:13:82:67:
0e:d2:a1:b5:25:c2:e4:3b:b5:37:8c:d1:31:2f:58:60:24:6b:
84:a6:96:13:ea:ff:77:a8:d6:79:a4:c2:8e:f4:bc:7f:62:9c:
f6:cf:f0:49:4c:14:9f:d3:20:b5:da:40:bc:2e:bd:23:17:ce:
3c:62:54:a4:e0:ae:a5:b3:93:42:f8:91:35:d9:cc:e4:81:0e:
2f:c6:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:02:50 2025 by rpki-client