Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/26BEAB3245B511EB969B596DC4F9AE02.roa
File: 26BEAB3245B511EB969B596DC4F9AE02.roa (raw, json)
Hash identifier: tliY3jYSQTp9oDGVfpmIPpl+OwdK9L8yQ5Ak8KCyoLM=
Subject key identifier: 46:CB:60:3A:C6:86:15:12:F5:61:24:6D:05:D4:90:3A:C6:AB:8C:9E
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 06D4
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/26BEAB3245B511EB969B596DC4F9AE02.roa
Signing time: Fri 02 Feb 2024 23:11:20 +0000
ROA not before: Fri 02 Feb 2024 23:11:20 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 2764
IP address blocks: 118.107.144.0/24 maxlen: 24
118.107.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Validity
Not Before: Feb 2 23:11:20 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65bd7698-57f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:97:2b:12:2d:54:c3:c2:c1:bd:02:ee:21:
45:ef:c0:69:c9:03:33:21:29:da:41:39:b8:6f:54:
b3:23:e0:59:6f:3c:b8:1f:71:c0:e4:64:b1:62:3c:
66:bf:36:6a:ef:2e:aa:a7:0c:97:c1:e6:c7:f8:1a:
8e:ba:b1:3f:0a:a4:9c:9d:51:98:7e:b7:dc:57:68:
a6:ff:fe:84:ae:8b:8b:d7:bd:6b:68:39:24:4a:ee:
c6:52:c9:0f:1c:65:ef:d9:a4:7e:9d:56:f5:dc:ac:
bc:21:d8:a1:54:46:35:77:e0:80:65:09:c1:63:5e:
77:03:2a:c0:01:1b:e1:49:84:7c:8d:6a:00:bd:4e:
bc:bb:d6:8f:50:ca:90:2c:e2:c7:db:e2:61:ed:8b:
41:5f:3a:65:2c:b2:3c:43:98:3a:9f:e1:79:91:b7:
82:32:13:9e:b7:33:f6:ec:d1:72:2a:3c:5b:16:21:
b8:7e:24:f5:83:99:ee:30:06:26:18:72:2c:8a:70:
76:24:c7:cc:25:fe:4b:82:8b:f5:dd:6f:31:15:96:
b9:20:c6:18:db:97:07:69:7b:4f:68:a2:5b:e9:c0:
b0:05:a4:48:b4:1e:a7:a0:77:33:81:cd:ef:be:f8:
e1:65:55:f1:38:50:da:f8:fa:ce:f3:12:f2:9b:23:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:60:3A:C6:86:15:12:F5:61:24:6D:05:D4:90:3A:C6:AB:8C:9E
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/26BEAB3245B511EB969B596DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.107.144.0/24
118.107.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:86:ac:8a:dc:76:0e:66:28:76:74:f6:5e:02:2a:90:11:c2:
b0:7e:e9:22:58:e0:6c:4f:79:51:8e:20:c8:85:9f:18:34:b2:
a1:18:7e:f3:49:3f:bd:b8:7e:ea:0a:8d:b8:95:4f:55:d4:fa:
dc:6c:a3:f8:fa:cf:1f:66:35:56:ec:34:ca:71:bb:21:66:ca:
cd:16:7c:82:f1:fd:5b:23:9e:f5:eb:9d:ec:b4:3b:34:c1:63:
a7:bf:1f:fd:27:2a:66:be:f7:3c:4d:36:9f:46:5a:e0:81:91:
25:fe:5c:1d:36:4a:9d:aa:7b:84:d1:e3:ab:b2:81:7a:cc:9a:
6c:3f:09:77:44:0d:0b:22:84:5f:7d:d8:8f:e8:c8:2c:03:de:
ec:19:68:df:1a:89:04:a1:2b:08:b7:ac:90:86:66:f2:14:73:
42:36:02:1a:3e:9e:f5:0a:d8:36:28:8c:23:bb:07:ad:06:e3:
81:71:d7:a9:7b:cb:1c:44:d9:0d:83:1a:e9:51:0a:fa:a1:18:
12:e2:68:18:84:09:5b:d0:70:51:8a:01:aa:97:86:81:a5:53:
e8:af:d5:09:c1:bf:85:24:56:c3:7b:f9:f3:8d:ad:cf:18:8d:
74:80:cc:49:44:4b:91:48:19:37:64:8b:b4:ec:25:72:4c:72:
2c:2b:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:53 2025 by rpki-client