Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa
File: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (raw, json)
Hash identifier: B82Un+DU6B7NyuhVj1V9v///1zPVJ3rXRY6EcEaq0ew=
Subject key identifier: 52:51:EA:44:89:F7:F5:05:11:99:8D:0B:D3:69:27:87:01:62:73:0F
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0536
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa
Signing time: Tue 03 Sep 2024 01:14:55 +0000
ROA not before: Tue 03 Sep 2024 01:14:55 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 26380
IP address blocks: 220.101.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Sep 3 01:14:55 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d6630f-0a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:6d:eb:e9:8a:a8:f0:41:a5:11:76:26:cd:
47:c0:ad:94:c2:8a:92:a1:e9:8e:02:5f:a7:c6:8c:
cc:12:4f:4e:06:85:a4:ad:14:32:66:b9:95:13:76:
31:9f:c8:cd:51:78:e3:ea:80:66:8a:13:42:96:ff:
02:45:20:09:5a:8c:e0:34:e9:0b:95:49:71:89:2f:
e2:ea:44:07:a2:cd:bc:53:a1:38:66:d6:1d:95:da:
49:a9:ba:3d:9a:88:49:ac:bc:44:41:67:8d:65:fa:
0a:75:8d:e1:41:5e:c3:c6:55:71:a9:47:b3:c6:35:
85:6e:46:15:f7:74:59:31:ef:99:db:81:a7:a0:7c:
0a:e8:8a:d3:4b:f9:66:72:5b:eb:d6:79:60:1a:21:
a5:d1:22:8f:d6:86:66:15:9d:a3:85:72:ce:5d:82:
b1:c6:f1:50:f1:11:4b:64:6c:3f:14:01:d7:2d:5c:
31:b7:30:cd:2d:b9:8e:66:5f:bf:f4:ec:34:73:1d:
d7:14:f3:78:a8:26:c4:c5:62:03:36:18:2a:9b:73:
fd:6c:2e:8f:5a:3d:4a:1b:78:14:f5:6b:00:05:2f:
e1:f4:c7:74:6c:8f:91:86:c9:a7:36:f0:48:58:2a:
76:0e:1a:41:dd:4a:93:91:b4:85:c7:2a:fa:ec:88:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:EA:44:89:F7:F5:05:11:99:8D:0B:D3:69:27:87:01:62:73:0F
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.101.52.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:3f:97:11:d8:a3:c7:7c:93:8b:8a:32:c4:61:c3:8f:d4:50:
93:ba:c2:46:e9:cf:81:42:64:b3:3f:8f:10:59:bb:93:b3:6f:
01:74:17:1a:17:f8:84:ea:e9:94:02:ac:3d:19:db:7c:b9:97:
01:49:d0:ca:14:15:f8:65:3d:02:18:3c:c3:cb:06:0c:17:14:
5d:6a:08:9c:10:5b:dd:e9:5c:93:75:2e:59:84:e6:0f:b9:dd:
e2:27:51:32:86:fb:86:fe:32:84:0e:46:2c:0d:05:9c:e1:3b:
5c:4d:e1:91:f0:6b:3e:b3:65:87:77:de:f1:f1:68:7f:9d:9e:
1a:d3:0a:cd:8c:ad:92:69:77:7d:22:0c:04:bf:67:b8:95:71:
9e:92:91:4f:50:a4:39:d6:e2:7f:53:5f:22:ae:5b:4e:73:c8:
4f:9a:b7:bc:93:2b:05:8f:06:8a:59:ba:e8:d2:ef:69:5c:b9:
85:f4:85:15:47:4c:ff:2c:59:f1:36:6d:94:14:fc:90:ba:6e:
7b:cd:4b:82:e7:c2:ca:99:bf:8a:13:61:ca:74:97:c6:76:77:
3d:67:e0:f2:ed:62:c7:3c:fb:87:2a:49:b2:82:6c:f2:02:65:
6d:54:21:d6:26:8d:46:0e:5b:b7:b0:05:b7:53:1c:c4:0d:19:
37:8d:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:00 2025 by rpki-client