Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
File: 9826D5EEB45011EE829AF51CC4F9AE02.roa (raw, json)
Hash identifier: 5BoxLKekJFCkZTtAL7aRDOqjExsyHH7PHxs8u02byjw=
Subject key identifier: 4F:94:3A:70:30:A5:96:22:A6:12:E3:F3:AB:FE:43:FE:4D:08:D2:23
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 332C
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
Signing time: Thu 14 Mar 2024 16:01:14 +0000
ROA not before: Thu 14 Mar 2024 16:01:14 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 4847
IP address blocks: 118.188.18.0/23 maxlen: 23
118.188.20.0/22 maxlen: 22
118.188.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13100 (0x332c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 14 16:01:14 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f31f4a-163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:a6:e4:b9:5f:c2:b1:2d:ce:96:0a:c2:83:
e7:ea:01:29:0b:b1:dd:2d:68:98:66:0c:7f:1f:31:
b6:62:1c:b1:5c:ad:96:59:2d:c3:92:75:70:14:64:
13:cb:c6:2c:32:79:59:d8:46:73:16:02:51:af:76:
36:e6:d8:9c:8e:b2:d6:cf:bb:4c:87:5e:80:16:96:
fe:02:22:b3:4f:87:ed:e3:d5:e6:a7:dc:8d:e7:3e:
18:99:5a:39:9c:28:c0:bd:d0:a1:12:87:ef:ed:86:
33:90:4f:96:ac:a1:49:4d:51:40:b1:df:62:c0:3f:
ca:2b:84:ed:1e:50:e4:5b:da:cc:7a:82:8a:a6:52:
e8:e0:9d:3b:a5:f3:71:20:31:c7:48:6e:b9:8b:b7:
2a:54:68:c5:53:5f:d3:b4:e5:ee:76:ef:38:9e:26:
63:0b:02:3d:07:db:fe:d1:46:fd:de:f9:42:8e:ec:
60:40:8c:c9:43:08:00:92:9e:ac:e2:a1:4d:93:33:
a1:d4:76:d3:47:1e:e7:73:67:cf:5c:5e:a7:5d:34:
06:d9:93:e5:84:06:41:77:fa:ac:ba:71:aa:8a:34:
8d:aa:e6:de:83:4c:62:31:be:a6:07:d2:a7:3f:54:
66:f1:c7:38:4e:50:b5:b1:ff:f2:8e:ec:cc:f8:13:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:94:3A:70:30:A5:96:22:A6:12:E3:F3:AB:FE:43:FE:4D:08:D2:23
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.188.18.0-118.188.25.255
Signature Algorithm: sha256WithRSAEncryption
57:a5:c7:ff:66:ba:51:cb:97:64:9f:bc:93:50:6c:f8:1c:b3:
71:10:68:9e:46:84:31:f2:f2:3a:57:cd:95:38:51:0b:56:9c:
23:16:60:b5:b4:fb:9f:02:9f:f6:df:eb:c9:b1:8c:95:56:27:
4a:32:fc:4b:90:18:94:5b:a8:fc:41:e6:74:19:b1:46:33:dd:
ed:c2:e0:05:a9:87:58:7f:e2:f1:7b:88:60:3f:36:56:c2:5f:
12:d9:9b:5a:40:24:54:89:09:c2:4b:85:5e:94:9b:2d:5a:5a:
15:0d:00:58:4e:83:7d:ad:30:b9:1a:db:29:4e:13:4f:c5:d1:
8a:7b:be:3b:13:5b:5f:e4:0a:94:25:e6:ea:dc:eb:54:07:ce:
64:2e:7c:db:55:ff:8d:59:13:3b:89:ec:7d:44:3f:48:63:9f:
77:5c:81:f9:3e:07:ec:76:6e:6e:d8:07:66:57:2f:b9:9d:64:
66:c3:c5:d4:79:af:fe:9d:0b:58:59:22:22:11:f9:3b:1c:92:
90:65:0b:53:6d:43:33:28:93:df:9c:42:4f:bf:2e:42:c7:6b:
f5:ef:96:9a:27:f4:5e:e3:92:b0:37:82:92:52:6a:32:9c:30:
6a:2e:4c:2f:ca:89:a0:5c:be:9a:a1:7e:69:6c:ed:8f:25:b9:
12:74:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:22 2025 by rpki-client