Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa
File: 206969823B9411EB9F059D7EC4F9AE02.roa (raw, json)
Hash identifier: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=
Subject key identifier: 0B:94:B2:64:87:81:3A:4A:92:A0:E4:8B:90:B2:62:46:4E:6C:8F:80
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0AFE
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa
Signing time: Fri 16 Aug 2024 20:28:23 +0000
ROA not before: Fri 16 Aug 2024 20:28:23 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 0
IP address blocks: 203.190.227.0/24 maxlen: 24
203.190.230.0/24 maxlen: 24
2001:de8:4::/64 maxlen: 64
2001:de8:5::/64 maxlen: 64
2001:de8:5:1::/64 maxlen: 64
2001:de8:6::/64 maxlen: 64
2001:de8:6:1::/64 maxlen: 64
2001:de8:6:2::/64 maxlen: 64
2001:de8:7::/64 maxlen: 64
2001:de8:7:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2814 (0xafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Aug 16 20:28:23 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66bfb666-eafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:2f:a3:8b:48:fc:91:20:a5:c7:be:22:ec:
a3:22:62:57:3f:b6:16:43:94:5c:1f:df:c3:c9:ed:
1f:64:74:d0:73:4c:34:4c:43:06:63:f3:2e:f0:e5:
33:c9:a2:31:df:9e:23:57:9c:6b:17:a0:bb:8c:f5:
ca:cb:7c:33:a3:8e:aa:de:d2:b9:28:c8:92:e6:a4:
85:6b:dc:49:88:6f:84:fd:4f:8c:71:8e:ac:8c:5e:
22:25:51:12:9a:86:70:4a:f6:14:64:8c:e8:6f:4f:
42:64:82:90:3c:b8:2f:ba:4a:3c:1c:14:2e:05:b2:
8e:d6:53:a4:ce:2d:bf:4d:1e:90:ca:4d:f0:2e:f6:
1b:0d:76:dd:94:aa:f7:00:9d:da:4e:81:9e:f3:25:
e2:8b:cc:ab:b7:5a:f3:d9:fb:a0:ec:12:40:da:b3:
e7:3a:e3:53:b1:24:76:75:69:5d:5d:95:b0:9c:5b:
53:46:6d:ab:60:92:9b:fc:f2:51:02:bc:b3:51:3c:
89:28:a0:da:ff:a2:f9:47:15:dd:08:3d:f1:c8:21:
08:4a:53:9f:05:73:a1:8c:24:4d:a2:f0:4b:2c:1a:
53:7b:51:f7:b7:d5:f2:0c:7d:d8:14:1f:3b:14:9c:
57:c9:07:0b:76:24:e1:b1:6f:0d:30:c2:83:e6:5c:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:94:B2:64:87:81:3A:4A:92:A0:E4:8B:90:B2:62:46:4E:6C:8F:80
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.190.227.0/24
203.190.230.0/24
IPv6:
2001:de8:4::/64
2001:de8:5::/63
2001:de8:6::-2001:de8:6:2:ffff:ffff:ffff:ffff
2001:de8:7::/63
Signature Algorithm: sha256WithRSAEncryption
62:50:70:da:3e:e1:38:5c:0a:82:18:01:72:01:5c:7f:47:f0:
9a:29:3a:42:b5:13:22:82:9a:d1:80:e7:75:9e:f6:5b:90:e2:
8f:9f:e0:3d:28:69:3b:ff:96:b0:78:df:fd:a5:51:31:e0:04:
cf:41:c9:85:e7:db:7e:2b:8c:bf:19:d4:66:c8:bb:21:cb:cc:
d8:7d:03:bd:55:b9:c4:43:46:ff:be:fc:6f:9b:af:bb:44:a0:
e1:2c:c5:20:03:14:25:b8:b2:8f:69:0c:b2:84:3d:7a:01:ac:
4b:22:1f:6c:db:be:3d:00:74:42:50:83:53:5f:26:6a:0f:9d:
15:0f:4f:68:4d:dc:2a:b8:55:30:bb:a7:63:e6:ad:f1:42:ad:
d4:7d:d0:22:4e:bd:1c:a0:ef:c4:35:5f:91:66:ed:c7:bc:6f:
d4:8c:30:c4:56:3a:79:11:34:ff:19:c9:1f:e5:ed:99:6f:5b:
2d:f6:46:94:bb:1f:ab:60:70:97:79:09:d3:23:7e:0f:ce:cc:
06:bd:2c:a9:bb:ce:1a:cf:f1:b4:64:98:bc:2f:bc:ae:5a:55:
e9:30:5e:84:85:ef:3a:3b:5f:b3:06:88:a0:29:d4:c0:cb:ba:
a8:23:98:5f:b5:69:d5:59:08:9e:00:51:42:b2:fe:37:d2:5c:
b4:2e:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:09:30 2025 by rpki-client