Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa
File: D8B25C54EC2211EA84C17E26C4F9AE02.roa (raw, json)
Hash identifier: G8R2HGhEO91zZJR3k6r/R5FFkuswRD4+38OOZJqUih0=
Subject key identifier: DF:E4:43:06:64:C3:8E:B7:9B:A4:4F:1F:3E:75:D2:61:F9:42:28:CE
Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial: 0758
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa
Signing time: Wed 10 Apr 2024 23:01:35 +0000
ROA not before: Wed 10 Apr 2024 23:01:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24049
IP address blocks: 203.119.18.0/24 maxlen: 24
2001:dd8:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880 (0x758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Validity
Not Before: Apr 10 23:01:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66171a4f-1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:b7:28:34:38:da:39:17:7c:99:a6:b5:13:
04:82:3b:aa:a1:fc:24:f7:0a:84:f6:90:0b:ba:39:
6e:4e:fc:89:40:4e:3a:bd:d9:c8:e4:f9:81:49:12:
f6:65:04:eb:33:05:15:18:60:0a:98:30:68:c5:20:
dd:ae:43:d4:00:84:81:26:2c:25:9a:83:df:35:c1:
dd:85:f3:be:7e:b5:b0:0c:b5:f6:f0:4e:80:92:2b:
27:06:a2:d9:e3:20:35:9f:0f:5d:48:48:41:6a:40:
10:6f:58:17:ef:c4:4e:9b:52:89:91:74:85:d8:f7:
dc:a2:1d:07:ed:00:4f:9f:6a:4e:16:0d:7f:ef:86:
9a:2b:30:98:6f:c7:3d:d0:58:c7:09:32:74:1d:63:
97:2b:b0:f1:06:e5:ab:d6:2a:b0:73:0b:18:95:d9:
e1:69:9e:cd:6b:f7:7b:f5:7c:ab:6c:e2:7e:49:d6:
b7:fa:8e:dc:25:47:e0:e3:72:e0:35:04:bc:c4:b8:
60:05:a2:39:10:33:4e:48:dd:64:99:8e:94:c1:01:
dd:51:8a:2e:33:14:74:a9:b5:8c:7e:fe:18:67:9f:
b6:3b:07:15:a9:32:89:9c:32:16:4e:73:a0:aa:ae:
38:8b:28:99:4f:2e:50:76:d6:01:c6:b0:93:68:ac:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E4:43:06:64:C3:8E:B7:9B:A4:4F:1F:3E:75:D2:61:F9:42:28:CE
X509v3 Authority Key Identifier:
keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.119.18.0/24
IPv6:
2001:dd8:1b::/48
Signature Algorithm: sha256WithRSAEncryption
ac:de:17:f5:a8:1e:e7:f3:69:ef:55:55:0e:7b:32:65:c1:8f:
ad:1a:2a:04:c4:33:43:1a:f2:46:13:31:e6:ed:74:c4:9d:b2:
3e:41:b9:e5:c6:85:b7:6e:28:17:f7:cf:ef:8e:a3:67:95:a1:
c0:7d:6c:fb:41:1c:59:89:6e:a6:cd:ed:e6:19:11:f0:b6:77:
fc:d5:48:7c:43:75:49:d5:a2:cb:6d:b5:10:bb:8a:57:d7:f3:
f2:bc:e2:dd:28:f8:cf:cd:74:53:a6:4b:40:2c:9a:60:dd:82:
65:97:90:8f:ea:30:ca:21:82:e9:96:dc:11:e6:4d:82:ad:8d:
72:90:bf:36:9a:4a:78:dc:4f:50:0d:ba:03:dd:01:5b:15:6a:
f3:00:57:60:c4:dc:c4:9e:79:06:33:01:1e:2f:c6:61:88:aa:
34:50:24:62:2d:b0:b8:fb:51:70:85:79:13:a4:34:1d:a8:02:
81:04:b7:38:ff:1e:e0:f4:8e:9b:c2:f4:0b:ee:9c:c1:09:35:
1a:08:67:a5:7a:7e:1e:17:53:b7:39:2c:c2:e4:db:f1:c3:2d:
c3:15:65:4c:44:e2:e3:61:b3:ae:14:84:ed:b0:41:c7:f7:52:
1e:3a:27:f6:0d:2f:56:11:b7:6c:3d:c6:9d:3d:3a:6e:a7:2e:
45:00:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:22:54 2025 by rpki-client