Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/673E7D66F73911EE8BEC0A76C4F9AE02.roa
File: 673E7D66F73911EE8BEC0A76C4F9AE02.roa (raw, json)
Hash identifier: yCObzbtV27l5/z/K4jU5ZOK5OZGZWWAdqaoCjC2eBGg=
Subject key identifier: E8:B6:9E:42:24:7E:6D:DF:00:EA:20:F7:3F:0A:D1:E2:BE:06:35:3A
Certificate issuer: /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial: 33B3
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/673E7D66F73911EE8BEC0A76C4F9AE02.roa
Signing time: Wed 10 Apr 2024 12:54:01 +0000
ROA not before: Wed 10 Apr 2024 12:54:01 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 139829
IP address blocks: 202.78.27.0/24 maxlen: 24
202.78.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13235 (0x33b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Validity
Not Before: Apr 10 12:54:01 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66168be9-5f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:9c:80:a2:b0:e3:53:72:d1:13:ba:86:86:
82:f5:c3:29:ea:d2:bd:5c:f2:b4:d4:6f:00:e4:a5:
42:69:a9:d8:d0:d6:00:f0:a1:c9:9c:ab:ee:07:08:
85:b7:10:50:b0:6b:8b:e9:5c:32:df:47:54:26:40:
01:bd:00:eb:bc:dd:32:34:1a:75:fe:1f:74:85:4a:
2c:69:ff:95:5b:3a:19:df:3b:65:54:d3:ff:78:fd:
02:cd:73:97:ec:dc:44:f9:7b:19:a4:6a:a9:f5:ee:
26:cf:41:27:26:91:33:9e:a4:be:b7:f6:a7:03:7f:
56:bf:a5:86:bc:54:aa:58:10:d1:d5:9e:fd:9d:be:
54:b7:fe:48:97:9e:b4:97:4a:9a:18:c4:13:1d:5d:
2f:ec:63:a0:7d:d9:75:54:d5:83:bb:81:d5:2b:5a:
aa:af:49:9b:ea:74:7b:25:b9:c0:6a:97:d3:08:62:
e8:0f:2c:92:30:a4:5a:5e:bc:ee:88:a3:2a:a8:6c:
ca:75:7b:4b:41:69:b9:93:b6:eb:12:e0:20:b7:2c:
52:f5:82:e3:76:f8:9e:e0:c1:4b:89:98:87:f6:e9:
33:db:a8:c3:c8:8c:de:86:d8:91:2e:6c:e3:94:17:
fe:36:c8:bd:7a:8d:e1:2d:0b:71:6e:85:98:d0:f0:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B6:9E:42:24:7E:6D:DF:00:EA:20:F7:3F:0A:D1:E2:BE:06:35:3A
X509v3 Authority Key Identifier:
keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/673E7D66F73911EE8BEC0A76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.78.27.0-202.78.29.255
Signature Algorithm: sha256WithRSAEncryption
98:d6:dd:be:6e:22:36:76:2f:28:7e:19:4b:62:ca:0e:f5:bf:
ec:c4:e8:0e:f4:bb:86:08:96:df:25:3b:63:7c:ac:08:15:b8:
4e:fd:b4:73:ac:81:ee:86:ee:67:05:83:3b:6c:0d:9f:21:4e:
5b:e8:9d:67:cd:0d:4b:d1:56:c1:87:94:af:10:c5:5f:ec:aa:
47:df:97:16:6a:f4:60:2a:a7:99:e1:09:56:49:eb:40:e4:70:
74:5b:16:79:b1:1a:8c:a4:10:a4:11:0a:4b:5d:56:56:01:89:
37:ea:1b:ea:1e:db:b7:9c:91:dc:8b:1e:92:4b:99:23:af:0d:
c0:cb:a4:2a:99:c0:49:3b:d7:7d:41:07:f9:84:0c:f0:d4:73:
8f:55:69:ac:4c:6e:76:32:06:d7:95:2c:93:32:43:fe:f6:9a:
c6:81:ba:4e:c9:a0:44:25:af:91:db:82:72:77:b1:4b:67:60:
46:50:30:a7:1e:37:3c:6b:2f:5d:aa:c7:a5:0c:d0:50:d6:b9:
60:04:4d:03:c9:0f:f7:df:0b:30:f1:66:2e:06:f6:11:13:fc:
7d:6a:43:f4:4f:0b:64:7a:b6:71:cc:e3:c2:71:8e:6d:45:03:
75:e6:41:16:36:e9:9a:85:db:9c:35:1b:25:8f:2c:d1:e8:e8:
98:a6:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:14 2025 by rpki-client