Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
File: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier: jQRT5PlFbI2u576tkmy6PzP4OP+SK4T1Hzx4zOkrIWw=
Subject key identifier: DB:8B:38:00:4B:76:97:F6:6D:38:F0:E4:48:9A:BE:D8:17:3F:B1:02
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 34E4
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
Signing time: Mon 22 Jul 2024 14:40:32 +0000
ROA not before: Mon 22 Jul 2024 14:40:32 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38554
IP address blocks: 58.181.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13540 (0x34e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 22 14:40:32 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=669e6f60-445b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:f2:b8:65:dd:39:d3:40:aa:1a:1d:a9:44:
b2:bc:7d:5a:61:a5:96:0a:2c:d4:5c:18:90:1b:2f:
82:ce:55:d1:70:1a:0d:5a:45:6a:d3:83:fb:32:b9:
13:6b:da:a7:38:52:c7:68:61:8c:d4:4e:97:44:96:
59:51:ac:4a:57:18:54:05:09:ec:56:b2:9c:ee:55:
17:19:3b:14:39:db:b7:8b:09:24:bc:1d:fa:8f:bd:
a6:d8:7f:50:ef:57:af:53:a2:ac:e8:9a:f8:53:22:
88:3e:fa:ee:be:22:04:08:0e:83:91:4e:9f:19:e0:
6c:c4:28:85:c4:1c:27:cc:73:cc:6c:29:86:06:a7:
ab:54:4d:c0:e3:84:61:e3:2e:ed:eb:b4:cb:30:88:
22:bd:2a:cf:4d:54:80:be:9e:6f:ad:80:4e:e7:43:
bd:9a:0e:fa:fb:dc:c7:20:b2:30:78:33:31:90:c1:
93:4e:b1:e2:b3:ed:e4:b3:ec:ae:bc:06:5b:da:45:
5c:ca:d2:d7:ac:13:ff:1d:6f:28:c5:07:7c:f8:64:
46:bc:7c:7d:a0:25:dc:55:fa:79:2e:0a:73:14:95:
a0:35:d1:d5:e4:8c:a5:13:2f:34:a0:d6:42:b1:ee:
81:c1:86:0d:d5:c5:66:4d:46:4d:a1:a4:a6:38:e2:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:38:00:4B:76:97:F6:6D:38:F0:E4:48:9A:BE:D8:17:3F:B1:02
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.181.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1f:b0:b9:ba:88:d1:8f:73:4c:b0:ca:54:ec:bb:16:e1:7d:
a7:74:cf:49:7b:bc:27:46:5e:8e:1c:25:2c:94:74:8a:97:32:
0e:21:43:5c:ef:8a:e2:f3:52:8f:34:ff:d0:b3:d5:f0:88:03:
81:f6:26:37:a8:f9:ef:2e:79:af:13:2d:ca:7b:bf:e6:96:c7:
03:15:9a:22:4b:9e:ab:7e:3b:53:77:b6:42:f0:54:f0:5b:54:
41:0c:9a:e6:c8:b8:8e:cf:75:75:b4:4b:2a:70:fa:d0:46:61:
52:08:83:75:22:cc:34:47:d7:64:85:dc:05:1d:86:25:69:0c:
80:4e:04:4e:47:e3:b2:15:a3:f8:9a:01:84:54:66:94:a8:41:
b8:ab:54:dd:19:a8:b7:95:a0:c7:9f:63:b5:67:13:93:23:fe:
6f:c5:a1:e5:77:fa:01:57:6d:ca:a5:78:4c:7a:59:bf:18:dc:
0e:81:16:02:30:43:d2:f9:74:bb:bb:7f:f5:39:2d:20:f0:4e:
cd:f6:84:f6:5c:8c:cf:68:78:19:60:b8:97:b1:0b:15:4b:c0:
e6:60:11:ed:b4:36:3a:1d:11:c3:12:62:d0:f4:49:3f:6a:f1:
00:e8:96:7b:da:a7:78:1a:88:99:40:1f:b2:bd:f5:89:da:2e:
7e:d1:48:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:40 2025 by rpki-client