Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
File: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (raw, json)
Hash identifier: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=
Subject key identifier: E3:05:01:31:6D:AC:F2:49:39:AC:12:36:BE:87:4F:78:9E:65:D0:92
Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Certificate serial: 34B0
Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
Signing time: Tue 10 Dec 2024 14:50:34 +0000
ROA not before: Tue 10 Dec 2024 14:50:34 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 18399
IP address blocks: 61.4.65.0/24 maxlen: 24
61.4.68.0/24 maxlen: 24
61.4.69.0/24 maxlen: 24
61.4.70.0/24 maxlen: 24
61.4.71.0/24 maxlen: 24
61.4.72.0/24 maxlen: 24
61.4.73.0/24 maxlen: 24
61.4.74.0/24 maxlen: 24
61.4.75.0/24 maxlen: 24
61.4.76.0/24 maxlen: 24
61.4.77.0/24 maxlen: 24
61.4.78.0/24 maxlen: 24
61.4.79.0/24 maxlen: 24
122.248.100.0/24 maxlen: 24
122.248.101.0/24 maxlen: 24
122.248.102.0/24 maxlen: 24
122.248.103.0/24 maxlen: 24
122.248.104.0/24 maxlen: 24
122.248.105.0/24 maxlen: 24
122.248.106.0/24 maxlen: 24
122.248.112.0/24 maxlen: 24
122.248.113.0/24 maxlen: 24
122.248.118.0/24 maxlen: 24
122.248.119.0/24 maxlen: 24
122.248.120.0/24 maxlen: 24
122.248.121.0/24 maxlen: 24
122.248.122.0/24 maxlen: 24
122.248.126.0/24 maxlen: 24
203.81.160.0/24 maxlen: 24
203.81.161.0/24 maxlen: 24
203.81.162.0/24 maxlen: 24
203.81.163.0/24 maxlen: 24
203.81.164.0/24 maxlen: 24
203.81.165.0/24 maxlen: 24
203.81.168.0/24 maxlen: 24
203.81.169.0/24 maxlen: 24
203.81.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13488 (0x34b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Validity
Not Before: Dec 10 14:50:34 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6758553a-b0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:50:a9:5a:2c:f6:b2:ee:c9:0f:f9:54:28:
4b:0c:99:69:55:e9:a7:61:be:9f:b8:2e:52:b3:66:
9b:94:71:b8:a8:f2:0d:47:bd:fa:53:58:35:32:4e:
07:22:49:5c:6c:ed:38:1b:c4:3b:e1:d6:8b:ae:d2:
13:51:bc:b0:f2:aa:8b:db:58:3b:2f:43:d6:89:eb:
0c:bf:80:7c:cd:5e:cd:d5:fe:19:85:bc:62:da:fe:
5d:0e:40:7f:88:49:35:c6:89:7a:3d:d0:66:21:74:
26:31:eb:d7:8d:5a:8e:33:70:7e:c0:65:6c:58:b5:
3b:cc:04:40:38:86:27:c1:17:5d:75:92:e9:27:6f:
31:0a:31:98:8a:21:94:98:85:a4:17:b8:ca:f3:ad:
35:c6:fc:25:74:d8:51:55:4f:ee:0f:19:12:be:1a:
10:0b:54:c3:15:32:b6:4b:8f:b8:b8:42:3a:f4:b3:
83:fa:90:90:1d:a2:2d:49:d3:b8:7f:0e:b5:79:73:
01:e5:48:e6:8d:31:b7:f0:84:80:57:2e:76:b6:3d:
93:82:8b:90:85:74:28:5d:26:5b:38:a5:63:bf:c4:
51:6f:d4:4f:df:92:6a:da:36:83:45:af:96:57:56:
49:90:c0:15:cb:87:c3:e4:8c:9b:dc:81:81:1d:a4:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:01:31:6D:AC:F2:49:39:AC:12:36:BE:87:4F:78:9E:65:D0:92
X509v3 Authority Key Identifier:
keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.4.65.0/24
61.4.68.0-61.4.79.255
122.248.100.0-122.248.106.255
122.248.112.0/23
122.248.118.0-122.248.122.255
122.248.126.0/24
203.81.160.0-203.81.165.255
203.81.168.0/23
203.81.172.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:ea:23:7f:36:92:e1:04:b4:b3:06:5f:2e:09:73:7b:35:46:
ad:6b:96:99:93:3c:5a:ae:30:30:7e:60:73:b1:4e:b3:17:b0:
91:d8:1a:1e:3e:08:f0:29:15:9c:d8:c4:2a:be:cf:33:8f:aa:
3d:31:f6:ec:92:99:19:86:0d:5b:0a:57:6b:d3:cd:1c:8a:7c:
51:98:07:ec:ae:fe:f5:af:1f:33:a7:38:3d:a9:d2:23:be:ff:
b5:de:f5:5b:8d:f2:c6:e4:ee:41:52:a2:db:97:89:52:33:b0:
5a:e0:47:96:28:7e:8b:86:ec:e9:39:00:67:64:16:7e:22:8a:
e2:5c:83:58:01:e3:42:f5:6f:00:6a:8c:16:72:06:b4:0a:e1:
a8:11:d0:40:b5:67:ea:e2:b3:1a:5b:ef:bc:f4:3f:bd:38:b5:
2a:87:ad:5a:a1:66:18:db:2f:a6:ad:0a:47:c3:73:56:ee:7d:
1a:94:dd:5a:e2:c8:b0:34:da:04:ad:e8:95:f4:03:37:98:59:
2a:a2:c4:16:15:e2:8e:97:78:dd:e8:06:79:a4:f6:f5:15:1b:
cf:dc:60:0e:08:c1:c3:51:ea:f9:57:f0:e9:9a:81:62:30:26:
c4:e9:39:ae:14:4e:ae:48:96:85:22:cc:ce:ab:24:3d:7e:7d:
a9:4f:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:16 2025 by rpki-client