Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa
File: 85AEBA76504C11ED829F7D24C4F9AE02.roa (raw, json)
Hash identifier: MijbaBFOBmjVn0NZXYmQ25vm+DrZhkqNokVzBodlkOI=
Subject key identifier: A8:D4:F0:7D:2E:E0:A7:7E:04:E4:07:D9:B3:EA:87:A7:E8:F8:A2:3A
Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Certificate serial: 018A
Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa
Signing time: Mon 11 Nov 2024 01:55:17 +0000
ROA not before: Mon 11 Nov 2024 01:55:17 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 24504
IP address blocks: 202.51.0.0/22 maxlen: 22
202.51.0.0/24 maxlen: 24
202.51.1.0/24 maxlen: 24
202.51.2.0/24 maxlen: 24
202.51.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Validity
Not Before: Nov 11 01:55:17 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67316404-6984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:e6:2e:b9:2a:1a:21:94:a9:f5:08:47:8d:
35:54:5f:5a:10:2d:42:2b:c7:68:f7:e8:f6:18:97:
50:1d:07:34:9d:af:80:08:27:6d:67:93:30:88:22:
99:23:e8:6e:ea:aa:f3:14:1e:08:66:0e:05:36:3c:
6a:f3:c9:d0:34:7a:b7:94:96:b3:0f:02:aa:f3:55:
83:dd:e2:5b:55:18:93:e3:b8:89:88:98:cd:41:35:
84:3c:6d:25:87:a7:04:00:da:35:84:0e:4f:bb:a6:
ab:1c:59:28:6a:37:45:d2:43:13:e4:1e:4a:7f:64:
60:ec:b1:6a:8a:f8:b2:f0:54:fa:34:a1:4c:86:c1:
51:95:b7:4d:26:d5:8d:10:7e:4d:10:4e:11:34:24:
e2:04:a6:6f:5a:76:93:67:86:1b:2d:e9:a4:6e:a8:
1c:ac:30:6b:8f:ab:c7:42:b1:5f:e7:64:14:b1:79:
e1:2d:61:5f:2a:16:12:bd:b9:0a:ec:39:93:53:3b:
45:a1:c5:ec:15:9f:a8:8f:f0:10:aa:db:2a:bd:b9:
4e:1a:74:5c:f7:aa:77:08:0b:99:9c:db:ca:41:2a:
93:10:05:c9:5f:14:19:e0:97:1f:59:e2:33:ac:44:
7c:c4:f9:7e:20:5a:c1:cf:20:70:3a:95:89:5b:12:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:F0:7D:2E:E0:A7:7E:04:E4:07:D9:B3:EA:87:A7:E8:F8:A2:3A
X509v3 Authority Key Identifier:
keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.51.0.0/22
Signature Algorithm: sha256WithRSAEncryption
08:07:51:26:7e:c5:1d:87:fc:37:99:11:79:d9:cc:90:a3:02:
86:4b:43:ac:38:a5:b2:a1:88:1f:6e:e3:68:ac:a6:36:5a:25:
e4:b6:6e:09:7a:ab:8e:7b:4a:8f:5f:a6:12:d1:13:a4:60:99:
56:de:f8:51:68:e9:24:5b:a6:42:0d:84:b0:d0:69:8c:5c:7f:
e3:f5:2f:77:d0:55:ac:71:21:0c:c5:20:42:78:96:31:92:f8:
55:f5:2e:bf:16:da:1c:da:f3:d6:eb:de:70:1c:f0:d4:cb:49:
bf:3d:35:e4:7d:e5:16:d8:90:ed:66:1a:34:4f:60:02:58:d2:
94:a5:9c:4c:53:67:91:8a:3d:c9:57:40:4c:e7:d9:dd:fc:2d:
c9:98:ea:37:d6:d4:09:a6:ca:3d:e0:5b:ca:3c:56:81:84:04:
0c:f0:d6:48:00:07:85:e4:bb:ce:a9:f8:5f:74:2e:a9:89:3e:
81:31:65:e1:fb:03:e8:48:e1:e8:04:59:2b:9f:95:ac:99:12:
15:37:2c:ce:e8:6d:88:0c:7b:f7:a2:39:6e:43:db:bc:62:79:
b3:b1:cd:18:63:37:ef:3f:26:66:d0:61:84:7a:42:1b:a9:dc:
a5:e9:ba:12:23:9b:0a:00:71:68:ee:b5:54:2a:e6:d5:b0:27:
32:68:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:23 2025 by rpki-client