Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa
File: B364F656C0AD11EEACCA627AC4F9AE02.roa (raw, json)
Hash identifier: wADd79J5phMFz2zI3JBs2QdPJS+vVjZaqYNnTd8Gn4c=
Subject key identifier: 75:DF:FB:96:17:57:1A:A7:CE:00:C0:5A:89:D3:04:05:B8:B1:F1:1A
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0A00
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa
Signing time: Thu 14 Nov 2024 19:59:05 +0000
ROA not before: Thu 14 Nov 2024 19:59:05 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 64079
IP address blocks: 61.29.244.0/22 maxlen: 24
61.29.254.0/23 maxlen: 23
103.211.192.0/24 maxlen: 24
103.211.193.0/24 maxlen: 24
146.196.78.0/23 maxlen: 24
2400:9380:9265::/48 maxlen: 48
2400:9380:f000::/40 maxlen: 40
2400:9380:f100::/40 maxlen: 40
2400:9380:f200::/40 maxlen: 40
2400:9380:f300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560 (0xa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Nov 14 19:59:05 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67365689-ab6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:42:9d:c7:af:d7:9c:6e:94:f0:77:fc:e4:
36:04:05:33:3f:cd:f4:9f:fd:79:71:c8:7d:57:b0:
d1:f7:30:fe:12:c0:96:ee:a7:14:f4:13:ef:fb:8b:
40:39:85:9a:4f:4b:cf:e2:c3:3d:6d:42:22:7e:f1:
44:f9:34:14:ae:c7:af:6d:43:e3:dc:53:51:aa:fb:
ad:b8:d7:d9:cc:f9:2a:eb:81:a5:76:99:be:a1:7a:
01:7e:3f:eb:9e:b2:42:80:fe:f8:e0:97:b1:b9:bb:
a7:0a:96:ff:57:67:5c:ad:82:fe:55:96:a6:8d:ed:
09:8b:67:3a:ee:b4:82:57:f9:aa:98:ed:61:ea:c4:
c7:df:b4:ae:7e:ed:0f:3a:8e:f4:20:1b:61:e5:7a:
e6:e8:14:20:4f:4b:46:1e:22:17:0f:46:c3:fb:93:
74:ab:95:5c:6c:87:c1:a3:99:2e:a5:b1:c7:0a:bf:
a5:3b:38:c2:b8:c5:af:49:2f:30:49:83:28:cb:55:
59:3e:2a:15:92:58:0b:e5:a9:e4:8c:ce:b8:1b:17:
71:48:6f:0e:b8:65:15:b7:d1:f0:ba:e8:3c:ec:13:
a5:bb:7b:fd:a8:66:1d:d0:b6:7c:34:49:50:24:44:
91:d3:e5:44:74:eb:04:72:46:c2:67:7c:21:e4:77:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:FB:96:17:57:1A:A7:CE:00:C0:5A:89:D3:04:05:B8:B1:F1:1A
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.29.244.0/22
61.29.254.0/23
103.211.192.0/23
146.196.78.0/23
IPv6:
2400:9380:9265::/48
2400:9380:f000::/38
Signature Algorithm: sha256WithRSAEncryption
5a:c3:34:ce:38:08:d7:25:eb:97:b8:c7:fc:fb:f2:c9:97:fb:
46:4d:b5:87:9a:40:59:c6:bd:b2:21:e0:3d:3f:a8:bd:7c:3d:
b1:c8:a5:ba:01:43:79:4b:6d:66:df:8b:9e:31:28:ee:54:db:
4e:fe:14:4c:35:44:72:61:90:57:95:00:f9:cf:6c:da:8c:52:
5b:21:cc:66:42:47:10:fc:09:36:52:c7:81:5c:ee:cd:08:bc:
31:46:7a:3e:a2:3e:3b:41:2d:d6:87:54:af:d1:7c:cd:4d:47:
09:ae:d3:a5:c5:c5:5d:9a:35:09:e4:b4:6a:b2:ec:bf:c6:40:
25:1e:85:07:7f:ad:f9:d1:07:88:fe:1a:11:3f:29:10:55:12:
e5:65:7e:2d:f5:2f:ea:46:3a:25:4f:50:71:90:50:1f:45:11:
14:ae:77:7f:14:1a:48:d5:2b:bf:6f:78:0a:7a:34:b4:86:b6:
97:bf:c3:23:41:67:fd:2a:c4:e1:7a:fd:5c:e9:a8:c7:d2:3f:
fb:1d:7d:b6:9a:d8:17:ba:24:e6:72:78:0f:49:4d:2d:47:8f:
60:a2:0d:4e:a1:bb:ff:da:50:dd:a0:f0:d7:18:14:cd:7b:c9:
b3:1d:c8:8b:f0:a8:b6:c8:84:a3:15:28:35:70:a7:b7:c6:69:
5b:26:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:20:55 2025 by rpki-client