Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
File: 6BD285BA971D11EE9333CE70C4F9AE02.roa (raw, json)
Hash identifier: Qtm+4szSQdAgynHCTX77NVhRERzrbE+zoyUpXzir0eY=
Subject key identifier: B5:31:BB:AD:6C:55:C7:92:DD:F6:AA:66:DB:9A:68:0F:23:0B:7B:F5
Certificate issuer: /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial: AB
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
Signing time: Mon 07 Oct 2024 04:48:30 +0000
ROA not before: Mon 07 Oct 2024 04:48:30 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 151374
IP address blocks: 121.50.48.0/21 maxlen: 24
2400:ac00::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Validity
Not Before: Oct 7 04:48:30 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6703681e-66d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:5f:e5:32:1d:0a:a6:6d:af:bd:4c:0e:08:
c6:7f:d5:d3:02:78:aa:62:31:05:f8:67:c1:df:81:
88:6c:56:c8:f8:8c:94:be:69:f2:48:72:99:28:33:
6f:4e:09:f1:10:10:cc:29:c0:13:55:4e:d6:d5:b6:
dd:78:dc:fa:c9:82:cb:c0:30:bb:fb:a2:33:ff:6f:
9b:c2:d0:c5:40:28:8b:fe:81:aa:65:91:b4:5b:50:
64:0b:1a:1c:12:64:36:6c:2d:5b:5b:28:66:44:d8:
95:e2:e3:5d:c4:ab:e3:33:76:5a:b7:bb:55:c0:f3:
dc:57:9a:bf:52:c4:cb:7d:08:7d:1c:18:cf:c1:18:
31:9d:99:89:d8:fd:65:93:44:d0:d2:62:da:94:fc:
f3:d2:eb:12:b1:dc:ac:e8:b8:d9:73:d1:ee:91:2b:
27:d4:38:fa:3d:28:3d:0e:4e:f7:f0:92:4b:1c:04:
5f:84:a5:5e:31:1e:75:5a:bf:c0:40:77:f7:14:04:
9f:25:0c:f6:6a:8a:90:2c:ff:52:7d:4a:8a:6c:7c:
4a:70:fa:43:9c:d3:c7:f9:a0:9a:43:4b:4d:8f:45:
5f:3c:c7:b3:b3:0e:93:d9:b2:b4:01:40:6d:e4:dc:
cb:17:4c:10:57:92:1d:03:36:f5:eb:2c:a0:69:a2:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:BB:AD:6C:55:C7:92:DD:F6:AA:66:DB:9A:68:0F:23:0B:7B:F5
X509v3 Authority Key Identifier:
keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.48.0/21
IPv6:
2400:ac00::/32
Signature Algorithm: sha256WithRSAEncryption
23:e8:59:9f:ae:a4:a0:94:c1:7a:89:36:e0:02:46:7e:9f:2e:
84:d8:53:28:03:79:50:d5:6e:6e:63:47:5b:ee:8f:29:47:84:
e0:09:20:16:9f:da:d1:81:9c:3f:1d:d4:8c:56:68:d2:5b:70:
fc:29:c9:44:a8:bd:52:c1:69:b2:24:7f:52:3b:cc:5b:62:b4:
99:4e:8c:62:59:90:6f:09:a4:92:28:7a:b3:55:49:03:32:7e:
4e:17:2d:36:ff:43:6e:6c:2b:20:cd:50:3f:67:b9:9c:2d:88:
44:e4:12:44:d9:d3:ef:40:f2:e9:2c:21:8e:03:3c:f5:97:98:
bb:74:63:d5:06:76:1d:75:16:e3:4e:8b:35:cb:41:3a:47:b4:
9a:3a:14:a4:92:52:e9:f3:1c:d4:b6:2a:66:45:61:85:5e:42:
1c:f6:be:b8:a2:14:bc:02:85:ed:6e:e9:b4:77:7a:37:15:ca:
26:d2:c7:07:c5:bb:2d:73:67:63:56:87:d7:4d:3e:77:87:ba:
c0:03:fc:f1:5f:bb:ef:81:ef:d4:83:88:41:45:29:7e:ff:76:
86:d2:07:df:28:13:6f:ea:3e:0f:b2:37:73:0a:53:0e:64:31:
de:56:a4:42:b2:75:af:73:9f:51:53:30:23:db:95:66:37:47:
a3:84:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:36:25 2025 by rpki-client