Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/707EE02E54EC11E791C3F825C4F9AE02.roa
File: 707EE02E54EC11E791C3F825C4F9AE02.roa (raw, json)
Hash identifier: yT6VnRLmIX4JBA9GtJaKAexfPeVPPL2P99luRa7FJpM=
Subject key identifier: C8:26:8A:AA:FC:D3:ED:51:5C:6E:49:64:5A:33:4F:82:E1:22:17:59
Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial: 2E64
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/707EE02E54EC11E791C3F825C4F9AE02.roa
Signing time: Thu 11 Feb 2021 14:20:14 +0000
ROA not before: Thu 11 Feb 2021 14:20:14 +0000
ROA not after: Mon 31 Mar 2031 00:00:00 +0000
asID: 4608
IP address blocks: 203.133.248.0/23 maxlen: 24
2401:2000::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11876 (0x2e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Validity
Not Before: Feb 11 14:20:14 2021 GMT
Not After : Mar 31 00:00:00 2031 GMT
Subject: CN=60253d1e-8809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:f4:ac:0f:1e:5d:45:19:03:16:ce:b1:37:
51:de:bb:99:3b:c5:d0:65:a5:8c:c5:ac:21:12:f8:
8d:94:0e:36:0c:df:ec:92:ee:fd:07:ce:7d:82:19:
99:f7:28:ad:bb:c9:c1:63:fb:09:74:ce:a7:a2:be:
6e:92:c0:81:1d:e1:2c:d1:75:f0:12:32:97:df:10:
a8:65:5f:15:fc:da:55:3b:0c:a0:ee:57:0b:3e:c5:
2d:31:ef:53:8b:11:3f:ef:07:6b:c2:5e:c1:c6:9c:
2f:50:20:a6:46:8a:d7:39:df:d8:4b:90:89:ad:47:
9e:c4:f2:8c:57:33:c3:15:0b:3f:ec:37:ff:f4:a3:
75:bd:22:f5:09:19:da:72:87:7a:c7:3f:8b:4b:55:
a5:bb:8a:31:4d:51:f0:fb:56:8b:1d:5c:03:9c:d2:
27:4d:db:fb:0b:b8:53:97:39:53:36:b8:04:51:86:
f4:07:25:50:87:66:79:b1:0a:9d:40:8c:2f:6f:2b:
ad:73:b4:9b:6c:94:b1:bb:85:9b:07:62:f7:10:54:
b6:dd:c7:d5:b2:33:54:be:b2:33:ef:93:e2:77:99:
2a:60:3e:80:0e:46:8d:d7:07:e3:0d:ac:2e:3b:95:
2f:1a:d9:47:3a:33:9e:07:68:cb:71:c0:68:c6:86:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:26:8A:AA:FC:D3:ED:51:5C:6E:49:64:5A:33:4F:82:E1:22:17:59
X509v3 Authority Key Identifier:
keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/707EE02E54EC11E791C3F825C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.133.248.0/23
IPv6:
2401:2000::/32
Signature Algorithm: sha256WithRSAEncryption
b5:83:ac:34:bd:9d:6c:8c:9d:b9:b8:a8:24:52:21:60:e6:3f:
ab:69:51:6d:15:4d:37:3b:1f:e4:17:81:e3:60:3e:96:87:3f:
51:35:f7:f9:4e:bb:cc:9a:1b:67:fc:af:67:9e:1f:72:d1:a7:
ad:b9:bb:4b:7e:a0:e7:db:cb:b2:b8:be:c0:90:36:44:52:67:
1f:36:9e:00:71:b0:08:33:d9:91:b1:ed:6b:7d:ea:fd:e8:72:
21:2a:25:10:be:86:c2:e6:86:ef:19:95:81:47:85:6e:72:7a:
b1:3b:12:03:8a:e6:71:90:4d:32:ab:30:c0:98:81:49:a0:08:
ab:2b:2a:cc:41:3a:99:7f:46:b3:d1:84:3a:5a:d7:10:5c:bb:
24:fc:2e:47:fa:7f:cb:77:d9:05:aa:4b:8c:b3:31:c6:c3:f3:
1d:b2:28:90:04:46:3d:bd:51:d5:fd:0b:68:87:5e:f7:23:47:
e0:1a:30:c0:91:66:7f:ab:97:77:b0:73:b5:25:dd:6d:6e:44:
92:30:f2:f7:ed:da:cf:7e:35:fe:8d:38:27:b9:c2:7d:dc:7f:
cb:91:98:1b:68:be:83:a0:c5:ae:f3:a1:ca:84:75:b2:51:ba:
5c:ec:59:5d:72:aa:63:25:f3:d5:b9:5f:d1:fc:75:c4:b1:74:
1a:a5:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:52:23 2025 by rpki-client