Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa
File: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (raw, json)
Hash identifier: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=
Subject key identifier: BF:6C:12:39:DF:D4:69:6A:CE:1E:A4:4B:11:CA:97:83:28:C6:C5:05
Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial: 0999
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa
Signing time: Wed 06 Nov 2024 20:09:47 +0000
ROA not before: Wed 06 Nov 2024 20:09:47 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 152194
IP address blocks: 134.122.128.0/17 maxlen: 24
137.220.128.0/17 maxlen: 24
143.92.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Validity
Not Before: Nov 6 20:09:47 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=672bcd0b-e39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:cc:c4:7b:58:76:4e:ec:63:8d:c1:5a:aa:
91:df:c2:50:a5:30:86:be:e7:23:fe:9a:5c:22:be:
be:c3:81:86:91:a4:e6:da:b0:14:41:51:b5:9e:21:
db:a5:18:8d:86:ab:8b:53:af:0a:52:06:f9:5e:2a:
28:20:98:b6:8b:84:c7:a3:07:cd:09:30:f4:36:ce:
b5:19:b9:e9:62:24:fc:26:d2:8c:cf:22:2e:7d:c3:
3d:98:ab:19:85:37:2a:b8:8a:f1:97:16:7b:0a:3c:
b4:3c:f5:b5:aa:13:86:e5:c0:5a:fe:e3:ab:e6:e2:
fc:ed:04:59:48:bb:7b:19:bc:cf:a0:6f:37:c9:ad:
f3:6c:da:83:03:fa:81:7d:38:c1:38:a6:a8:e1:67:
56:4d:08:b8:83:8c:37:e9:bf:02:9e:39:0c:c4:10:
fa:f7:46:0e:02:ab:e5:f2:2f:82:cf:9f:9c:92:5a:
14:7b:a3:8e:3d:cc:b5:9d:a0:ab:74:30:d2:22:3d:
c0:14:6c:d4:98:ef:6e:5e:cc:13:f0:b0:6a:68:09:
de:1e:08:bb:0d:24:b3:86:9f:00:22:64:6e:b6:53:
1f:c8:10:58:19:3b:a1:75:60:49:54:53:a9:22:91:
11:f0:9a:38:09:ea:09:40:39:13:71:d5:2b:a0:95:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6C:12:39:DF:D4:69:6A:CE:1E:A4:4B:11:CA:97:83:28:C6:C5:05
X509v3 Authority Key Identifier:
keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.122.128.0/17
137.220.128.0/17
143.92.32.0/19
Signature Algorithm: sha256WithRSAEncryption
63:3c:3a:ab:cb:aa:d8:7e:75:e9:7e:c1:03:44:99:f5:ff:da:
94:2e:9e:1e:f6:a8:c4:73:89:51:1d:14:ab:ec:7c:9a:55:00:
36:22:1d:d8:37:09:ea:4d:70:59:66:56:1f:16:71:67:f8:05:
e4:ec:57:e8:a6:17:24:59:e4:0a:c1:8f:c2:ef:04:75:58:fb:
cb:eb:78:8b:8a:65:f2:46:5e:72:2c:07:a3:35:e9:c2:d3:f6:
a4:91:86:71:08:3a:8b:97:2a:9b:04:d9:30:95:84:29:79:84:
d1:57:24:77:98:ea:58:38:c7:d2:9a:56:5d:1d:ff:a9:ed:68:
0e:17:76:ff:38:ef:68:68:7e:37:cd:09:19:04:e0:b2:d0:ef:
0b:86:3d:49:d6:09:72:53:77:57:48:73:ed:80:cb:32:d9:5f:
11:d9:40:6a:68:e7:74:df:1a:30:7b:0b:54:04:8e:6c:4e:c1:
40:7b:1c:cf:3e:1c:32:7d:18:99:23:c0:8d:a4:a3:ad:70:22:
cd:d5:13:28:6b:41:68:a8:74:2a:81:02:d4:c8:c1:b4:54:90:
82:c0:85:4a:d1:0a:4c:bb:74:f2:a4:10:8b:9e:2b:06:9e:cd:
3f:75:43:7b:5a:33:ab:f4:51:a2:85:e8:bd:4e:6f:6a:37:e6:
5c:7a:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:15 2025 by rpki-client