Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa
File: 93767630B9B511EDBBD63E47C4F9AE02.roa (raw, json)
Hash identifier: bjUEpISud0lt4+eDsWf7McrjEP7fShoj4If/QIXOt2M=
Subject key identifier: 6B:0D:FA:50:D9:36:A6:0F:28:A1:44:6F:1B:F8:40:90:69:8A:14:B9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 95B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa
Signing time: Wed 31 Jul 2024 15:48:54 +0000
ROA not before: Wed 31 Jul 2024 15:48:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 139.5.232.0/24 maxlen: 24
139.5.233.0/24 maxlen: 24
139.5.234.0/24 maxlen: 24
139.5.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38328 (0x95b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 31 15:48:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66aa5ce6-b1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:fe:3b:e4:78:b7:dd:f2:08:35:e4:42:9b:
26:42:1a:89:39:59:35:87:09:77:84:1c:1a:25:2c:
df:26:e1:ec:fc:bb:fc:73:93:fb:f9:65:23:cc:76:
6b:90:07:1a:7d:b5:1d:7c:9a:9a:9a:3c:a3:6e:27:
58:d4:64:51:5d:0c:5e:a0:9e:67:59:ae:c0:16:34:
6c:5b:5f:93:a5:2a:57:cb:ea:13:83:95:d1:a2:44:
0b:e0:80:86:32:77:f1:6e:a4:14:b5:59:5e:0e:0d:
06:e9:90:4c:00:41:65:b0:41:09:8f:5a:95:08:c4:
85:26:8d:5c:4d:60:76:73:7a:f9:fb:1a:cb:07:52:
5d:9c:3f:fe:ed:35:c7:c8:3c:e5:94:9a:59:e4:0b:
5b:d3:80:4e:59:c6:f5:43:6a:83:9e:d0:ce:ff:01:
1b:6c:88:5e:53:98:a6:38:d6:c3:8f:f7:dc:fc:40:
c0:15:22:7b:61:ea:3f:91:3c:ae:89:cf:4f:e0:f3:
bd:36:d8:4d:b8:18:40:91:fc:22:7c:53:c4:09:32:
b1:7d:e3:ff:42:f9:6d:86:67:4d:0c:56:e5:a0:c4:
82:53:c6:1d:d6:16:e6:bf:5f:01:68:4c:39:ef:fa:
1b:c5:ab:a5:7f:78:fd:68:42:6c:0d:52:c7:50:e9:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0D:FA:50:D9:36:A6:0F:28:A1:44:6F:1B:F8:40:90:69:8A:14:B9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.5.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:1d:8c:21:b2:d8:62:0e:72:e0:18:93:7d:9c:dd:e5:4e:5f:
0e:7e:0a:5d:cd:a7:b5:f2:fc:54:f1:ff:18:42:fa:97:ec:6f:
a7:9e:64:40:54:ae:51:ac:ed:5f:58:75:b2:45:3c:54:ed:11:
58:94:1d:a6:4a:b7:0c:4e:8e:6b:af:4b:1e:5c:fb:8d:91:e9:
f3:e2:28:c8:46:f7:ab:0e:8e:28:ac:58:19:04:5d:18:28:10:
89:1a:32:2c:0e:c1:da:16:9b:cc:c3:10:9a:7c:31:af:f8:de:
15:5e:bb:e4:9a:ae:b5:ae:b6:d9:99:93:a1:ce:e9:05:e2:34:
6b:bf:3a:6f:26:10:73:2d:1a:50:79:8c:ec:43:6e:b2:2b:c8:
9f:b7:35:16:3d:49:16:6d:6d:a9:cd:40:c3:b2:36:b0:fa:96:
0a:a1:60:35:b0:c8:e0:36:1c:c9:ca:ce:1e:39:e6:11:e1:fb:
8b:f8:f0:32:5a:3c:d6:3a:3a:27:6a:df:09:e1:1a:39:73:7e:
58:fd:52:78:96:df:d5:54:a4:d5:cc:18:16:85:88:d1:61:25:
0b:b4:af:2c:1a:6e:f8:5d:b0:2d:7e:83:52:b0:94:a0:c0:e6:
7e:24:06:7e:9f:83:6d:8c:55:b5:ab:d0:3e:b1:a8:2a:dd:ca:
19:b1:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:28 2025 by rpki-client