Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa
File: CB42B95CBD4511EB9A852313C4F9AE02.roa (raw, json)
Hash identifier: ispORvhiZYuVBbLjB8YNYcrT7UXhoaYEKTJcCMimu8w=
Subject key identifier: 11:EE:EB:EF:89:F2:38:50:15:B6:9C:A8:4A:A2:94:8E:E8:94:F5:70
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90A0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa
Signing time: Thu 30 May 2024 16:28:44 +0000
ROA not before: Thu 30 May 2024 16:28:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17771
IP address blocks: 45.127.188.0/22 maxlen: 24
49.238.32.0/19 maxlen: 24
103.246.44.0/22 maxlen: 24
202.63.96.0/19 maxlen: 24
2405:1e00::/32 maxlen: 32
2405:1e00::/40 maxlen: 48
2405:1e00:100::/40 maxlen: 48
2405:1e00:200::/40 maxlen: 48
2405:1e00:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37024 (0x90a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:28:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a93c-1155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:22:7d:7c:ed:9d:ac:32:5c:6f:43:97:31:
97:d8:0a:bc:53:bb:82:b7:0a:b9:8b:fc:6b:31:f6:
8f:9b:0c:5f:a7:80:0d:0d:b7:64:e6:07:7c:b6:0e:
0f:8a:6a:1d:d2:11:ad:74:43:f9:be:91:16:ba:d6:
12:f2:87:66:43:af:98:d1:17:31:d4:1d:29:44:a6:
7d:dc:da:32:2e:0f:18:56:a2:d7:6f:9f:f5:28:f3:
53:22:ec:fb:5c:90:81:0f:91:b9:92:ec:a1:46:e3:
c0:e5:f0:a0:c1:35:86:01:3b:47:39:46:df:e3:90:
a2:4e:86:04:c8:8b:43:98:39:73:08:70:fe:29:77:
be:5b:5f:57:04:2a:8b:a4:2b:ac:91:98:2e:01:e6:
c5:ee:96:2f:66:06:33:03:72:11:52:bd:c3:a7:8f:
91:e5:c5:3d:51:62:30:95:3e:64:ec:d4:8b:bd:97:
7f:eb:bd:08:f6:a1:6d:3f:79:09:5f:00:6e:6b:41:
b4:97:cb:a0:1d:ff:c6:62:39:0d:18:25:bd:50:77:
d0:63:48:9d:8d:65:dc:a6:6b:50:87:0f:3c:c7:76:
bd:8f:d2:3b:d9:bc:23:fd:b3:af:dd:cd:f1:22:08:
d2:29:77:61:79:b4:eb:a4:89:c6:ef:34:f9:5a:9b:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:EB:EF:89:F2:38:50:15:B6:9C:A8:4A:A2:94:8E:E8:94:F5:70
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.188.0/22
49.238.32.0/19
103.246.44.0/22
202.63.96.0/19
IPv6:
2405:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
47:b5:15:81:38:eb:fb:37:b2:85:2a:4f:31:08:d7:7c:87:9f:
44:d9:52:cd:57:96:0a:f0:48:e3:7b:e6:9d:28:70:3f:ae:ac:
4b:46:18:2d:df:3c:2d:49:69:c9:63:0f:29:e6:d0:05:68:48:
49:c8:14:81:fc:0e:b3:54:18:df:70:61:6d:dc:c1:8c:ff:97:
a5:3a:01:57:b4:09:60:63:8f:56:9d:eb:ee:e0:25:c3:4a:51:
12:aa:f0:e5:bd:91:89:cf:bf:0f:26:64:c6:4d:5c:65:d0:6a:
b5:70:75:64:4e:53:d8:77:8b:7b:92:2f:d4:c9:c8:e1:a7:0c:
fa:27:af:d8:fe:04:92:2c:04:41:92:f6:7c:d1:53:62:dc:79:
10:ac:ce:b2:30:e1:3f:30:db:28:e9:ae:44:5c:32:d4:16:46:
5a:4b:87:60:ee:37:62:18:d5:86:20:55:58:20:d2:1a:7e:a4:
ba:5d:e1:5b:1e:e3:5b:52:bc:b1:e4:08:2d:8c:42:75:bc:67:
7b:f6:bc:be:97:b7:df:da:bc:44:a0:1a:49:09:e0:6e:cb:ba:
5e:0a:d9:cc:81:21:94:5e:6f:67:21:02:6a:19:e9:db:e2:57:
58:8a:bb:40:f9:a5:2d:fa:cf:01:fb:5d:5a:16:58:fb:19:af:
3f:46:9e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:54 2025 by rpki-client