Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
File: 0396C48E5E7011EDAD328E21C4F9AE02.roa (raw, json)
Hash identifier: MZBSloCp4vIpAqSRxYYda+A/wH0ayd7dOXpKnFdSxPc=
Subject key identifier: F3:A6:52:57:BD:A4:00:E8:2B:84:0B:6C:F6:7A:93:F5:C9:8D:99:4E
Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial: 1266
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
Signing time: Tue 02 Apr 2024 17:55:56 +0000
ROA not before: Tue 02 Apr 2024 17:55:56 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 55002
IP address blocks: 202.124.46.0/24 maxlen: 24
203.80.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4710 (0x1266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Validity
Not Before: Apr 2 17:55:56 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660c46ac-f402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:73:96:41:4d:88:c1:33:b1:92:77:84:cb:
a6:82:84:32:bd:04:02:a9:8b:91:50:28:3e:ab:07:
ef:fd:c4:a7:30:ab:7e:23:75:af:c4:6b:97:a2:6d:
47:c9:d1:df:04:07:3c:12:e4:4e:05:6c:f5:bd:1f:
82:96:54:28:32:1b:e8:61:f5:17:9f:97:8e:6d:aa:
3d:1c:27:c6:37:f4:f9:15:fe:82:0f:48:4d:f2:07:
96:c1:25:88:10:7f:30:ea:05:97:33:9b:87:1f:a2:
58:13:01:e8:82:a4:c6:24:03:ee:7c:aa:c3:be:80:
50:4c:0f:ba:74:86:c5:10:fd:96:99:56:bf:e5:5c:
08:dd:6e:39:d5:ea:64:11:54:35:ce:95:5d:d2:6a:
2b:7c:38:5d:9c:65:40:00:9f:5f:c3:21:31:35:26:
ab:34:72:95:be:ec:6e:af:d3:94:65:d1:ff:c1:9a:
45:79:fb:80:a1:f9:93:97:fe:aa:2b:9e:33:e4:e2:
1b:ff:86:8e:ad:54:23:b4:9d:de:2f:60:2e:a1:1f:
e3:ea:e7:a4:13:8a:78:b9:5b:bc:eb:7b:ce:ad:a9:
8d:f4:3e:5c:53:87:ee:97:2c:bb:2e:27:91:2a:39:
b8:d6:06:18:21:84:53:11:b4:2d:c4:bc:67:c8:95:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A6:52:57:BD:A4:00:E8:2B:84:0B:6C:F6:7A:93:F5:C9:8D:99:4E
X509v3 Authority Key Identifier:
keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.124.46.0/24
203.80.160.0/21
Signature Algorithm: sha256WithRSAEncryption
78:ec:7b:e4:17:34:f4:aa:67:a4:14:f4:ed:37:8d:52:56:42:
f5:53:9f:09:4d:6b:37:53:19:0d:1d:5c:12:24:1e:e8:7a:ef:
f6:c8:9c:20:0a:ca:4d:a0:8c:b6:79:42:d3:db:25:dc:b6:c3:
cd:f6:7e:75:86:f6:8e:be:22:75:52:88:7d:f2:7f:1c:a1:1e:
93:76:7e:3f:3b:2e:31:63:83:ab:e5:fd:74:6f:fb:8a:4f:83:
04:a6:4c:35:6b:02:5c:b0:26:82:ee:fd:be:7a:d4:07:58:4f:
57:95:72:92:00:b1:f1:c3:48:e1:4e:d0:ba:53:9b:f3:45:5e:
ca:f5:75:9f:3e:a2:e1:d8:77:6a:d1:cf:03:f0:12:0f:59:be:
7b:a7:89:f0:06:4c:b2:66:36:ed:7a:4f:4f:62:b2:20:aa:17:
b9:82:48:d8:13:c3:a3:43:59:8d:5b:83:69:ce:2d:93:3c:33:
33:a1:09:a0:6a:da:4a:51:74:ab:88:d1:06:b1:30:8d:ad:22:
5c:ae:e2:b3:bf:48:f6:c5:01:ff:03:7a:04:7f:b3:6e:e3:85:
95:d5:b5:3c:5f:12:2e:04:01:9a:a0:9b:fa:9a:48:d0:12:d2:
ed:e3:75:46:76:1e:89:87:2e:24:06:23:0f:e7:e5:19:b0:65:
19:e8:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:00 2025 by rpki-client