Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa
File: 496AB3D2072D11EAAE8E1D56C4F9AE02.roa (raw, json)
Hash identifier: PCQKlj6deOHtT7m2rfD9JwGJn7LJ5iM5rrfuzp4pIzE=
Subject key identifier: 19:D1:32:66:E2:FB:9D:A9:3F:A9:8F:23:D0:B2:C6:FF:4C:48:FB:03
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 0EA8
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa
Signing time: Thu 29 Feb 2024 19:38:17 +0000
ROA not before: Thu 29 Feb 2024 19:38:17 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 397235
IP address blocks: 120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3752 (0xea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Validity
Not Before: Feb 29 19:38:17 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e0dd29-3d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:a9:7e:4b:0c:9e:16:c4:07:4a:3e:fa:e8:
57:a2:ca:d2:cc:c4:d7:ee:92:01:95:9a:ae:10:44:
4c:f5:4c:38:f4:ba:00:ae:b1:f5:0e:b3:da:71:74:
9f:e5:a4:ba:d2:35:9e:11:65:17:fe:e3:5f:f1:86:
62:1a:46:66:dc:be:8d:6c:8c:88:38:3b:04:f0:28:
6a:04:48:a9:1b:d9:9b:0e:cd:8f:f2:73:db:71:8b:
cb:17:61:9c:9d:dc:87:e1:ef:14:12:f1:f6:1e:c7:
fc:3e:ea:0a:d7:76:05:70:b2:5f:f1:b5:9b:65:8c:
19:5f:4c:ba:3b:d5:6e:3a:cf:59:de:86:09:57:81:
ec:f8:7f:b7:13:78:31:5c:3c:f3:b0:1a:c0:36:2c:
67:6c:dc:0f:7f:18:23:da:65:e6:62:df:c2:7e:c7:
c4:07:e1:03:bf:47:48:d7:7a:bf:3f:c8:3a:95:fb:
f6:b0:f1:14:d1:86:57:fe:d1:e9:f9:92:11:ec:85:
80:ae:9c:11:66:d2:73:e0:46:ca:8b:df:0a:e4:db:
d8:5a:91:04:cb:97:6f:62:97:df:bb:b0:8a:81:a6:
a1:10:89:01:9b:11:fe:4b:35:b1:af:dc:96:00:d3:
16:76:50:79:52:54:cd:0f:0a:33:66:ec:50:18:ec:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D1:32:66:E2:FB:9D:A9:3F:A9:8F:23:D0:B2:C6:FF:4C:48:FB:03
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
60:26:dd:c1:74:3b:f9:e1:7d:04:7a:e5:31:cd:b1:10:03:09:
de:ff:39:f9:25:ec:23:57:9a:fc:e6:ab:f1:2e:bb:6b:2c:2d:
79:14:3d:93:5a:5c:31:6d:cb:99:86:4f:8e:16:5c:ad:a8:88:
52:1c:ad:2d:23:56:15:15:60:60:8e:52:fe:43:4f:76:79:1c:
a6:ce:12:c0:cf:e9:e3:a6:0e:84:60:f1:ea:56:b6:91:df:99:
15:93:42:03:50:78:f4:73:cb:8c:5a:1d:ee:3e:98:2e:1e:c6:
db:c1:da:a6:3c:9a:33:f1:21:07:68:0e:c1:b4:3a:3a:ff:16:
04:87:cd:92:fd:21:4b:7c:a8:f3:18:59:16:0c:8e:8d:58:b2:
d4:ae:5b:0a:29:8d:87:c8:e0:b6:7a:5a:fd:dc:56:8b:8e:35:
d7:47:ed:53:40:58:91:58:63:41:62:f5:5d:f2:05:fa:7e:c9:
de:9a:0b:20:bc:5f:10:0a:92:10:c9:de:d3:04:bb:57:a8:d6:
78:66:cc:82:fe:38:d7:9d:40:6d:41:d8:68:7d:12:57:ee:48:
70:17:b8:78:c5:58:72:4d:eb:c4:95:e0:03:15:c1:0e:8b:ef:
26:61:01:e0:47:92:65:4b:a4:79:c3:b1:c1:17:cb:b4:70:01:
d5:d1:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:47:41 2025 by rpki-client