Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa
File: 57D0ACB609B111EAB045B31EC4F9AE02.roa (raw, json)
Hash identifier: FSyGFE7K35QX2cyotfzUQAvVJ9+/c5ofR0HDyKVjUD0=
Subject key identifier: 49:1A:E6:F2:3D:23:00:D8:1A:5A:50:E0:2A:A8:6F:6F:6E:B2:10:33
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 0EA9
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa
Signing time: Thu 29 Feb 2024 19:38:19 +0000
ROA not before: Thu 29 Feb 2024 19:38:19 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 397236
IP address blocks: 120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3753 (0xea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Validity
Not Before: Feb 29 19:38:19 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e0dd2a-bb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:21:67:15:8e:fa:fa:30:6d:85:26:38:2d:
f9:c1:cd:74:0f:1c:c2:93:8e:0f:8b:8d:03:c8:96:
ec:33:f6:3c:af:9c:9b:70:ef:ce:bb:b8:cf:85:6b:
dd:23:5a:46:2f:c5:f1:a1:f9:55:84:2e:bb:b2:f1:
01:8d:bd:90:9c:de:ae:29:27:76:82:75:0a:02:db:
fc:0a:03:36:6b:66:b0:13:47:da:20:ee:ab:7a:ae:
21:84:d8:9c:e8:a1:27:2a:cb:47:41:86:5e:d0:54:
87:cd:b8:e7:94:51:54:19:f2:60:42:31:2e:bb:b1:
b1:4d:88:a0:27:67:48:fd:f9:dd:a4:a3:46:cd:bb:
58:4e:52:ba:67:75:2e:d9:2c:85:52:4e:12:a7:4f:
7a:42:e2:b6:de:41:b1:8e:c9:cc:73:ab:11:1b:b4:
17:35:b2:6e:71:69:79:8b:9a:82:19:c3:e1:3f:43:
24:2b:6d:20:94:c3:8f:b3:59:94:24:d7:49:43:6a:
fa:17:6d:61:2b:b6:0f:25:53:e0:9f:38:34:a7:5a:
2f:90:1c:6d:87:a9:26:6d:16:a3:e4:05:20:b5:20:
50:d0:fe:35:9f:45:41:79:d5:e4:82:ba:e5:b0:d4:
ec:7c:52:c4:cc:0e:d0:1f:d4:8d:60:c7:22:08:74:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:E6:F2:3D:23:00:D8:1A:5A:50:E0:2A:A8:6F:6F:6E:B2:10:33
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
47:2b:05:73:66:9d:7d:ac:8d:bf:b2:36:a9:6d:3d:f1:e3:36:
e8:0a:19:15:e3:a7:22:f3:5c:f2:7d:14:90:8d:0f:cd:b3:6a:
1f:b2:1e:f5:d6:3a:cb:67:35:2e:d2:c8:f2:92:1e:3b:f2:03:
5e:73:3a:d1:98:02:e8:a4:35:8f:3a:7d:48:e1:d5:82:25:d7:
40:07:22:df:19:54:5b:b4:29:59:01:f4:4c:3b:04:ba:71:dc:
67:88:77:b7:d4:17:d2:e5:18:11:39:6e:a3:1e:be:9e:36:9b:
77:94:22:33:ef:39:f8:e3:b7:37:57:1c:5d:26:61:b2:cc:59:
52:2a:46:7d:07:0e:2e:82:2b:55:b2:66:66:62:3d:12:06:6a:
25:fa:10:72:0c:30:5d:51:a8:78:8e:a0:a9:17:2c:c0:8d:a0:
56:27:42:16:93:33:60:75:2e:6a:6d:3e:59:1c:a8:87:b5:92:
8d:1d:44:d1:71:a1:5d:fd:d3:38:bc:08:69:7d:f1:cb:ed:86:
9f:70:a3:03:82:64:85:f1:a3:fa:92:33:8c:a4:3f:93:56:06:
8f:b9:00:28:2c:70:51:08:1e:24:e5:e8:63:27:1d:e3:35:80:
33:4e:91:f3:8f:d0:aa:a6:69:41:bb:72:40:aa:60:5d:3f:b9:
6a:40:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:39 2025 by rpki-client