Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/795DEE70073111EA993EC663C4F9AE02.roa
File: 795DEE70073111EA993EC663C4F9AE02.roa (raw, json)
Hash identifier: Ej7YMgenIUCQWW4OuoVEXOtE3nBBeIBDoBOcs5rBB0Y=
Subject key identifier: 91:89:54:93:B3:27:3D:42:7C:A5:A3:3E:A0:1F:A0:BC:7B:59:B8:31
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 0E97
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/795DEE70073111EA993EC663C4F9AE02.roa
Signing time: Thu 29 Feb 2024 19:38:00 +0000
ROA not before: Thu 29 Feb 2024 19:38:00 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 397218
IP address blocks: 120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3735 (0xe97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Validity
Not Before: Feb 29 19:38:00 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e0dd18-7b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:7e:14:a7:48:0b:b8:8a:76:d3:cf:70:06:
ee:97:e5:fe:2f:44:d2:da:64:5d:2a:de:c6:7a:5b:
18:4b:e5:65:2f:c8:59:76:37:fe:77:bc:71:a5:47:
50:08:9c:98:1e:42:2d:1b:f7:c6:f8:05:bd:08:91:
81:e4:72:82:00:20:9a:2a:b5:bf:42:62:1b:72:9e:
7e:06:70:68:dd:9d:46:e8:60:ee:61:ba:c6:29:26:
3c:b7:5c:da:f1:7c:36:5d:0f:31:da:c6:da:7a:fa:
bb:4c:75:5d:d5:b9:94:dd:da:79:b8:c9:3c:24:1d:
41:34:8f:69:d3:0d:b9:c5:b3:09:5d:7b:13:53:b5:
03:ef:26:cf:49:b6:c5:cc:5f:21:31:6f:98:66:c1:
fb:6d:f1:5d:b1:b4:e3:70:b7:29:11:fe:55:ab:33:
e0:a9:47:29:5b:82:c6:fb:c1:ae:d2:f4:0f:63:44:
c3:6b:b0:cb:7f:fc:78:5b:44:aa:8c:2e:5a:5e:55:
b4:d4:14:17:2f:ae:a8:25:a7:f9:59:35:d4:8e:07:
9a:1b:08:af:d1:4f:61:3f:d3:04:bf:5d:67:ac:ba:
f1:a0:71:53:3e:ef:a9:ed:40:a1:47:49:e8:1b:16:
d4:5c:14:de:2d:d3:3e:85:60:0e:b6:ac:15:77:8c:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:54:93:B3:27:3D:42:7C:A5:A3:3E:A0:1F:A0:BC:7B:59:B8:31
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/795DEE70073111EA993EC663C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
5b:f8:80:e6:d6:62:41:ba:bf:14:74:46:19:6f:56:24:ab:cc:
cb:ba:3a:94:d3:b6:f9:82:45:4c:f1:bc:a9:b4:b3:23:18:77:
f5:52:c4:16:4a:3a:88:71:1d:4d:41:af:2a:8e:0a:b5:eb:79:
76:24:7f:72:0f:7e:76:64:d5:6b:b8:c9:fe:68:89:e2:b2:64:
c2:99:86:6d:9d:1b:a1:b4:eb:2c:4d:b8:16:60:7e:8b:b1:1d:
8f:41:30:be:65:74:12:7f:af:e0:5d:b9:33:a1:64:fe:f2:d6:
01:b7:48:e2:8f:0a:1c:89:b2:22:46:d5:45:e7:1e:63:30:19:
fb:89:06:d8:13:98:62:9f:67:5f:db:08:47:9c:5c:83:66:ab:
be:6b:cc:b1:07:5e:b4:38:17:43:6a:5e:11:8d:18:78:79:5b:
48:9b:3d:b1:2c:81:7d:c0:2f:07:54:2f:8a:e6:14:e9:c8:12:
1d:82:fb:b5:cf:cd:4e:4c:22:90:39:81:81:e8:18:88:40:16:
42:58:5a:4d:90:31:20:e9:c7:67:fe:61:41:2b:07:3f:2d:e4:
f2:33:37:44:1e:77:21:e2:cb:93:de:c6:44:46:85:c1:97:e1:
92:15:47:5f:01:18:6c:e8:c3:f5:48:e4:a1:e5:72:8b:b4:74:
8c:1f:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:04:50 2025 by rpki-client