Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa
File: EFDC701A099A11EAB5891D5BC4F9AE02.roa (raw, json)
Hash identifier: ThJ/r1UPbbOhsBDCxK8ziXsacEDHIM2voA7gPJ/2xsU=
Subject key identifier: 44:45:E7:FF:AF:FB:61:0E:FD:0A:6B:0F:52:6B:0F:1A:65:85:72:8D
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 0E94
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa
Signing time: Thu 29 Feb 2024 19:37:58 +0000
ROA not before: Thu 29 Feb 2024 19:37:58 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 397215
IP address blocks: 120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3732 (0xe94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Validity
Not Before: Feb 29 19:37:58 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e0dd16-d182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:ab:9c:af:ed:2c:9e:07:a9:77:2e:b9:de:
2d:50:d6:34:db:51:79:ea:92:0c:1a:a6:6b:dc:51:
ee:20:60:3b:77:b6:a1:73:a8:ff:84:9f:b3:1a:ee:
ee:4a:28:0c:92:5b:4f:ef:51:cd:bf:1c:ca:4d:5f:
e8:d2:de:7d:4d:74:2d:b0:30:db:5e:04:3f:a1:e8:
bf:c5:d1:41:66:bf:2a:bb:6a:81:42:49:35:73:47:
44:33:04:04:d8:88:d4:a2:dc:97:ac:64:8c:3d:f7:
94:73:e0:75:ee:06:9f:2c:37:1b:91:f0:a8:b9:c4:
63:a1:e0:0b:3a:52:ed:59:93:dc:e4:3d:76:9c:f4:
5b:06:c6:a4:29:b4:7a:ac:c9:af:c1:0f:9f:c2:e5:
e7:eb:79:5e:32:e5:1e:e3:b9:cd:45:9a:25:35:e9:
80:ae:bc:1b:d3:ef:0a:af:bc:b2:d1:b2:cc:95:7a:
40:42:3e:24:4a:79:96:ac:6c:3a:10:de:53:b8:ba:
93:5b:8d:97:5b:51:94:05:ca:26:e8:19:93:cf:79:
51:38:70:45:49:01:9a:26:9e:2b:3d:c1:0b:bb:f8:
9f:5c:ee:40:04:5c:52:67:a1:38:66:79:d9:73:00:
70:a3:a0:4d:63:ba:c1:12:c9:a0:f4:21:f4:00:af:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:E7:FF:AF:FB:61:0E:FD:0A:6B:0F:52:6B:0F:1A:65:85:72:8D
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
3a:1d:4a:f6:3d:9a:5d:8c:66:63:bc:b6:86:a3:fb:8b:7e:5d:
ce:02:55:26:06:55:7b:5c:2d:c0:fe:b2:6d:5f:27:66:43:c4:
bc:86:c4:32:2e:16:fd:b8:bf:d5:bf:9e:a7:e8:38:99:51:aa:
28:17:ce:2c:c9:72:7f:68:50:0d:09:36:75:9a:10:23:1b:25:
17:28:df:37:68:d1:17:82:32:53:9f:9b:cc:4b:68:97:b8:44:
d2:23:91:b7:77:f7:8e:61:d2:0d:ba:be:77:b4:31:f4:39:27:
d9:fc:d5:84:bc:99:a3:a7:b1:e0:5a:52:41:ba:65:6e:fe:8a:
0a:89:ac:df:d3:ff:a9:8f:c0:d1:51:d6:0b:fd:74:c6:2a:d5:
12:b2:d9:a1:9a:5e:14:cb:94:27:0b:bf:7b:3c:4d:25:9a:ac:
9c:00:40:2d:7e:de:1c:c8:8b:8a:42:50:f0:1b:9d:82:21:3e:
04:00:d2:e5:a1:78:e1:aa:a3:f1:80:3c:06:ab:c9:45:af:68:
20:76:80:ab:29:af:92:c4:91:ee:35:0e:3e:f2:98:c3:e0:15:
09:c7:96:e3:25:f2:45:8f:1a:3c:80:5b:91:39:bf:c0:fa:17:
0e:e6:00:fc:9c:60:f1:34:de:3f:22:c4:98:71:c6:06:5a:08:
4b:dd:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:52 2025 by rpki-client