Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/28A39D4ACF2C11EF81EE543AC4F9AE02.roa
File: 28A39D4ACF2C11EF81EE543AC4F9AE02.roa (raw, json)
Hash identifier: OlIpqyNfeotozB7P9eYuX/ZwLUGwFcwcFDCdgY/Nplc=
Subject key identifier: D5:06:78:E7:CC:D3:3B:38:5C:70:09:7C:AC:4E:21:60:CC:48:50:A5
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0235
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/28A39D4ACF2C11EF81EE543AC4F9AE02.roa
Signing time: Fri 10 Jan 2025 08:25:56 +0000
ROA not before: Fri 10 Jan 2025 08:25:56 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 137897
IP address blocks: 202.155.156.0/23 maxlen: 23
218.33.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Jan 10 08:25:56 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6780d994-6019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:fc:4d:29:19:bb:b6:39:5e:24:77:d2:c3:
51:fa:58:f8:86:c2:cf:0a:2e:30:ca:ca:7e:8e:03:
81:a9:5e:48:8e:de:24:5b:98:32:e5:1b:03:38:eb:
51:2f:2f:bd:50:8f:4f:d2:10:53:e8:ed:c9:8a:18:
d9:62:29:b8:90:13:d8:7e:fb:f6:bd:a2:d7:2c:1c:
e4:8b:4c:f4:e8:b1:78:70:3c:a3:50:92:57:a5:f3:
c1:29:08:f4:3f:51:4c:05:a2:19:a1:87:d2:43:11:
b8:5a:86:6e:3e:e2:c2:61:3e:28:c4:ff:fb:b8:6f:
75:ec:35:2c:55:14:75:2a:b3:66:bc:79:c0:0c:11:
79:91:2c:b6:80:69:67:96:aa:ad:63:3d:db:f9:66:
66:5e:64:6d:8d:30:36:9f:f4:b0:0c:43:b7:fd:33:
a2:37:6b:70:3e:1b:af:09:9c:5b:50:b0:85:4f:31:
c1:30:61:4d:b4:e0:2a:d8:fa:91:c0:d4:f2:b3:8e:
3b:3e:6d:79:90:6f:8e:2a:92:8c:68:a0:f2:b4:d0:
bc:28:39:fa:5d:c1:0c:4e:72:72:ba:0d:d7:dc:21:
14:d2:95:0f:92:6f:1f:c3:0e:5c:bc:51:47:ea:8d:
fb:0f:dc:e2:d1:cc:54:49:99:ad:e1:c1:3a:2f:5b:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:06:78:E7:CC:D3:3B:38:5C:70:09:7C:AC:4E:21:60:CC:48:50:A5
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/28A39D4ACF2C11EF81EE543AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.156.0/23
218.33.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:4c:1c:bf:73:41:84:d2:9c:c9:eb:5e:28:cf:70:6a:3b:45:
94:36:0c:96:48:4c:9e:80:69:45:fa:08:8b:7c:a0:95:01:3d:
f4:05:73:0c:6d:b0:00:da:9e:09:2f:02:b6:b1:59:83:40:32:
21:2f:13:0f:c6:bf:96:ec:1e:06:90:d0:ca:f8:07:94:d2:d9:
f0:19:9c:02:00:d6:9d:25:25:f5:e8:4b:2d:a9:c2:4e:31:78:
bd:44:75:8c:d9:77:a4:84:7e:60:7b:f0:52:88:5e:d9:af:f1:
42:13:36:c3:8d:db:f6:c0:64:4d:d7:5a:bd:eb:ee:99:d9:5f:
be:01:ae:e9:ea:cc:3b:72:a0:07:b3:3d:6b:8b:ee:3d:14:a6:
13:7c:4e:a6:6d:f3:8e:4e:27:e6:1d:11:36:4c:f7:83:d0:b3:
50:51:73:7a:81:02:90:41:9c:75:30:c9:24:d1:27:4c:4f:43:
95:ac:c1:01:dc:f4:d8:66:dc:b0:ea:5d:4f:f2:90:cc:26:0e:
d9:66:09:e5:ff:99:50:0f:4c:8b:7c:24:36:07:6c:b7:01:7f:
78:68:35:23:19:5a:d2:0e:ed:2b:be:89:bb:44:00:ee:14:92:
a8:e5:87:47:04:d1:c4:12:fa:7b:6d:80:33:bf:b7:cf:ac:c7:
6c:3f:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:00:17 2025 by rpki-client