Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/544F13A6B78111EF84611770C4F9AE02.roa
File: 544F13A6B78111EF84611770C4F9AE02.roa (raw, json)
Hash identifier: b+cobkm/t+8VplbAM/uAvE/ze4s0B8PJ3bqKjF7kQOA=
Subject key identifier: EF:E8:24:EC:D1:51:4C:E0:91:83:C0:41:81:47:0E:FD:93:D6:C3:99
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 013F
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/544F13A6B78111EF84611770C4F9AE02.roa
Signing time: Wed 11 Dec 2024 05:32:36 +0000
ROA not before: Wed 11 Dec 2024 05:32:36 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136393
IP address blocks: 96.30.64.0/21 maxlen: 21
96.30.64.0/22 maxlen: 23
96.30.64.0/24 maxlen: 24
96.30.68.0/23 maxlen: 23
96.30.70.0/23 maxlen: 23
96.30.72.0/23 maxlen: 23
96.30.79.0/24 maxlen: 24
96.30.84.0/22 maxlen: 23
96.30.100.0/22 maxlen: 23
96.30.107.0/24 maxlen: 24
96.30.108.0/23 maxlen: 23
96.30.111.0/24 maxlen: 24
146.88.36.0/22 maxlen: 22
146.88.36.0/24 maxlen: 24
146.88.37.0/24 maxlen: 24
146.88.38.0/23 maxlen: 23
146.88.42.0/23 maxlen: 23
146.88.44.0/22 maxlen: 23
146.88.52.0/22 maxlen: 24
161.82.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Dec 11 05:32:36 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=675923f4-1aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:d8:37:dd:ab:47:c9:64:18:cf:51:7b:12:
84:68:ca:aa:5b:b9:8e:41:04:e1:af:ee:12:63:91:
2b:77:86:45:2e:35:51:9b:d0:10:ef:4d:b7:fb:f1:
4a:74:49:4f:5d:c7:63:8a:1a:d4:7b:b8:04:e0:a4:
83:ed:bd:8d:a3:69:ca:30:30:21:c9:0d:b3:b1:31:
cf:9c:b3:c4:63:b4:7d:f4:99:19:21:2e:35:d3:4c:
90:87:dc:d3:84:80:a2:e7:54:e5:4b:17:b6:4c:e5:
59:c5:e2:2c:66:ae:18:09:57:3c:ed:0c:7d:44:10:
fb:ba:81:90:4a:47:4c:dd:95:48:f2:1c:19:6d:4a:
f4:80:5a:35:44:00:a2:d2:d5:bf:d3:33:49:cd:ac:
86:92:03:8e:31:e1:9c:37:1c:8c:4b:b1:93:78:34:
8e:59:f0:56:c6:fb:50:dd:7c:fb:19:48:0a:bd:f3:
13:9c:1a:9e:9c:07:21:9c:9b:a0:e7:e4:63:fc:13:
d3:a8:c4:7c:10:65:2f:97:88:1f:66:15:ee:c1:25:
4f:5d:33:89:57:68:2f:37:9c:93:c9:c6:45:92:07:
25:4e:22:6a:e2:fb:e9:e7:a8:d0:bc:09:00:02:2e:
84:8f:5c:e3:ba:47:2c:5c:52:20:55:f6:d6:16:9b:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:24:EC:D1:51:4C:E0:91:83:C0:41:81:47:0E:FD:93:D6:C3:99
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/544F13A6B78111EF84611770C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.64.0-96.30.73.255
96.30.79.0/24
96.30.84.0/22
96.30.100.0/22
96.30.107.0-96.30.109.255
96.30.111.0/24
146.88.36.0/22
146.88.42.0-146.88.47.255
146.88.52.0/22
161.82.186.0/23
Signature Algorithm: sha256WithRSAEncryption
26:88:dc:d4:2f:22:43:7f:19:24:13:6c:b5:c6:44:6f:66:7b:
93:69:8e:af:f5:45:91:a7:5e:7f:02:8b:85:64:06:4f:1c:45:
a4:d9:98:2e:1d:0f:6a:ff:ee:63:0d:8c:4e:3e:b5:40:8d:67:
0e:cf:44:1d:c9:df:b3:0b:c1:8f:15:3c:2c:08:a9:da:9b:3d:
52:e4:9d:f7:89:95:45:c4:1a:0c:50:e2:61:07:4f:f9:38:61:
62:ea:04:3d:74:09:c2:a0:3f:a9:78:31:ca:5d:99:a9:75:9b:
27:e6:de:19:a7:69:7c:24:b0:eb:73:cf:b8:e8:d5:e9:97:02:
1d:63:59:0f:ac:6d:7e:65:d5:62:f4:46:fa:8c:fb:55:28:0b:
d7:bc:59:20:f2:73:11:de:db:d5:a7:1b:7e:43:86:1c:46:69:
2d:0b:3e:6e:f7:bf:36:7e:03:20:c6:4e:99:df:b9:58:d3:83:
82:e4:79:5e:97:c3:1f:7f:8c:d1:44:c5:75:4f:30:6d:8b:e4:
7a:af:3e:b5:6f:b4:9c:90:5d:a2:f1:5d:77:03:89:03:19:85:
27:ee:6e:d9:9c:da:c3:ed:60:be:c6:6a:34:f0:b8:c5:e3:ee:
0d:69:67:a7:c4:c8:d1:83:fd:1d:2a:59:36:91:a6:ca:a9:e1:
35:25:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:34:27 2025 by rpki-client