Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa
File: 87662556555511EF88D9F680C4F9AE02.roa (raw, json)
Hash identifier: F2zRfngIy1XKfWbRP4qGhGAXZ04rgb/bhy6u2J8p1xM=
Subject key identifier: 7A:8D:B9:C2:B8:08:9F:42:D7:16:37:E8:EF:4B:90:BE:65:CF:C6:53
Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Certificate serial: 71
Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa
Signing time: Thu 08 Aug 2024 08:12:15 +0000
ROA not before: Thu 08 Aug 2024 08:12:15 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 9444
IP address blocks: 120.88.192.0/18 maxlen: 18
120.88.192.0/19 maxlen: 19
120.88.224.0/20 maxlen: 20
120.88.224.0/24 maxlen: 24
120.88.225.0/24 maxlen: 24
120.88.226.0/24 maxlen: 24
120.88.227.0/24 maxlen: 24
120.88.230.0/24 maxlen: 24
120.88.232.0/24 maxlen: 24
120.88.236.0/24 maxlen: 24
120.88.237.0/24 maxlen: 24
120.88.240.0/24 maxlen: 24
120.88.241.0/24 maxlen: 24
120.88.242.0/24 maxlen: 24
120.88.243.0/24 maxlen: 24
120.88.245.0/24 maxlen: 24
120.88.246.0/24 maxlen: 24
120.88.252.0/24 maxlen: 24
120.88.253.0/24 maxlen: 24
120.88.254.0/24 maxlen: 24
202.4.192.0/19 maxlen: 19
202.4.196.0/24 maxlen: 24
202.4.208.0/24 maxlen: 24
223.130.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Validity
Not Before: Aug 8 08:12:15 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66b47dde-e7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:0d:ac:33:d4:e1:97:b1:db:08:77:ef:90:
97:36:00:2a:f6:88:50:e0:c0:95:5b:2d:25:7a:ff:
46:69:0f:ec:84:ae:3c:d1:34:5d:eb:fa:1e:d1:7f:
77:14:8b:b0:ee:4c:86:53:ef:17:4d:6c:42:6e:a6:
73:19:c6:bd:7a:96:97:c4:26:a2:7b:69:42:dc:a1:
c5:1d:0c:59:a7:df:3d:d7:4e:73:5c:f0:74:ec:15:
e7:1f:bf:62:52:a5:8a:51:4d:1f:c0:d4:df:05:9f:
85:9e:92:ec:70:4d:55:7c:23:e2:38:80:f5:23:46:
44:6f:a1:16:6b:a1:a9:70:f8:65:2d:7e:9b:37:c8:
9e:d8:0f:cf:27:78:55:36:2d:a1:b8:1c:31:b7:03:
2a:ab:a1:e9:2a:cb:f7:d0:37:d1:a8:14:7b:af:a9:
25:76:f6:04:8c:2f:b1:f1:e8:ac:af:6d:e3:79:31:
b3:93:5b:18:58:f2:cf:93:88:58:b9:6e:5c:c6:fe:
a4:f7:d7:df:65:4c:c2:b1:8b:26:19:c1:fb:0f:89:
40:f4:7f:88:d4:20:7f:f0:34:2c:23:ae:f2:1a:21:
92:35:15:d0:e1:dc:50:4e:be:b7:06:e6:a6:c7:d5:
e6:b2:50:a1:19:4e:7c:44:56:52:a8:20:6e:7f:23:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:B9:C2:B8:08:9F:42:D7:16:37:E8:EF:4B:90:BE:65:CF:C6:53
X509v3 Authority Key Identifier:
keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.88.192.0/18
202.4.192.0/19
223.130.32.0/19
Signature Algorithm: sha256WithRSAEncryption
13:3b:55:e3:41:3d:ef:0c:56:6a:6a:22:c4:5b:19:de:5a:de:
2e:1f:8c:c3:28:56:a6:cf:4a:10:bb:eb:7e:bd:4d:84:24:d7:
2b:fc:68:56:35:e8:3f:8e:6b:cf:d9:67:57:8f:e2:d6:49:96:
fb:59:f6:14:7b:fd:6d:cc:12:51:8c:23:61:8b:e8:ee:16:8f:
b5:48:f1:f3:da:5e:1d:ea:87:16:2b:ce:59:57:90:71:a5:79:
cf:a9:22:53:0a:c5:a4:84:5d:a6:bf:6b:1c:eb:6c:bd:6b:ee:
6d:1e:77:01:71:af:e2:fd:f8:d9:b3:14:88:e6:c4:0b:4e:05:
22:c6:d1:56:f5:ad:96:10:84:85:df:a5:a7:99:e0:0e:a7:77:
a6:d5:0b:56:dd:32:3c:2d:0b:ab:96:9a:9d:7c:b1:3c:76:9d:
63:2e:8f:0b:ac:b5:38:36:4e:04:52:e9:4d:bd:ff:1b:1b:32:
8f:5c:5f:81:cc:dc:0c:b5:ad:99:89:1b:8f:db:4f:34:e2:39:
7a:82:9a:2a:0f:f2:b7:84:4f:0b:97:01:7e:90:ee:e5:ce:7c:
de:70:d6:74:28:99:e5:4b:44:7b:14:ef:b9:21:d5:7f:69:99:
db:88:59:1b:fc:27:11:4c:50:33:a6:c5:65:6b:7e:f9:56:88:
74:95:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:11 2025 by rpki-client