Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa
File: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (raw, json)
Hash identifier: PQ9k5ml2CigYSMp+2yfrpsn46+C6nnYyfPaH+qZvjXk=
Subject key identifier: CA:76:E6:62:82:E4:56:D2:7C:A8:70:8C:18:9B:33:2E:BC:4E:EB:E2
Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial: 0F
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa
Signing time: Mon 20 Jan 2025 04:25:33 +0000
ROA not before: Mon 20 Jan 2025 04:25:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10118
IP address blocks: 202.45.92.0/23 maxlen: 23
202.45.92.0/24 maxlen: 24
202.45.93.0/24 maxlen: 24
202.45.94.0/23 maxlen: 23
202.45.94.0/24 maxlen: 24
202.45.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Validity
Not Before: Jan 20 04:25:33 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=678dd03d-c9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:8e:bc:9c:12:08:c7:ac:2b:56:c7:25:96:
6d:26:e6:4b:ba:15:51:38:5d:92:f5:c6:52:ca:7a:
64:22:95:1c:2b:2a:fa:4d:a8:33:06:4d:0d:19:fc:
bd:a4:51:cf:53:e3:c2:6e:c9:cd:63:b3:1f:d0:b6:
fa:4e:8b:bb:ef:30:5c:dd:94:94:a7:b5:b8:46:66:
5d:13:67:6e:78:ff:87:71:c0:96:31:37:e0:3a:1c:
1e:8e:de:a9:ec:0d:fb:bb:7a:6b:55:3b:fd:e9:35:
cd:6a:44:eb:70:a3:a5:84:02:2c:fa:70:71:28:b5:
92:c1:b1:c6:7d:7b:69:3f:25:8f:55:7a:84:17:71:
f1:57:48:d7:6e:a6:89:d5:65:38:bb:cd:52:08:23:
bc:fe:57:87:3f:f2:a6:a4:7c:3d:f8:0c:26:0d:8d:
e8:1d:43:32:45:db:12:18:77:5c:11:52:57:e6:f0:
53:c1:88:c0:6f:1a:ec:47:74:38:b6:b0:d1:c9:49:
7d:f6:62:f7:4f:07:bc:5b:fe:1e:14:52:89:db:1f:
25:e0:68:f7:02:41:5d:87:9a:3b:eb:fa:28:15:5c:
05:96:ee:4e:b0:a6:96:bf:ed:9c:2d:d1:a9:7c:f6:
5b:39:ec:9f:91:5d:28:0d:a9:fa:d5:bd:76:8d:35:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:E6:62:82:E4:56:D2:7C:A8:70:8C:18:9B:33:2E:BC:4E:EB:E2
X509v3 Authority Key Identifier:
keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.45.92.0/22
Signature Algorithm: sha256WithRSAEncryption
70:d8:8c:01:1a:81:da:6a:6a:b8:b9:1c:59:db:4e:fd:09:90:
f8:d6:9f:09:63:b6:8a:b0:bf:65:5b:06:36:5e:13:d8:12:5c:
f0:41:88:bc:1a:51:f5:cc:4f:59:27:f2:5d:c4:96:fc:b2:18:
02:1f:79:e7:2a:77:7f:fc:27:67:5d:d7:79:eb:3f:9a:9c:2e:
e0:50:7d:db:d0:22:d1:dc:ca:3d:39:32:1b:32:c1:e1:34:d4:
10:09:81:53:34:29:30:a4:fe:ea:b3:eb:0e:ba:06:55:e2:3c:
48:6d:ad:b9:d7:1c:01:36:cf:9c:e3:29:af:9f:b4:41:61:8e:
b2:40:9f:0c:ff:5c:24:5b:ca:17:7a:b0:7d:03:e5:9d:53:47:
82:e2:58:05:92:2e:88:3c:8f:19:9d:f3:da:bb:76:a1:4c:ee:
a0:d7:61:c5:60:f2:c1:f7:3c:57:a7:ae:28:8f:fb:42:f8:56:
28:5c:ce:f0:dc:af:12:1a:17:28:2e:7a:f4:d9:1b:0e:bb:4b:
e4:32:3f:58:ec:ce:db:ac:6d:c4:94:d7:48:d0:61:14:37:81:
74:02:e1:02:33:2f:85:4b:46:6e:a4:f7:77:63:73:5f:14:66:
18:93:31:b1:a8:0b:1e:87:90:78:38:64:e3:4e:30:f6:d3:f4:
98:f6:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:47:29 2025 by rpki-client