Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
File: B2690D6CCA5511EE9683413FC4F9AE02.roa (raw, json)
Hash identifier: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=
Subject key identifier: D2:A9:BE:BC:8F:8F:74:F1:E5:48:71:0A:31:43:E3:02:14:F5:ED:2D
Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial: 34A3
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
Signing time: Thu 24 Oct 2024 14:30:36 +0000
ROA not before: Thu 24 Oct 2024 14:30:36 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 151981
IP address blocks: 118.179.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13475 (0x34a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Validity
Not Before: Oct 24 14:30:36 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671a5a0c-ae6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:b8:ac:96:0d:27:55:02:fe:19:fc:1b:a0:
b7:5c:99:35:ad:38:d2:3a:09:39:fa:37:40:fe:62:
96:f1:00:ea:27:00:8c:3c:51:47:80:f3:73:7e:38:
b5:5d:2c:e6:b2:fe:79:b5:68:c1:f6:a3:ee:f7:1c:
06:b2:6f:7b:31:bc:f9:66:7b:86:cf:da:1a:45:ea:
f6:f0:8d:20:23:55:dd:23:08:d0:21:17:98:39:b4:
d7:63:71:41:01:e7:0a:d3:90:c5:69:aa:9e:bb:19:
f2:ab:d6:b2:9c:67:da:f4:e9:68:6f:8b:b3:b6:40:
7a:70:eb:43:b0:ec:10:da:ac:82:d3:52:85:cc:0b:
46:cd:d3:22:43:56:19:c5:e3:7a:82:b5:da:31:8f:
dd:25:5a:32:9c:3c:3a:99:c1:48:59:bf:7c:5a:e0:
80:3c:f0:9b:48:3d:8f:1e:b9:1b:11:0a:74:64:1f:
57:05:0c:ae:24:21:4f:48:0e:79:e3:3c:82:ff:f7:
e4:83:43:f0:a3:5e:b6:b2:ee:c5:10:6c:5f:a4:52:
1f:da:c4:b8:7a:7b:0f:c0:8f:11:ca:b0:d2:a4:16:
ee:23:27:80:32:d4:4a:65:73:ad:ee:a6:51:15:93:
e1:c7:e8:c6:3b:f7:92:12:34:89:70:41:6e:85:37:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:BE:BC:8F:8F:74:F1:E5:48:71:0A:31:43:E3:02:14:F5:ED:2D
X509v3 Authority Key Identifier:
keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.179.57.0/24
Signature Algorithm: sha256WithRSAEncryption
48:7c:1d:39:7e:5d:69:8f:16:db:6d:c1:b1:4c:e7:6d:b9:17:
08:e2:e5:69:a3:43:ed:0d:7c:3f:99:c5:cf:0f:5e:3c:65:01:
8f:37:52:e6:5f:bc:17:84:b4:4f:85:ab:fa:7b:25:b7:b4:c2:
eb:e7:6d:ac:f5:88:c6:03:c3:e8:5f:86:82:83:0f:ed:f2:f2:
04:13:9e:a4:06:85:da:c4:7d:da:5f:d8:33:4e:79:3c:a9:9a:
ef:a7:38:56:af:91:c8:d9:90:db:a7:eb:ea:0d:88:64:51:a1:
a4:4a:3c:ab:aa:63:d7:bd:ef:77:8b:29:e7:70:e8:8a:7a:8a:
48:fd:c3:4b:37:b4:8f:b5:39:96:19:77:bc:9a:8c:f5:73:ab:
f0:0d:1b:5e:78:4a:0d:1e:ef:85:08:da:db:ae:78:f7:bc:f0:
49:87:6e:e8:75:2f:e8:90:14:b0:ec:79:40:56:ff:9a:8f:00:
a0:f1:aa:52:2c:ec:5a:80:2d:83:80:4a:4d:d6:4d:53:1a:f5:
86:48:56:69:55:41:fa:4a:0f:a5:07:19:36:6a:6d:da:70:38:
60:7a:2e:8b:b3:aa:d2:9a:f0:f2:44:71:7c:f6:5f:6a:a6:fe:
f8:74:63:98:41:18:b3:96:0a:9c:8d:0f:8b:6c:35:8f:b0:c2:
ec:a3:85:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:02 2025 by rpki-client