Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/DF6E9324D08D11EA9010E72EC4F9AE02.roa
File: DF6E9324D08D11EA9010E72EC4F9AE02.roa (raw, json)
Hash identifier: NKaWR27X7N0yTdapOCDpWGOjKNUWONO9ba73Q3IbiMc=
Subject key identifier: 4F:5F:7B:14:0D:54:C3:7E:3E:03:9E:03:00:BB:6C:25:37:3B:66:C2
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 35F3
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/DF6E9324D08D11EA9010E72EC4F9AE02.roa
Signing time: Thu 04 Apr 2024 15:21:20 +0000
ROA not before: Thu 04 Apr 2024 15:21:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9557
IP address blocks: 58.181.96.0/20 maxlen: 24
119.159.0.0/16 maxlen: 24
182.176.0.0/16 maxlen: 24
202.70.144.0/20 maxlen: 24
202.125.128.0/19 maxlen: 24
203.135.0.0/19 maxlen: 24
203.135.32.0/19 maxlen: 24
221.120.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13811 (0x35f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Apr 4 15:21:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660ec570-0db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:26:8e:e9:10:a5:cb:af:de:72:f5:43:c6:
60:49:9b:24:63:f3:29:09:d8:23:e9:8c:c5:88:46:
cc:41:78:49:9a:b8:78:f0:74:9e:33:b3:32:ca:47:
d2:6b:41:d9:f5:33:65:fb:0d:71:9c:df:45:d1:78:
b6:95:40:88:0b:50:a3:43:42:ac:d7:0a:95:be:70:
ea:8d:f5:e5:15:dd:80:25:df:65:eb:7a:cc:9a:7f:
0c:26:10:a1:24:1f:10:99:eb:0b:c8:f6:f2:31:69:
62:54:15:b5:23:c2:e7:8c:c1:34:2f:5f:d5:35:53:
39:95:89:b0:fe:78:7e:3e:f4:86:38:36:a6:ef:7b:
fd:51:6a:07:be:1e:92:96:7f:45:e1:76:c2:08:c6:
20:c9:d0:cf:bc:ce:1c:85:89:0d:09:8e:72:c3:aa:
1e:d5:e4:b3:18:67:d3:d6:8d:5f:18:65:1f:d0:6f:
88:de:1d:bb:24:80:4c:66:e1:92:50:23:ea:22:c2:
c4:64:6b:66:8f:8b:ae:e0:e0:05:1e:3c:66:99:12:
f1:34:0b:12:91:39:88:45:4c:45:64:fd:d0:77:33:
ee:59:d2:dc:24:35:e2:18:22:e6:a3:d1:0e:7f:da:
30:dc:57:59:36:4a:b8:4c:19:f8:3c:a1:79:57:c8:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5F:7B:14:0D:54:C3:7E:3E:03:9E:03:00:BB:6C:25:37:3B:66:C2
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/DF6E9324D08D11EA9010E72EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.181.96.0/20
119.159.0.0/16
182.176.0.0/16
202.70.144.0/20
202.125.128.0/19
203.135.0.0/18
221.120.192.0/18
Signature Algorithm: sha256WithRSAEncryption
04:bf:81:32:c0:54:58:a3:d1:b0:20:d7:37:61:51:b9:93:51:
34:13:37:94:e7:59:62:c8:68:8a:03:3b:26:74:e3:97:cf:f4:
d6:8e:b9:c6:b5:69:fd:34:99:2f:8f:a7:d4:e9:ba:9e:26:27:
94:fd:08:9a:5e:ec:e4:56:9e:54:9a:70:69:fa:66:63:5d:d4:
e4:e3:f3:9d:3f:1f:d8:1f:51:21:72:36:04:a1:11:5f:86:20:
26:d9:79:b6:57:1c:e7:da:dd:89:1b:6c:75:e2:99:4a:2d:3d:
1e:35:14:a0:66:f0:39:41:b9:cb:61:08:16:9b:49:90:4d:5c:
e1:ec:8a:6e:4e:47:94:b9:e4:2e:95:ed:ed:75:fc:69:58:01:
4a:4e:64:2e:cc:4b:1d:dc:42:ec:98:5d:56:ef:8d:11:a7:4c:
42:8e:91:e9:d6:84:87:4c:5c:f9:b9:ec:62:66:4e:12:d8:38:
82:1d:0a:64:31:8c:4f:f2:bf:c4:4b:b6:ba:fc:5c:75:e8:2a:
b7:b4:f2:23:8e:58:a7:79:6a:1d:90:76:61:1c:fb:88:fb:72:
63:21:4e:26:63:5f:16:41:19:4c:00:fd:6b:4c:30:77:0b:d2:
fd:7c:3b:ca:74:bc:1e:3f:30:7e:40:43:10:45:5e:b0:0f:9c:
23:3d:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:38:14 2025 by rpki-client