Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa
File: 5B196FD80A4611ECAE818D54C4F9AE02.roa (raw, json)
Hash identifier: 81w6uEIlXcEUdPQfo2vbY8z/AyDWyyCFh1+WTuNWnEo=
Subject key identifier: 12:4B:70:BD:F0:23:AC:49:3D:F7:A1:05:50:EE:D6:89:A8:D6:77:C5
Certificate issuer: /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Certificate serial: 074F
Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa
Signing time: Mon 16 Sep 2024 21:19:53 +0000
ROA not before: Mon 16 Sep 2024 21:19:53 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 7473
IP address blocks: 202.165.128.0/19 maxlen: 19
202.165.128.0/20 maxlen: 24
202.165.144.0/20 maxlen: 24
2400:7000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871 (0x74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Validity
Not Before: Sep 16 21:19:53 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e8a0f9-0051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:a3:7a:45:6f:06:29:b4:fb:c2:79:a8:f9:
64:b0:ff:98:54:d5:86:bc:d6:a1:4b:23:99:e5:bf:
9b:78:4c:98:30:99:96:18:7c:8a:b1:40:a9:50:8e:
5e:c3:c0:6b:ac:a6:10:8c:cb:9f:b0:1d:95:00:9f:
58:01:7b:88:04:cf:19:04:1f:71:39:c0:a9:ad:68:
cd:d3:13:62:28:b2:2a:ce:b5:db:b8:e5:fe:3c:e9:
a2:e1:1a:2a:4e:bf:27:8b:a7:8d:ee:01:66:70:4a:
f7:d3:f8:0c:58:c4:0f:93:5a:e2:2c:02:5b:51:a9:
de:16:04:5e:1e:fa:cd:03:e7:bb:3e:64:56:2e:44:
39:68:d6:3b:d1:fb:3a:1d:cd:92:e3:73:0f:b4:74:
4e:9c:2f:c3:27:8f:7c:d4:f4:bf:a7:ba:15:2a:36:
f5:04:00:3c:d9:7a:9c:d3:ed:46:67:5d:b2:37:89:
78:73:4d:d5:52:ce:95:9c:19:e7:c3:95:53:4b:af:
66:be:f5:20:d8:02:4f:bb:88:9e:57:aa:8f:41:49:
7e:91:da:78:68:fd:6b:c6:ce:8b:07:8f:8f:66:66:
1c:ce:86:dc:31:d2:93:a6:f1:6b:67:2e:3d:63:34:
e2:b0:39:76:26:13:ed:7c:77:09:5c:41:7c:31:f7:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:70:BD:F0:23:AC:49:3D:F7:A1:05:50:EE:D6:89:A8:D6:77:C5
X509v3 Authority Key Identifier:
keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.165.128.0/19
IPv6:
2400:7000::/32
Signature Algorithm: sha256WithRSAEncryption
90:e0:03:ad:b1:ca:a2:ce:48:df:9d:d8:46:e6:7b:da:90:51:
d6:a7:f3:a0:c9:f9:6e:d2:62:10:e0:88:20:a5:97:46:54:af:
b7:8f:1c:16:90:91:a5:92:38:70:a5:8c:e0:60:0d:85:91:04:
68:ce:f4:4c:03:dd:92:e6:cf:08:10:be:96:1d:2c:cf:93:97:
3d:94:2c:55:ec:12:02:31:c8:12:72:58:5d:03:0d:f7:03:f6:
9b:d4:cf:11:0c:cd:3c:0d:d3:61:46:c7:77:7b:8d:f4:30:48:
87:49:bd:f3:e8:26:75:21:12:29:47:88:86:68:c3:4d:78:25:
ef:50:fc:94:a9:33:3b:d8:c0:d3:5f:84:7f:7d:c9:d1:58:ea:
87:41:e8:fa:70:e5:e4:28:47:51:ee:7a:dc:0e:7e:24:46:b4:
e3:ca:75:1d:38:66:00:88:c9:e1:cd:d7:6a:c5:ad:de:7c:bc:
a2:1c:71:b1:54:22:52:44:bf:1b:52:f8:c1:34:c9:46:7f:e7:
9d:f4:df:06:2c:ef:9d:b2:a2:a0:f2:e6:a0:2e:18:3d:54:a2:
f3:05:ca:06:b4:d6:dc:93:ec:29:c4:08:06:bc:24:97:6c:29:
5f:d7:20:9f:77:58:a3:c1:43:e4:fd:f3:b0:44:9a:82:4a:2e:
43:d3:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:58:11 2025 by rpki-client