Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C179FC90721511EF9D7B9F3DC4F9AE02.roa
File: C179FC90721511EF9D7B9F3DC4F9AE02.roa (raw, json)
Hash identifier: 7XG0QFqdElMNLfDW+DbKEyaqsGLADVZ26BkuIhlQoJ0=
Subject key identifier: 85:02:18:E0:15:D9:24:95:51:28:0B:B2:DC:B0:3A:FB:CA:41:16:53
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: A7
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C179FC90721511EF9D7B9F3DC4F9AE02.roa
Signing time: Sat 21 Dec 2024 05:49:44 +0000
ROA not before: Sat 21 Dec 2024 05:49:44 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 135528
IP address blocks: 202.29.37.0/24 maxlen: 24
2001:3c8:2a07::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 21 05:49:44 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676656f7-1cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:4e:b5:5f:cd:8b:0c:9b:2e:e0:eb:76:1d:
c2:a2:0b:e7:7a:e0:43:d2:fb:bb:3c:f9:69:ca:a6:
9a:15:9b:89:18:b5:b1:9c:43:83:ec:26:00:2a:81:
17:67:d5:27:ce:31:6f:bf:e7:bb:df:e1:89:a2:2a:
be:1d:fc:66:20:0b:9f:06:24:93:69:56:3e:d1:6a:
06:8d:e7:7a:72:d1:49:b7:4c:65:e9:17:b8:08:f3:
81:51:78:f8:85:78:3e:ba:a7:d3:1a:9f:c3:a1:51:
ce:9c:10:9c:36:f6:6e:fa:81:0d:5e:41:36:ed:a8:
57:7f:ef:63:9f:e9:94:bf:b2:0a:e7:e6:69:a7:b1:
30:d1:c4:67:6d:ef:e5:0f:5e:40:6d:97:f9:3d:09:
3e:cd:5c:1f:01:34:4b:70:e2:31:79:4a:cc:0f:dc:
db:07:b7:f1:8f:cb:3c:b3:85:4d:d1:a7:96:88:9a:
fc:fc:3f:29:14:58:c6:25:5c:91:6d:ff:2e:9f:7b:
c2:b7:3c:a7:c8:71:8f:e0:1e:61:18:bf:63:e2:0d:
bd:09:09:7f:c1:4e:98:af:c2:2b:bb:4b:0f:26:1c:
62:72:35:78:8b:fd:87:f6:f3:39:89:5b:d0:02:23:
64:c8:b0:bc:2b:10:05:7a:f1:00:f5:63:36:5c:9c:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:18:E0:15:D9:24:95:51:28:0B:B2:DC:B0:3A:FB:CA:41:16:53
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C179FC90721511EF9D7B9F3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.29.37.0/24
IPv6:
2001:3c8:2a07::/48
Signature Algorithm: sha256WithRSAEncryption
1e:10:a8:ff:61:70:a9:bb:49:b7:cb:4a:6c:59:9a:bc:01:25:
6d:89:dc:cf:ff:80:5d:ae:3f:c7:9a:e3:f0:9e:1a:a2:21:db:
16:7a:34:b2:91:4e:a7:91:c5:52:0b:dc:c0:3d:92:6a:a3:e4:
a5:cb:f9:32:ab:99:ba:bf:d8:31:be:46:5f:31:96:66:67:05:
f8:ea:4c:6c:5c:2a:c6:19:75:66:49:bf:86:bb:cb:a8:87:1f:
b8:69:61:f7:d4:25:fa:60:7d:a9:0c:33:55:66:80:64:28:40:
25:2a:0a:af:51:ac:04:bf:71:df:73:92:2e:11:48:89:12:a1:
6c:c1:d3:29:49:78:bd:9d:7c:a8:13:59:74:0e:e4:77:ab:fc:
71:be:94:07:d6:2a:d7:5a:7a:28:3e:f3:7e:c8:c4:89:2d:5f:
5a:18:50:e4:a1:4b:53:0b:eb:6e:8a:24:e2:0f:6f:07:a3:0c:
9e:be:a4:8e:44:7c:60:a1:b5:84:6b:a8:d2:63:9c:c6:ea:b3:
7e:fd:bb:fe:eb:2f:e5:3d:94:00:24:1b:25:13:d5:f8:cc:ea:
35:5a:ca:45:0e:36:43:00:de:69:62:06:de:89:b0:a7:b6:e9:
9e:66:13:b8:a5:f0:a1:17:76:bf:b7:6a:bd:2a:54:d9:26:c3:
bc:b1:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:01:41 2025 by rpki-client