Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa
File: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (raw, json)
Hash identifier: 80DZG16CrcFxe5rU7q9F6bESXGfGU3ui08O8uchSe8s=
Subject key identifier: 27:47:BA:60:AC:B5:7A:C9:0C:57:56:FE:64:52:B7:CF:53:5F:11:1D
Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Certificate serial: 0C7A
Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa
Signing time: Sat 21 Dec 2024 09:29:21 +0000
ROA not before: Sat 21 Dec 2024 09:29:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 63969
IP address blocks: 45.114.84.0/22 maxlen: 24
103.54.36.0/22 maxlen: 24
2403:41c0::/32 maxlen: 36
2403:41c0:1a::/48 maxlen: 48
2403:41c0:2a::/48 maxlen: 48
2403:41c0:3a::/48 maxlen: 48
2403:41c0:41::/48 maxlen: 48
2403:41c0:fc00::/48 maxlen: 48
2403:41c0:fc05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3194 (0xc7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Validity
Not Before: Dec 21 09:29:21 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67668a71-ad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:ae:5a:2a:86:0b:df:b8:d4:b3:ec:8c:dc:
c5:f0:71:ed:73:07:84:01:36:6c:09:75:16:ff:62:
96:1e:00:42:c3:2a:5e:26:77:d4:51:a2:eb:58:2f:
2e:5f:72:26:6e:8b:a5:ed:34:b2:50:75:5c:5c:e8:
52:5f:51:48:27:5f:8f:11:9a:6a:ef:1f:d4:8d:e2:
5e:7e:37:63:12:42:51:04:53:e2:46:8d:06:a5:f4:
75:e5:34:6f:75:4a:e4:2a:09:d8:f6:56:fb:d0:80:
cd:62:4c:0d:36:98:ec:17:a3:56:c1:bc:ba:14:45:
48:c2:7d:0d:54:09:ab:59:01:09:38:87:06:f4:00:
ac:4a:eb:4e:3c:de:88:c4:bf:50:22:60:15:44:e1:
49:05:9b:b9:76:c7:45:09:e0:7c:c5:d9:e2:f2:42:
03:f6:41:8b:f3:8f:1d:79:d6:f1:1a:0e:4f:0e:f0:
79:a6:89:cd:a3:f9:e7:d1:a9:d1:35:ed:8f:fd:d2:
ff:78:85:d0:52:e7:6f:8d:f5:94:cd:71:b4:75:da:
0a:ed:ad:7d:4b:b3:a2:91:49:fb:05:82:c9:de:71:
d4:be:da:e2:c2:c1:fa:30:8a:b9:a1:32:3b:42:d4:
35:70:12:cf:7b:73:01:94:c3:e6:1f:c2:b1:73:68:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:BA:60:AC:B5:7A:C9:0C:57:56:FE:64:52:B7:CF:53:5F:11:1D
X509v3 Authority Key Identifier:
keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.84.0/22
103.54.36.0/22
IPv6:
2403:41c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:be:5f:12:7c:4b:c8:ba:2e:76:18:5b:87:2e:64:e4:88:83:
74:02:31:21:29:9e:37:f8:53:2f:1b:d8:28:81:ad:b4:23:36:
c1:e7:1c:f7:83:bd:da:04:25:c4:a9:17:a5:75:11:b6:a9:bb:
dd:7f:1a:96:73:5c:02:eb:f6:79:10:38:f0:ba:13:42:53:c2:
09:75:47:17:ff:15:32:a8:34:21:34:ba:5b:80:c9:8c:fa:a8:
7c:3e:54:bf:82:e9:4a:b4:9e:57:48:27:b1:c4:7d:67:31:51:
49:c0:39:ae:47:7e:4c:49:85:bc:77:23:b0:31:a5:bc:2c:57:
97:b3:7e:ce:8b:e0:fc:d3:41:8c:da:1d:9b:63:7e:a2:34:bd:
b8:ff:a5:93:60:04:ab:c6:26:c4:d3:94:4f:03:ca:a9:d0:be:
01:d5:68:b4:dd:e4:50:ea:ca:f7:f8:ea:74:c3:35:f7:3f:4f:
a1:7b:56:53:fa:b5:8e:d1:e9:1b:37:08:28:59:01:da:c8:20:
c6:30:9c:66:0b:13:d3:3f:1d:d6:ad:d0:11:09:fb:1a:67:5d:
94:89:45:67:52:88:54:5b:54:cd:72:81:9b:a5:2e:5c:1c:30:
ee:11:c1:df:85:7c:bb:a5:b5:d7:af:9c:4c:89:f0:e7:0c:eb:
05:46:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:31:59 2025 by rpki-client