Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
File: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (raw, json)
Hash identifier: hYGISbkx0iOPIWsemxA5+ThrUTq4VIEQEwarwfGguJw=
Subject key identifier: 97:39:C5:35:57:5A:B2:52:E5:23:8E:B6:FD:BF:47:3D:8A:9B:BD:0E
Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial: 12
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
Signing time: Tue 27 Aug 2024 07:52:27 +0000
ROA not before: Tue 27 Aug 2024 07:52:27 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45744
IP address blocks: 110.232.184.0/24 maxlen: 24
110.232.185.0/24 maxlen: 24
110.232.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Validity
Not Before: Aug 27 07:52:27 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66cd85bb-3f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:06:a1:04:b2:59:2c:d7:e5:73:c9:79:19:
f3:9d:17:26:91:d6:63:67:72:f3:fa:d9:c8:75:b0:
13:f4:4c:16:00:28:53:b2:3a:67:e9:bf:e8:b0:12:
4c:99:47:42:7b:e2:54:ed:22:74:b5:d9:c6:8d:08:
7b:1d:e5:6d:36:f8:15:bf:9d:cc:a7:74:66:53:01:
29:35:e6:70:d4:43:93:56:a0:54:35:49:5e:cb:11:
2b:f5:93:4b:d2:97:c2:4a:c6:ce:b2:2a:f9:2c:59:
be:68:49:83:f2:7d:c4:c5:95:02:33:97:9c:fa:82:
33:6c:26:6e:ac:8d:1d:a7:bf:a8:7f:45:4d:ab:d0:
41:0a:9d:be:4a:2d:84:eb:6a:11:48:aa:7a:64:c6:
8b:27:4d:82:ab:c2:1d:61:dc:b2:04:bb:74:94:19:
33:71:60:63:2d:fd:11:6d:9d:68:c8:64:02:51:eb:
93:09:1b:b9:62:31:94:dd:ef:26:8b:bc:10:a7:d1:
2a:c0:91:db:fe:23:5c:a9:f8:c6:7b:df:23:70:91:
12:af:1b:62:54:48:a2:c4:2e:0b:5f:4a:e4:c9:7b:
4a:f8:b1:a1:5c:44:01:b2:fa:c9:9c:c7:4f:81:98:
c3:2a:04:79:a5:7e:3d:90:65:65:5c:d2:74:5e:2e:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:C5:35:57:5A:B2:52:E5:23:8E:B6:FD:BF:47:3D:8A:9B:BD:0E
X509v3 Authority Key Identifier:
keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.232.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a4:a4:84:ed:60:21:82:70:d1:e6:7b:0e:06:75:43:70:fe:
88:d6:42:57:46:4c:06:79:a5:1a:56:06:14:06:bf:01:05:74:
e7:85:0a:a7:c3:c0:28:f5:2b:18:0d:7c:23:9f:d3:51:af:53:
df:cb:69:c9:bd:e6:68:5a:1e:f6:ff:93:27:d4:63:57:d7:7d:
43:cd:36:13:0c:d8:91:42:8d:00:79:8c:9e:54:61:12:d7:09:
d8:08:87:6b:80:bc:1a:d2:fb:7a:81:07:4e:b0:ce:f3:38:fd:
64:8a:7b:3d:0d:5c:c1:fe:86:5e:22:30:47:73:1e:fc:0c:7e:
02:c5:9a:7a:cd:e4:91:19:6c:dd:d4:74:bc:f2:9f:e7:ca:ca:
f0:20:aa:c1:f0:fb:68:a6:1b:74:27:6e:4f:83:8e:ed:28:a6:
cf:e8:12:30:84:99:db:36:3e:8d:00:83:eb:33:ed:1e:29:00:
c4:ad:f6:42:5c:f9:62:de:da:bf:86:29:e4:de:8c:e6:43:b4:
59:d3:bf:59:4c:7b:b0:d9:0d:f0:7f:18:10:e7:a4:a1:5d:35:
66:fe:18:18:c2:04:d2:41:96:3e:3d:a5:de:df:ab:1a:cf:b6:
c0:a6:17:b0:8e:8a:f7:59:c6:e5:b0:14:07:ef:49:84:06:f6:
10:aa:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:27 2025 by rpki-client