Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
File: 583C1F6854F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier: J9SJ4DIJ/7Jqarub1sf8j6PHgZAGlGGdRbRsMiv9apI=
Subject key identifier: 5B:D1:B4:65:9F:D9:B6:A3:F5:00:1D:5E:88:A9:71:03:1D:29:2C:9D
Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Certificate serial: 2FCE
Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
Signing time: Thu 12 Sep 2024 15:52:10 +0000
ROA not before: Thu 12 Sep 2024 15:52:10 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 187
IP address blocks: 203.119.88.0/23 maxlen: 24
2001:dd8:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12238 (0x2fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Validity
Not Before: Sep 12 15:52:10 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e30e29-7bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:60:93:dc:8d:68:9b:cc:b7:fe:fd:61:47:
a9:d9:4e:4e:3b:48:15:ad:67:51:61:4f:83:21:a3:
e4:7f:91:30:05:34:9a:14:ef:a5:93:7c:59:2d:b2:
d8:41:57:95:f0:29:ff:dd:8d:ac:08:69:b1:64:50:
d4:a3:68:c4:80:93:b7:22:4f:e2:a3:0f:29:d3:cf:
08:e1:d6:24:13:34:f9:1a:cd:f4:47:90:62:2f:42:
da:72:99:d8:d7:0e:45:99:90:eb:c7:b1:46:17:ce:
59:c9:3a:a4:85:4e:ec:29:49:15:34:df:ce:5f:e8:
da:61:ae:dd:4b:3f:2a:b2:e7:3a:e7:f8:e0:ec:68:
64:6a:10:91:75:54:40:80:17:35:73:c8:38:9e:da:
49:b1:47:6c:79:4d:18:ea:ac:43:2f:66:57:14:fe:
46:3a:b1:09:0e:70:40:46:5c:4e:99:e3:76:fd:4c:
83:2b:5d:1b:05:96:ff:89:ab:88:46:db:14:97:f8:
5d:2a:2f:ea:e3:68:a8:84:c8:5c:fa:89:56:99:0a:
0e:4e:02:38:9e:94:e2:50:d7:41:71:22:47:39:0e:
2f:78:6e:52:99:b8:03:e1:d9:a8:b7:b3:52:79:34:
d0:23:cf:ca:47:89:ae:fe:a4:6c:28:c2:ed:c6:c5:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:B4:65:9F:D9:B6:A3:F5:00:1D:5E:88:A9:71:03:1D:29:2C:9D
X509v3 Authority Key Identifier:
keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.119.88.0/23
IPv6:
2001:dd8:7::/48
Signature Algorithm: sha256WithRSAEncryption
93:40:ec:6f:f1:7f:18:3c:43:e7:51:62:49:7e:55:b4:1e:7e:
8b:c4:9c:08:95:5d:e6:f1:fa:11:e1:55:52:fd:30:33:5e:65:
4e:64:f7:76:a9:66:f3:2e:6e:40:4c:7c:d8:ec:7e:7a:84:bf:
e1:52:0b:91:85:97:89:e3:17:a2:b9:00:41:a9:d1:ac:a0:3d:
58:75:3d:6e:13:df:67:ac:83:3f:1f:e1:cd:c2:71:72:cd:47:
a6:00:ed:b8:77:c2:dd:56:55:3d:db:bf:7e:4c:f8:ad:d4:42:
43:d8:33:83:d8:a9:53:b7:6f:9b:50:d0:a6:ec:97:62:04:c0:
6b:7a:60:57:3c:2d:04:82:4a:91:d3:b1:76:7e:a2:cc:d1:b5:
a7:5b:37:da:04:a8:ee:83:3f:0b:aa:6c:7d:9b:7e:3f:c0:d1:
ef:f8:5f:25:10:02:9d:e6:06:98:45:bc:b5:91:ae:5e:f2:a9:
45:c9:42:20:90:e3:0f:0c:ee:fc:12:b8:01:41:ac:82:a1:f0:
f7:8d:19:cd:b0:fd:8e:84:ed:93:06:78:5f:f7:74:b5:3a:f2:
7c:f9:03:58:55:47:fb:b8:9b:45:f3:f6:ec:9a:e5:2a:d5:21:
e9:5d:02:33:2c:c7:83:3b:02:04:69:2e:bf:63:33:78:72:52:
c4:33:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:40 2025 by rpki-client