Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8D1689472E411ED833AE326C4F9AE02.roa
File: B8D1689472E411ED833AE326C4F9AE02.roa (raw, json)
Hash identifier: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=
Subject key identifier: 35:35:3B:BC:52:1C:35:73:F3:C5:6F:E8:64:7A:C2:65:C1:8C:D9:AC
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 0652
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8D1689472E411ED833AE326C4F9AE02.roa
Signing time: Sat 31 Aug 2024 00:01:59 +0000
ROA not before: Sat 31 Aug 2024 00:01:59 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 134176
IP address blocks: 121.54.188.0/24 maxlen: 24
121.54.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Aug 31 00:01:59 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d25d77-29af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:0f:44:a7:e1:17:b4:3f:4d:e6:c1:ae:ee:
b6:50:63:d7:5a:07:2b:d4:10:67:d7:94:82:84:87:
c6:be:5a:78:12:7d:2e:6d:f2:db:fc:a1:40:11:33:
d7:73:22:34:5a:23:0c:c1:36:29:93:ec:70:7a:91:
c9:9b:80:05:20:cb:44:e4:22:a1:65:4f:6f:6b:33:
45:91:8f:a6:37:ca:5f:37:f8:dc:63:78:20:ba:49:
2c:8e:f1:6a:27:ef:20:4f:63:28:71:04:c5:1c:52:
52:9a:18:00:1d:e3:35:3d:fe:16:60:80:b0:dc:b1:
41:93:2b:b5:2f:88:d6:82:4a:f1:a6:10:2a:8b:ca:
54:53:6f:c6:b7:63:81:1b:8d:88:40:18:06:a8:fb:
0d:4b:ea:52:6c:0f:c4:eb:e3:e5:10:56:d5:39:6b:
3f:88:ed:11:04:ef:a3:98:86:37:95:44:7a:7f:3f:
2c:ba:7f:b6:78:59:01:91:fb:6b:6a:ee:6a:df:ee:
fe:19:84:ef:a3:ac:d7:0d:1f:a0:3e:fa:03:3a:30:
b8:38:c7:cc:19:72:e3:84:45:1d:7f:95:e2:be:20:
0a:5c:9a:76:ff:15:7e:df:33:9a:38:ab:77:33:3a:
d0:20:95:eb:71:ae:f0:f4:74:12:4a:c4:c0:ab:e5:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:3B:BC:52:1C:35:73:F3:C5:6F:E8:64:7A:C2:65:C1:8C:D9:AC
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8D1689472E411ED833AE326C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.54.188.0/23
Signature Algorithm: sha256WithRSAEncryption
77:bc:07:d5:3f:6a:28:9f:29:c8:9f:5f:4c:0e:b9:59:03:93:
fc:a7:1f:52:fa:f1:32:3e:33:6d:b4:8f:43:cb:d4:9f:d0:f3:
fe:c2:36:68:71:9c:b0:0c:cf:5a:0e:45:a6:05:37:cf:ad:db:
69:8a:60:be:34:46:6c:08:2d:d2:ab:ae:8a:23:14:8c:bf:2e:
d0:24:e6:82:b3:b2:cb:4f:65:9d:d0:fd:27:eb:a2:85:cf:dd:
53:cb:50:b0:75:25:bd:6e:74:7d:16:57:b0:f9:e5:b5:c3:18:
6e:69:8c:bb:fb:6f:67:9b:d0:a0:62:68:4c:e8:62:ff:0a:4b:
aa:ed:13:19:2a:11:b1:9d:e6:31:20:cd:85:f2:42:74:04:0e:
bf:ee:90:4f:95:d4:d1:9d:07:2d:57:da:d2:4e:fa:17:4c:bc:
6e:51:74:dd:29:f3:20:c8:95:fa:30:bd:f1:c0:3b:13:18:70:
f4:7f:63:cf:44:27:a6:cb:47:5e:c7:21:3f:c6:9e:17:9d:79:
6f:f1:9f:4f:6e:54:ee:07:79:78:48:08:34:70:2b:73:da:9e:
09:07:7f:9a:87:86:4e:75:ea:e9:9e:a6:f7:05:7d:ce:ba:52:
f9:63:e7:68:a4:89:62:b0:9d:84:65:02:24:98:9c:82:b6:44:
74:5b:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:31:56 2025 by rpki-client