Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/E79C4936420D11EC89D7C163C4F9AE02.roa
File: E79C4936420D11EC89D7C163C4F9AE02.roa (raw, json)
Hash identifier: GZEHbZPKjeuR0ecqQm5rnrjDlAtA7+UPoWqGJrdoIkc=
Subject key identifier: 75:BD:28:59:13:69:1A:22:6E:59:68:6A:9E:38:FF:37:B9:18:62:2E
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0EC0
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/E79C4936420D11EC89D7C163C4F9AE02.roa
Signing time: Tue 14 Jan 2025 18:16:27 +0000
ROA not before: Tue 14 Jan 2025 18:16:27 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 56311
IP address blocks: 210.57.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3776 (0xec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:16:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6786a9fb-e0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2c:ba:ed:96:b1:ce:89:78:b6:4d:39:ff:a3:
02:20:d1:83:10:8f:dc:4e:87:d5:c4:20:3e:04:90:
13:a3:e9:49:bd:e3:17:cc:4d:1e:38:6c:51:44:ff:
54:60:d3:1c:87:d0:fe:a7:1a:89:60:96:5c:b9:8d:
29:d8:1b:0d:be:24:8c:4e:62:24:bc:39:66:7a:5c:
31:a0:31:8b:f0:56:a4:49:5e:2d:30:9e:3a:19:0f:
47:38:3d:74:af:69:51:6c:ea:58:7d:5f:59:17:99:
75:98:73:f1:80:5b:14:1a:1d:84:e1:1f:f3:9b:42:
46:27:0d:91:da:52:ef:ae:f7:af:b6:b7:39:cf:cc:
65:ab:44:c0:26:59:80:42:96:d3:53:1a:7f:40:fa:
ec:53:38:90:44:bf:a2:a9:c8:bd:2b:4b:f2:a9:ac:
72:b4:1f:68:f6:fa:02:d9:cd:ba:7b:54:8c:f0:1b:
3d:6f:76:d1:8e:93:bc:18:13:0c:b2:5b:f0:f6:ec:
f4:91:8d:32:f4:b2:15:2a:8b:82:54:d9:b3:38:e9:
9e:24:06:1c:82:67:36:bc:eb:c0:3a:07:5c:07:a2:
21:51:1c:69:a5:04:3d:7a:10:c8:d1:68:61:3a:8a:
56:f2:bb:67:63:c8:45:3a:f5:93:d4:72:42:58:64:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BD:28:59:13:69:1A:22:6E:59:68:6A:9E:38:FF:37:B9:18:62:2E
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/E79C4936420D11EC89D7C163C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.57.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4d:b8:17:a4:7a:79:67:e9:28:89:55:1d:a2:58:89:25:ca:
ab:8b:4d:4b:eb:97:b8:28:2d:82:ce:f8:d6:da:0c:0d:1c:bc:
34:93:f3:cb:eb:a4:e6:c7:a5:ba:34:00:85:ea:32:df:02:38:
38:77:0f:e3:c7:25:47:80:5d:fa:90:6e:8a:c6:f6:54:95:00:
bb:f0:e4:8c:de:f5:cd:64:a4:ce:65:f8:07:15:4e:e0:1b:a4:
43:87:f2:50:3c:0b:1a:2c:20:b0:c6:4c:27:c2:c1:a7:09:35:
66:34:85:9d:70:d1:ca:df:91:c6:06:8b:6a:66:d7:f7:71:9a:
4b:7d:03:d6:9f:d5:76:bf:c4:7e:d3:8b:6b:bb:d2:f7:6f:b2:
73:61:c5:ee:0d:f0:de:eb:70:6a:5c:f0:3c:b6:64:d8:2e:3a:
0f:5f:14:38:e8:66:d8:3b:ee:f4:7c:26:08:23:2e:4a:d4:72:
89:9d:7c:3a:55:00:f9:4b:aa:a0:18:7b:63:39:4a:91:e2:a6:
51:e5:9d:1c:fa:2c:18:06:4e:80:b6:2f:ea:bf:e8:57:89:9d:
25:8b:f4:e9:a7:ce:f9:62:a4:53:ce:b5:89:e9:08:19:cd:07:
0e:23:df:0d:85:43:6b:96:e7:80:f9:af:ca:1a:4d:04:13:0c:
fd:93:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:25 2025 by rpki-client