Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa
File: E248BDA63C5211EF94184A20C4F9AE02.roa (raw, json)
Hash identifier: Gw3lyprk2wHQfVI8gyQDjj5muddHnRtxMvJMvAySrdk=
Subject key identifier: 61:FF:4F:1E:A3:CE:EF:B5:54:D3:3C:8B:57:40:6A:B4:E9:6C:57:BA
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 0373
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa
Signing time: Sun 07 Jul 2024 11:20:15 +0000
ROA not before: Sun 07 Jul 2024 11:20:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136454
IP address blocks: 116.204.241.0/24 maxlen: 24
2400:e640:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: Jul 7 11:20:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668a79ef-e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:a1:72:69:a7:55:59:b4:45:8d:d2:83:6f:
0e:03:ab:fd:5d:5e:24:41:f0:0f:75:ea:54:7d:47:
3b:09:1d:17:38:e3:fd:b4:e8:ec:45:ae:a4:9f:9d:
91:6e:03:20:08:24:8b:84:84:8e:28:36:44:c4:0e:
20:2a:f6:5f:16:c5:a2:9c:e1:51:38:7e:eb:df:7a:
54:1d:51:af:1a:e2:7d:26:f3:e7:b5:9e:3e:9d:81:
ea:56:29:07:3b:71:2c:b1:12:0b:28:03:85:11:d7:
0f:24:b2:24:06:3a:30:cc:b6:a1:63:22:2e:b4:eb:
f8:6f:92:62:98:06:03:dc:2e:84:f3:b3:39:ff:e7:
95:ef:d7:8d:51:5f:d0:c2:5e:57:9c:33:08:ee:d8:
b8:e7:64:f8:a1:e9:ef:28:e3:b7:ac:90:d3:7b:59:
fa:d1:0c:82:a1:b7:6a:8e:6e:7d:4a:74:c9:bf:f2:
02:21:b3:c2:79:5b:e2:89:ab:38:66:1b:53:70:85:
5a:37:8c:a4:88:64:3c:a3:30:06:d7:2c:4b:77:1d:
02:90:07:3a:2f:19:7e:60:9a:29:94:61:64:86:8c:
52:67:2a:55:2d:f5:9f:e9:82:ca:77:62:58:72:a4:
04:b6:d6:3a:c1:40:26:80:c8:dc:e9:ee:74:66:f1:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FF:4F:1E:A3:CE:EF:B5:54:D3:3C:8B:57:40:6A:B4:E9:6C:57:BA
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.241.0/24
IPv6:
2400:e640:1000::/36
Signature Algorithm: sha256WithRSAEncryption
59:b2:71:59:98:c8:06:ae:a0:59:78:d8:cb:1b:e9:9d:4c:93:
fe:7c:18:3a:49:52:0c:4e:bc:78:03:87:0d:f8:e6:70:a1:70:
d1:43:28:20:fc:c0:81:b4:08:29:55:35:4a:6d:2f:b8:f4:40:
07:2e:49:1b:67:93:3b:50:64:ab:7a:97:0a:62:1c:54:4e:1b:
d3:81:71:62:f6:b7:dd:6a:67:d8:14:c2:83:09:46:0b:25:4b:
4c:0e:ce:15:b6:b1:af:1b:c1:91:09:50:f4:e4:d6:a6:b2:ed:
6f:a7:22:a4:8d:39:b7:b6:c0:f2:a0:77:54:cb:fa:c3:96:fb:
32:ec:13:33:20:81:65:82:2e:84:d3:f6:4c:47:42:48:2f:f0:
3d:ea:ae:03:33:2e:3d:0e:0f:bf:c4:95:78:e2:49:de:b8:d2:
75:50:84:56:d7:89:c8:b5:01:5b:a7:7d:56:a4:8c:4a:0a:97:
cb:10:33:e7:ed:08:a9:bb:ce:65:fd:4f:d4:cd:83:ad:f5:b1:
be:31:b9:92:56:b4:e2:22:c8:a2:6c:98:31:79:7b:c6:9c:74:
b4:3f:82:6b:e8:fe:03:05:f8:ff:52:a6:6a:64:27:3e:d4:39:
ff:74:55:bb:9f:67:bd:19:c0:db:6c:8c:ff:1c:28:81:c4:2c:
87:55:b9:6e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG
NjExOUYzMEMwHhcNMjQwNzA3MTEyMDE1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjhhNzllZi1lN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3xOhcmmnVVm0RY3Sg28OA6v9XV4kQfAPdepUfUc7CR0XOOP9tOjsRa6kn52R
bgMgCCSLhISOKDZExA4gKvZfFsWinOFROH7r33pUHVGvGuJ9JvPntZ4+nYHqVikH
O3EssRILKAOFEdcPJLIkBjowzLahYyIutOv4b5JimAYD3C6E87M5/+eV79eNUV/Q
wl5XnDMI7ti452T4oenvKOO3rJDTe1n60QyCobdqjm59SnTJv/ICIbPCeVviias4
ZhtTcIVaN4ykiGQ8ozAG1yxLdx0CkAc6Lxl+YJoplGFkhoxSZypVLfWf6YLKd2JY
cqQEttY6wUAmgMjc6e50ZvGCKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGH/Tx6j
zu+1VNM8i1dAarTpbFe6MB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0
MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvRTI0OEJEQTYz
QzUyMTFFRjk0MTg0QTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E
IDAeMAwEAgABMAYDBAB0zPEwDgQCAAIwCAMGBCQA5kAQMA0GCSqGSIb3DQEBCwUA
A4IBAQBZsnFZmMgGrqBZeNjLG+mdTJP+fBg6SVIMTrx4A4cN+OZwoXDRQygg/MCB
tAgpVTVKbS+49EAHLkkbZ5M7UGSrepcKYhxUThvTgXFi9rfdamfYFMKDCUYLJUtM
Ds4VtrGvG8GRCVD05Namsu1vpyKkjTm3tsDyoHdUy/rDlvsy7BMzIIFlgi6E0/ZM
R0JIL/A96q4DMy49Dg+/xJV44kneuNJ1UIRW14nItQFbp31WpIxKCpfLEDPn7Qip
u85l/U/UzYOt9bG+MbmSVrTiIsiibJgxeXvGnHS0P4Jr6P4DBfj/UqZqZCc+1Dn/
dFW7n2e9GcDbbIz/HCiBxCyHVblu
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:54 2025 by rpki-client