Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/909AA4DC567011EFA451BD7CC4F9AE02.roa
File: 909AA4DC567011EFA451BD7CC4F9AE02.roa (raw, json)
Hash identifier: eNA7hmO0iaDh6B8QriE+uJJoAJhe22m7Y0RORTwFmBQ=
Subject key identifier: B1:A4:B5:4A:94:EA:B2:B1:3C:DD:E1:E5:37:61:FE:D2:8A:1C:A7:4B
Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial: 32C9
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/909AA4DC567011EFA451BD7CC4F9AE02.roa
Signing time: Fri 20 Dec 2024 15:51:58 +0000
ROA not before: Fri 20 Dec 2024 15:51:58 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 59211
IP address blocks: 116.251.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13001 (0x32c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Validity
Not Before: Dec 20 15:51:58 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6765929e-8666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:d6:af:68:f2:07:2a:6d:c5:d4:a7:47:6f:
84:cd:80:2b:3b:f8:09:37:14:60:be:03:b2:c7:ce:
85:c3:c0:6f:29:a4:19:3d:27:5a:23:5b:1d:62:ad:
53:d6:83:2b:ac:2e:56:16:99:21:44:4b:6b:49:e1:
44:dc:4d:d6:72:71:d0:0e:0b:36:64:55:83:2e:2c:
17:3e:e3:d5:20:23:b8:70:3c:c5:18:be:07:19:bc:
a5:eb:40:36:38:83:1b:1f:4a:2e:82:8c:a1:cb:ad:
90:f7:db:51:66:a3:dd:8b:0c:62:24:83:36:2c:11:
09:70:01:97:26:34:9a:45:04:f5:1a:fb:d5:55:ea:
b3:3d:3b:46:f4:70:56:07:8c:e2:dd:cb:2d:8b:d1:
04:76:c5:18:c4:9e:db:bb:f3:33:13:4b:35:ff:f7:
32:01:c1:53:fc:8a:65:c6:fd:9e:12:39:60:b6:1f:
db:4f:2e:64:25:a1:bc:c0:12:9e:7d:a9:25:0f:9a:
7b:78:b7:49:f2:b0:51:ec:a6:ed:82:ca:d7:27:41:
3d:b2:e5:54:0e:8e:a6:bd:0d:fe:c2:e2:d4:e9:7b:
6d:85:a6:5e:3f:6f:1f:6f:27:50:ca:9e:f1:59:02:
8a:08:93:e0:2d:e3:6d:ce:68:d2:aa:08:d0:fa:9a:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:B5:4A:94:EA:B2:B1:3C:DD:E1:E5:37:61:FE:D2:8A:1C:A7:4B
X509v3 Authority Key Identifier:
keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/909AA4DC567011EFA451BD7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.251.216.0/21
Signature Algorithm: sha256WithRSAEncryption
71:45:d5:ae:20:1b:82:bd:c3:3e:7e:ce:a8:7e:b2:f4:99:a7:
c8:a2:34:81:b5:3e:cc:a3:2b:1f:ed:2c:33:48:fc:e9:f7:a3:
89:5b:2a:3c:7e:65:26:6c:7c:01:33:6f:90:86:6f:22:8f:ec:
67:f4:c2:d8:3f:29:aa:b3:84:0f:89:91:dd:ab:bb:91:6b:29:
17:a0:d0:22:bd:38:78:de:2a:f8:84:5b:bd:5a:a7:47:b3:f2:
8a:58:67:62:91:19:34:f0:4f:3f:09:8b:5e:80:c6:f2:00:32:
e1:c4:da:f3:07:b1:6e:c9:28:8d:27:ab:d8:26:de:43:5b:a1:
54:54:ae:9c:b0:42:02:92:eb:c1:46:78:2b:fe:6a:54:94:63:
be:7b:61:01:ed:cb:40:8d:5c:6b:30:e6:2f:0f:bb:3e:ab:d3:
85:d7:39:0a:28:49:de:a2:ce:c4:f8:3e:14:7c:2e:5c:23:63:
fa:a3:71:b0:34:36:54:df:21:1f:d7:a8:51:75:89:ce:06:bd:
4a:b9:08:ed:86:6c:36:c3:e2:e1:94:8b:a1:a4:af:a1:19:45:
9b:c1:ae:ca:a6:19:8e:f2:1c:b4:9e:36:fc:63:f6:4a:ba:d4:
27:be:4d:8c:d5:ae:4a:da:40:0c:45:ee:df:d6:54:92:8f:ae:
81:51:10:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:52:41 2025 by rpki-client