Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/AF625B0680FA11EC96280855C4F9AE02.roa
File: AF625B0680FA11EC96280855C4F9AE02.roa (raw, json)
Hash identifier: E3B3g4VAEyLf5g5lxP3OkUQYcv0XXwClQf1bCMVwZF8=
Subject key identifier: 27:75:70:62:9A:E8:31:03:AF:C3:60:FB:CA:88:BD:D2:9B:2C:BA:73
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0B29
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/AF625B0680FA11EC96280855C4F9AE02.roa
Signing time: Tue 20 Feb 2024 19:48:14 +0000
ROA not before: Tue 20 Feb 2024 19:48:14 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 141731
IP address blocks: 113.212.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2857 (0xb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: Feb 20 19:48:14 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65d501fd-691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:57:90:8d:83:78:c3:4b:40:fc:f9:0f:bc:
29:ec:78:76:4d:c1:e1:c0:40:c3:fd:ae:6c:0f:15:
eb:f4:80:5f:50:9a:fd:d3:aa:c4:58:04:ff:af:3a:
e6:3d:61:45:31:ba:27:2e:70:a0:68:ef:c1:a1:1f:
b9:d7:af:a4:e9:e6:5a:3d:5b:60:7e:25:d5:87:16:
1d:05:db:b5:03:c4:a8:2a:97:3d:0a:db:77:d3:e6:
ff:ea:79:e5:f6:0a:97:89:a2:b7:8a:99:80:8e:2f:
c5:51:02:93:98:d6:6f:83:30:51:27:e4:9d:c1:81:
d4:67:ba:d2:7b:e4:f9:5a:2d:f2:f1:f2:9d:ad:92:
11:7c:ea:21:41:58:6b:d0:01:5b:2b:11:f6:33:44:
24:70:b9:64:3a:05:a1:63:93:98:59:e1:aa:0f:ad:
c0:3e:57:df:3f:11:ad:2f:98:b7:35:2a:b3:1b:9b:
90:59:3c:41:a6:9c:0b:e1:4d:39:7f:45:11:1a:e4:
c3:71:a4:d9:54:99:8b:be:ba:88:aa:64:b9:16:39:
6c:71:3a:b9:51:9a:9c:ed:d7:df:cd:4f:f9:e4:33:
91:65:5c:19:cd:28:8e:82:a6:de:1b:09:df:83:bd:
fd:d2:10:a7:43:7c:94:ff:cd:31:06:67:ac:0b:6d:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:75:70:62:9A:E8:31:03:AF:C3:60:FB:CA:88:BD:D2:9B:2C:BA:73
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/AF625B0680FA11EC96280855C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.212.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:23:cb:84:ed:ed:2e:fb:3b:95:41:06:0c:0d:84:ba:c6:26:
8b:c2:2c:fa:9b:8a:61:66:5f:77:96:46:d7:08:1c:fe:c3:a7:
a8:2c:6c:6e:3b:86:96:67:a1:89:eb:88:e8:16:ff:2a:ba:dc:
cc:23:dc:10:88:67:7b:3c:29:74:aa:e8:c8:96:74:26:a7:9f:
76:b8:92:3e:ba:cd:c9:43:74:95:82:16:d4:87:76:d3:0c:82:
15:56:6c:37:13:b1:65:72:6a:cf:cc:96:58:06:e2:6e:8f:92:
c9:0c:0a:44:92:64:b0:20:fc:cf:89:e9:a9:2a:11:09:6a:37:
6f:1e:cd:08:f1:d3:7e:6a:4c:54:82:32:bd:32:fb:91:f4:95:
05:b6:9b:84:67:f9:90:49:a7:21:3d:5f:be:67:d2:a1:fd:3d:
f2:32:04:d2:5b:37:a8:b1:b3:8c:11:9f:0f:33:d9:08:f7:fa:
7b:5d:77:5c:e0:90:6b:c6:05:87:92:5e:3e:ad:02:b7:42:e2:
01:5b:c7:3e:08:d0:2b:b3:2d:a6:84:53:f4:21:b1:44:15:61:
f6:99:b6:cf:fd:88:44:66:77:1c:de:3c:67:7a:01:45:1a:20:
ad:bf:ef:87:c3:9e:e2:df:9f:f2:f4:9e:b0:8e:09:4a:f9:ee:
21:ce:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:38 2025 by rpki-client