Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
File: F693F2689CB811EB97F77E14C4F9AE02.roa (raw, json)
Hash identifier: /f5dzKwWa8mvOs/cB+px+vSnnT+vivJkjy65k2sS3ug=
Subject key identifier: 5E:6C:A6:53:7F:57:F4:0F:79:FB:EA:1F:81:18:46:F5:69:C6:AC:EA
Certificate issuer: /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial: 1385
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
Signing time: Tue 20 Feb 2024 17:55:19 +0000
ROA not before: Tue 20 Feb 2024 17:55:19 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 9443
IP address blocks: 139.216.0.0/16 maxlen: 16
139.218.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4997 (0x1385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Validity
Not Before: Feb 20 17:55:19 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d4e786-7921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:72:b9:fe:4e:4b:30:0e:85:22:b8:0f:21:
27:8f:41:c3:70:5e:7f:7a:76:ed:ab:7b:8d:0c:98:
b8:6b:64:0c:f9:f8:a4:b8:f3:78:cc:98:25:c2:77:
c3:d1:0d:a0:80:bc:fe:ce:5a:67:89:24:dc:0d:a2:
53:bb:5a:41:ff:55:43:18:1c:27:d1:97:d1:0c:28:
5d:9d:9c:12:ba:6e:96:d3:ff:a4:4c:f2:a6:30:e3:
28:19:af:82:55:d9:77:6c:e4:1b:f5:72:f8:d1:e1:
82:d4:82:1a:f5:b3:49:b2:7c:f7:7f:6e:9d:25:76:
ee:5c:82:4e:da:5e:95:56:b6:1d:80:3c:85:28:49:
14:46:0d:5f:5d:c7:c3:f6:af:5a:49:d8:90:29:c4:
d8:87:3c:fe:4e:a5:5e:74:00:ef:bc:d6:2d:0e:17:
1c:52:72:20:ba:88:f0:79:e2:17:c0:e9:46:7f:f6:
78:81:7f:ff:88:15:f5:ef:ac:2f:b5:3a:2c:04:56:
11:eb:c3:0c:0e:92:67:7c:1c:df:24:ff:0a:c9:99:
b4:d3:42:dd:6d:05:27:64:5c:4d:95:fb:43:20:c4:
c0:42:0f:09:8c:19:be:ac:1b:61:9b:56:f1:ec:79:
1c:50:66:14:36:3f:18:2a:20:f3:d2:1a:31:c3:be:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:A6:53:7F:57:F4:0F:79:FB:EA:1F:81:18:46:F5:69:C6:AC:EA
X509v3 Authority Key Identifier:
keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.216.0.0/16
139.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:8f:42:b1:54:09:c8:0f:b3:2d:2b:6b:06:a3:79:98:17:41:
de:67:a6:c5:81:cc:b0:83:94:f2:6f:cc:84:89:92:f7:ed:33:
7c:6a:3e:ec:f6:c0:aa:2f:50:c6:ae:9a:9b:a7:b8:e5:a3:b3:
6b:e6:3a:0c:76:00:a1:a5:4d:88:39:56:bb:a6:c0:65:d4:74:
7a:e2:f9:9e:28:b1:5a:7e:1a:e2:82:9e:f9:9c:97:81:63:ee:
ce:cb:93:a4:58:4a:ae:b3:cb:47:40:e4:af:0f:a8:77:c4:dc:
c6:8a:40:aa:44:8d:e2:9d:fe:b9:91:33:d2:a8:cb:df:1c:9f:
4a:b8:71:2b:54:ef:68:44:41:9d:3a:5d:9b:c5:0c:2d:e2:cf:
71:00:c1:ba:1b:b4:31:c5:7e:85:01:e8:fe:f7:96:86:01:5f:
f1:a5:42:2a:38:34:b2:cf:0c:c6:10:9d:25:b1:7c:12:4f:a1:
bc:62:6b:cf:bd:4b:93:4e:e5:18:e2:f2:a1:03:be:7d:8a:e5:
28:34:44:70:11:69:7b:74:2d:45:82:c0:94:fe:28:c7:97:50:
95:7f:1f:cf:f8:58:49:3b:3f:fe:aa:19:ab:44:84:93:1e:55:
db:aa:d2:98:60:24:33:fc:a6:0d:1d:db:88:69:ed:6d:6d:ef:
6b:0a:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:24:16 2025 by rpki-client