Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/B9FF8C12120A11EEBF7A0D72C4F9AE02.roa
File: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (raw, json)
Hash identifier: /cYlUkny1IQKuDP/jKnNDzmTJRWVUTKZHhg+6p55ztY=
Subject key identifier: D4:49:AB:22:05:22:28:AA:04:0B:47:6D:45:A4:6D:4D:7F:85:FF:C6
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 178C
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/B9FF8C12120A11EEBF7A0D72C4F9AE02.roa
Signing time: Tue 20 Feb 2024 17:55:20 +0000
ROA not before: Tue 20 Feb 2024 17:55:20 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 10113
IP address blocks: 27.0.64.0/19 maxlen: 19
202.62.144.0/24 maxlen: 24
202.68.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6028 (0x178c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 20 17:55:20 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d4e787-e489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:57:db:3b:9a:cc:c9:8d:25:f3:5f:90:31:
c9:9f:81:4e:b6:69:55:73:6b:e8:eb:54:34:a2:0e:
4d:06:95:b9:23:84:df:11:e1:39:bb:dd:9f:a9:20:
96:1f:b3:ec:80:f9:3e:0b:96:58:62:f8:1d:b4:e1:
a9:99:e0:c2:2c:0e:e9:d9:fb:c6:bc:61:0c:1e:2a:
b4:6b:d0:ef:22:c3:8c:94:df:13:06:5b:c3:71:48:
c0:b9:17:96:5f:cc:37:29:ad:56:66:69:f1:e4:3e:
cd:6a:27:f7:46:00:db:6a:f6:92:36:ae:d7:b2:a8:
9c:5f:a9:65:f8:b0:f2:4c:c9:89:72:5e:a6:85:86:
cd:4e:be:d6:9d:cf:42:4a:05:a1:4b:dc:a9:a2:f6:
1a:df:71:ca:7d:c0:9a:bc:37:db:8d:9f:bd:51:ca:
d8:e9:41:f2:6b:8e:03:f9:e0:fe:81:18:9c:88:7f:
b7:9c:1f:9d:42:4f:e4:30:c3:02:63:25:4e:13:24:
3a:c1:4c:97:43:c9:cd:8c:e6:cd:f5:c5:6c:c2:07:
31:62:e3:e5:7e:0a:0b:7d:2b:49:87:1c:39:8a:ec:
91:b1:d3:cb:79:4a:bc:90:b4:b8:27:5e:3a:f5:c5:
45:bf:10:be:b8:f3:69:c3:fb:5f:20:40:49:0a:16:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:AB:22:05:22:28:AA:04:0B:47:6D:45:A4:6D:4D:7F:85:FF:C6
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/B9FF8C12120A11EEBF7A0D72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.64.0/19
202.62.144.0/24
202.68.96.0/19
Signature Algorithm: sha256WithRSAEncryption
92:98:95:4c:b8:ef:95:99:fd:7d:2b:9f:f1:8a:d3:f9:7e:4d:
23:d7:4a:8a:4f:d0:16:a9:e3:26:6a:15:84:df:3c:47:5d:90:
85:d4:3c:05:20:8f:b5:79:a0:b7:a8:ee:15:90:97:95:cd:9a:
b4:c2:1f:c9:5e:fc:5f:ad:eb:27:d0:e2:6b:ee:9f:b0:40:94:
d2:35:7c:95:95:ae:5e:ad:79:0d:2d:6f:d7:75:2f:3f:78:23:
50:27:73:dc:3e:23:f0:f5:e7:7f:66:e1:fd:2f:97:9f:2a:53:
4c:08:aa:b0:c6:e5:7d:9c:33:29:f1:92:05:ae:25:58:2a:a6:
c2:90:05:5d:af:9c:81:76:76:05:67:7f:79:8e:c5:64:aa:eb:
d3:f4:7b:17:1e:f9:e8:ef:08:83:11:71:a2:f3:ee:6e:60:9a:
5a:2f:71:bd:67:34:0f:d3:fa:83:b5:91:58:c8:9c:53:45:3d:
60:0d:83:29:2f:36:20:df:71:4c:be:1a:17:29:8d:32:95:33:
16:4f:d8:ee:2b:f6:7e:ba:c1:d9:a1:4b:a2:eb:7c:b6:f5:39:
93:24:58:ab:81:5c:be:7d:57:94:51:0c:7f:62:42:80:45:f4:
ca:a1:2d:44:81:29:12:ed:16:ac:e8:3c:e2:f3:dd:22:5a:9a:
c0:e5:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:08:24 2025 by rpki-client