Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa
File: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (raw, json)
Hash identifier: Q72iVEgncsp2lLSVgYTmWchv3C8JihagPip5Niim/gg=
Subject key identifier: 0D:E3:78:77:AA:54:AB:02:AC:9E:0F:84:2F:14:38:06:B7:98:36:36
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 062E
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa
Signing time: Wed 24 Jul 2024 23:41:45 +0000
ROA not before: Wed 24 Jul 2024 23:41:45 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 63593
IP address blocks: 129.227.17.0/24 maxlen: 24
129.227.18.0/24 maxlen: 24
129.227.19.0/24 maxlen: 24
129.227.29.0/24 maxlen: 24
129.227.30.0/24 maxlen: 24
129.227.31.0/24 maxlen: 24
129.227.192.0/24 maxlen: 24
129.227.193.0/24 maxlen: 24
129.227.194.0/23 maxlen: 24
156.59.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Jul 24 23:41:45 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a19139-ff30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:ae:c8:83:e1:7f:96:d3:79:17:db:dc:25:
f6:c2:11:df:44:fd:09:50:27:87:1a:7f:48:5e:8a:
a3:62:77:7d:2c:97:e6:9a:37:79:76:7b:d4:82:49:
d2:ba:28:b5:04:4c:73:65:f2:57:90:42:ba:28:bd:
ee:2d:70:34:1e:69:d7:41:8b:c7:98:bc:dd:49:36:
89:0f:2d:52:fa:37:97:86:1b:eb:f4:a7:b0:19:2c:
56:ee:fd:bf:60:5c:bc:9f:03:7b:78:04:d0:0e:c3:
e9:c6:00:3a:de:a8:70:6a:7f:4c:dc:77:04:35:b4:
dd:66:18:51:37:81:e0:a1:86:86:99:76:d1:c7:25:
0c:fe:fa:bc:a0:44:f4:30:0b:fe:a1:12:01:ee:88:
fd:d6:45:06:b9:a9:9b:21:bb:6d:8b:13:a3:7e:0c:
5d:2e:ff:71:a4:4b:27:f9:fe:dc:c0:c0:9d:27:e2:
e1:d0:99:35:af:2d:51:c7:3b:05:e3:ef:49:f4:d1:
c1:c5:19:02:17:65:8c:7e:9e:03:34:02:89:a7:20:
08:95:e3:cb:e7:70:34:c9:9a:7e:ac:75:36:df:32:
0e:53:82:d2:b5:db:9e:c4:46:6e:ee:1a:f4:1a:67:
36:80:e9:10:42:d2:34:21:1b:a4:9b:73:c3:dc:61:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E3:78:77:AA:54:AB:02:AC:9E:0F:84:2F:14:38:06:B7:98:36:36
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.227.17.0-129.227.19.255
129.227.29.0-129.227.31.255
129.227.192.0/22
156.59.216.0/24
Signature Algorithm: sha256WithRSAEncryption
07:59:66:d4:bc:b3:8a:51:02:b7:99:ba:f8:02:98:0f:fa:22:
50:b0:46:f6:3d:78:ac:6b:e3:b4:9c:1c:4c:e3:b0:87:cd:16:
1e:0d:ae:e4:77:53:ae:4d:d4:6f:a2:9d:80:e5:0e:00:90:97:
69:1c:b7:81:04:22:1f:40:b5:22:c0:71:bc:1e:21:32:df:74:
a8:fc:33:1a:90:c7:ee:1b:c1:92:e2:8b:0e:3b:5b:f6:b5:ea:
d1:e6:31:4c:6b:23:1c:2d:c7:51:1e:5d:1a:ff:aa:2e:c3:33:
40:67:83:9b:c5:39:79:62:4f:f8:2b:4c:36:b1:7b:f2:78:1f:
1c:57:39:ea:58:45:ab:b7:a3:8d:f5:7c:64:41:1c:ee:89:c2:
c7:25:c5:a2:fe:c6:38:90:b5:3b:b4:7c:69:ee:13:d9:a8:54:
a0:85:3c:00:5a:56:d4:5e:16:d1:f4:80:aa:53:cd:ec:06:11:
4b:4a:b4:5a:04:47:40:a2:58:54:63:a3:9b:88:47:c6:ee:71:
6e:3d:f1:5e:36:07:a3:0c:e7:05:3d:f7:71:30:24:bc:87:8f:
cb:ee:b6:b8:b4:67:8c:83:02:6c:2e:0a:5f:0c:f1:c7:e7:6a:
ae:0b:07:57:ae:fb:2d:ca:f6:9e:74:e5:44:6e:bd:78:ce:7b:
39:1a:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:19 2025 by rpki-client