Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa
File: B5960F8CB03111EEA45DE91DC4F9AE02.roa (raw, json)
Hash identifier: XibMG3mDhOsSrcuhK/7yeFZ9PLD/xT2M/e0VDdqjP5E=
Subject key identifier: DC:12:65:3D:12:CB:3A:F3:02:CF:4E:6D:F5:70:90:6C:0F:ED:7E:25
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 04C7
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa
Signing time: Tue 24 Sep 2024 14:15:12 +0000
ROA not before: Tue 24 Sep 2024 14:15:12 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 22822
IP address blocks: 111.119.0.0/22 maxlen: 22
111.119.2.0/23 maxlen: 24
111.119.4.0/22 maxlen: 22
111.119.5.0/24 maxlen: 24
111.119.6.0/24 maxlen: 24
111.119.7.0/24 maxlen: 24
111.119.16.0/23 maxlen: 23
111.119.16.0/24 maxlen: 24
111.119.17.0/24 maxlen: 24
111.119.20.0/23 maxlen: 23
111.119.20.0/24 maxlen: 24
111.119.21.0/24 maxlen: 24
111.119.22.0/23 maxlen: 23
111.119.22.0/24 maxlen: 24
111.119.23.0/24 maxlen: 24
111.119.24.0/21 maxlen: 24
117.121.248.0/21 maxlen: 24
203.9.176.0/21 maxlen: 24
203.77.184.0/22 maxlen: 22
203.77.184.0/24 maxlen: 24
203.77.185.0/24 maxlen: 24
203.77.186.0/24 maxlen: 24
203.77.187.0/24 maxlen: 24
203.77.188.0/22 maxlen: 22
203.77.188.0/23 maxlen: 24
203.77.190.0/24 maxlen: 24
203.77.191.0/24 maxlen: 24
2402:6800::/32 maxlen: 32
2402:6800:712::/48 maxlen: 48
2402:6800:720::/48 maxlen: 48
2402:6800:730::/48 maxlen: 48
2402:6800:780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223 (0x4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Sep 24 14:15:12 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66f2c96f-fbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:f9:9f:aa:97:ea:41:c8:41:e1:8b:e8:e6:
fa:23:d4:dd:0c:2a:8c:6f:69:c6:16:7a:1d:c3:c2:
59:9b:fe:ab:b2:e6:49:77:db:5f:08:84:32:f4:b4:
51:bc:dd:25:d7:bc:45:3b:fe:40:11:b1:be:62:6c:
54:d7:ba:29:ed:4e:5e:d4:68:e8:2e:81:0e:fc:63:
8b:4d:e0:58:69:7a:17:5d:fa:18:34:3d:aa:a6:f4:
4f:e4:77:7c:91:29:9c:0a:0b:df:a9:c9:21:d2:7a:
ab:e9:78:25:8e:0d:80:55:e7:d5:b1:37:a6:3c:de:
b2:f5:2d:16:69:a3:a3:8d:20:b5:30:ab:17:32:23:
07:a9:59:53:b1:bd:f6:09:b8:02:43:d0:9a:42:55:
5e:0c:2f:70:fd:e9:89:52:e6:39:06:cd:68:cb:99:
a8:db:95:70:47:6f:36:63:2a:6a:ad:be:f9:b3:0c:
74:cd:95:dc:4c:da:7c:4c:53:a7:0f:2f:67:2b:71:
57:16:60:a6:09:4e:bf:32:9b:d5:cd:4f:e8:95:ce:
4e:53:56:2d:ba:5d:ea:53:ef:8b:41:c9:92:42:11:
18:2d:4c:1d:90:9f:e3:be:85:ea:0e:bb:03:81:c8:
5c:0c:fe:b2:ad:38:eb:e5:46:9b:6d:a6:55:0a:d0:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:12:65:3D:12:CB:3A:F3:02:CF:4E:6D:F5:70:90:6C:0F:ED:7E:25
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.119.0.0/21
111.119.16.0/23
111.119.20.0-111.119.31.255
117.121.248.0/21
203.9.176.0/21
203.77.184.0/21
IPv6:
2402:6800::/32
Signature Algorithm: sha256WithRSAEncryption
35:b1:6c:d5:98:46:4b:a1:73:b4:6f:07:f5:b6:60:be:38:9b:
52:f5:d5:07:e1:67:43:f8:a2:6d:b3:ee:e2:f5:d6:95:d0:19:
23:16:4b:f5:a4:05:e9:50:ff:9e:44:01:7b:ce:2d:10:0c:45:
92:78:af:80:b3:58:c4:0b:2b:87:31:44:f7:75:83:5b:c8:2f:
11:03:0e:cb:33:dd:94:42:24:96:29:71:04:a3:b7:79:3a:e4:
05:fb:4b:4a:61:19:ad:73:cf:46:ce:cf:e8:95:a7:c5:0c:43:
59:97:83:1d:2e:47:0b:6b:db:6e:48:c8:0b:77:7d:48:e8:7d:
21:20:54:49:58:b2:b1:13:0e:c3:60:87:fd:e7:bd:16:1b:cd:
ba:da:89:43:08:73:02:9b:52:d8:e2:73:90:12:0a:22:c2:b8:
ec:ee:1d:0e:b8:7d:bb:4e:79:0e:44:86:26:bc:99:77:96:f7:
64:ac:22:9d:f3:64:3d:26:0f:05:7d:78:ec:b4:80:d9:42:67:
a0:7b:3f:f3:d8:75:68:45:7b:05:53:25:ba:d1:a0:b8:13:1b:
05:b2:e6:c0:34:28:83:7d:87:5e:d5:fe:a3:0e:e7:83:f3:67:
2e:b8:c5:4b:74:4d:03:21:d2:97:44:2f:5b:1f:b5:0e:9a:ec:
59:0f:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:49 2025 by rpki-client