Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
File: 61A65BF2C35011EE95366E18C4F9AE02.roa (raw, json)
Hash identifier: lJX0Rj0D2pXCWqSqPGBLqRXobNJsOmj1xve2tbokkqo=
Subject key identifier: CF:79:49:80:CA:A0:AB:F5:E6:6D:B5:2D:4C:53:7C:C0:D5:4F:1E:A1
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 3436
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
Signing time: Tue 30 Jul 2024 14:50:18 +0000
ROA not before: Tue 30 Jul 2024 14:50:18 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 38228
IP address blocks: 210.246.94.0/24 maxlen: 24
210.246.95.0/24 maxlen: 24
2403:c000:1401::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13366 (0x3436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0
Validity
Not Before: Jul 30 14:50:18 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a8fdaa-9f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:b6:71:e2:66:b3:40:36:54:f8:c2:a8:35:
79:23:25:72:6d:31:b0:46:12:3a:6a:30:22:f4:19:
8f:ac:d9:dd:93:e2:73:e5:2e:04:2b:ea:08:4d:64:
7c:4d:04:a0:b4:42:d8:a2:de:3d:7b:79:cb:bd:59:
32:8c:28:88:dc:30:8a:71:16:95:64:32:94:59:14:
b5:a1:a4:98:86:b5:a3:ca:f8:9e:c4:0b:89:18:82:
63:31:73:41:41:be:2e:72:8b:7f:2f:ae:f5:81:4c:
13:cd:0f:92:76:cd:9a:2e:d6:f7:13:94:d7:50:c4:
5d:5c:da:b3:5a:e6:8a:78:f4:55:0a:1c:8f:37:9c:
67:a0:d0:5d:e6:8c:05:37:2e:12:06:8d:09:78:3d:
ee:bf:9c:f0:9f:cc:a5:eb:c0:66:f5:96:a2:2e:3f:
3d:06:b9:72:15:4a:ec:e2:e0:a6:2f:84:74:95:fa:
d6:b7:1d:fc:47:ae:02:0d:46:03:8b:c4:db:4b:ad:
05:95:58:d8:2c:43:18:56:ea:1c:ef:b6:ca:c6:c2:
aa:93:82:05:98:82:c7:a1:5b:a8:0e:c3:ea:9e:51:
ec:14:13:17:8f:c0:2c:d0:31:03:cf:90:12:c3:23:
07:a0:c5:37:75:bf:d8:cd:b7:d3:63:66:8a:b5:9d:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:49:80:CA:A0:AB:F5:E6:6D:B5:2D:4C:53:7C:C0:D5:4F:1E:A1
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.246.94.0/23
IPv6:
2403:c000:1401::/48
Signature Algorithm: sha256WithRSAEncryption
20:84:83:2d:e0:ce:1c:ab:ed:4c:fb:e7:6a:2d:13:5e:8c:96:
6d:ac:bc:3f:58:d6:c3:9d:be:c0:13:22:29:24:6e:b5:f6:1c:
f9:57:a5:6c:36:67:29:0e:6c:d8:e4:00:f3:75:85:05:2f:e7:
39:77:0d:76:8d:ea:3e:64:cf:c3:63:b7:57:99:89:f8:1a:47:
4a:f2:07:a2:31:9d:3f:31:9f:6f:5d:e1:ef:1f:f9:c9:85:47:
69:d9:ac:9b:e7:72:7f:09:f9:4a:57:48:81:16:88:d9:cb:6e:
a9:8a:18:12:43:04:9b:7d:a6:0c:7b:fa:f3:9b:a6:11:f8:57:
a8:b9:10:fd:a2:2f:e0:5e:9d:48:ae:4c:f4:88:18:ef:89:05:
e4:2a:d7:d4:48:da:e2:d9:11:30:e7:44:f6:9d:9f:05:b5:13:
16:08:e9:97:b3:06:8f:95:51:d4:96:ee:f0:17:6c:43:69:52:
34:5f:1c:78:a6:7b:33:bf:d0:b6:bc:51:d4:09:5c:bc:26:63:
6c:5f:a5:cb:ec:46:76:ef:03:f6:c8:81:31:cd:bd:26:1f:f4:
1c:30:24:63:3e:3c:97:eb:cf:a1:a0:00:ae:49:52:65:6c:78:
53:82:c2:b2:a8:f7:d1:90:73:f4:e9:5a:3b:ed:7c:53:e7:f3:
96:81:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:29:32 2025 by rpki-client