Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa
File: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (raw, json)
Hash identifier: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=
Subject key identifier: 3F:B1:BF:36:D2:02:5D:AA:06:FC:6B:7E:6A:AB:0D:69:B9:CB:F2:6B
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 02ED
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa
Signing time: Wed 27 Nov 2024 01:35:09 +0000
ROA not before: Wed 27 Nov 2024 01:35:09 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 45248
IP address blocks: 116.193.150.0/23 maxlen: 24
117.121.212.0/24 maxlen: 24
117.121.213.0/24 maxlen: 24
119.63.64.0/24 maxlen: 24
119.63.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A
Validity
Not Before: Nov 27 01:35:09 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6746774c-5d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b1:2c:30:5a:c0:01:02:22:1e:64:1d:44:d7:
dd:58:6d:70:cd:1b:d3:e5:d8:fd:31:15:56:10:37:
e6:41:c2:c0:36:16:f2:53:3b:1f:8d:40:e3:f1:1f:
80:ba:5a:4f:a6:5f:c0:16:5d:1d:e0:8e:b4:f2:b5:
25:5c:17:60:1c:98:af:71:de:f6:b4:10:e8:e2:6a:
27:c2:78:67:dc:71:c2:e6:d4:23:9f:83:5a:ec:9d:
8a:8b:5c:7b:45:7a:c7:18:2f:52:7c:45:64:ac:4e:
f9:0c:0b:0a:9f:3a:34:e3:aa:38:26:36:4c:a7:d6:
1a:45:bd:d1:82:39:8f:57:fc:04:61:a8:71:15:21:
01:f6:04:de:c1:45:93:c9:e3:8e:6d:04:1e:97:6e:
dd:c1:88:5e:a7:7d:2d:46:e0:56:9c:d5:2f:20:7d:
63:fc:2e:9a:43:af:6e:d0:c3:92:f9:0b:7e:9e:5a:
16:3d:e8:03:5c:ca:41:4d:5f:11:eb:67:71:97:28:
5b:45:96:04:48:23:9d:b1:47:b9:d2:5e:c3:fe:0a:
79:a7:cd:14:1e:3f:0e:91:d6:2c:a5:58:77:ec:e9:
77:52:f2:d6:03:c9:77:31:52:98:65:23:3b:14:d0:
5d:7a:78:55:62:3e:fe:80:19:6f:49:d5:c7:6e:81:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B1:BF:36:D2:02:5D:AA:06:FC:6B:7E:6A:AB:0D:69:B9:CB:F2:6B
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.193.150.0/23
117.121.212.0/23
119.63.64.0/24
119.63.71.0/24
Signature Algorithm: sha256WithRSAEncryption
94:15:18:35:65:2d:53:27:95:d7:8e:0c:13:4d:c7:d6:c7:b4:
3f:17:84:25:bc:e0:87:7b:76:56:3f:91:ab:33:35:ef:13:8a:
20:77:9c:4f:0e:fa:3b:0c:cc:8f:54:bb:e3:17:5b:7b:37:fa:
26:d5:49:81:7a:8f:e7:ec:26:ac:71:4a:95:18:38:a6:c7:45:
79:6b:99:1e:d4:a8:59:36:ab:85:71:07:05:a8:c9:7f:77:69:
13:6c:ef:3e:f8:12:ef:38:11:6d:62:4e:fd:c0:03:2f:99:fe:
82:01:dc:d1:74:c3:39:f1:c5:3c:27:94:7b:93:7c:c0:bb:1d:
72:da:fc:da:92:8f:67:2a:f4:3b:ad:c9:4a:6d:67:5e:60:80:
df:9a:5c:bc:6b:81:6b:b2:47:f6:9c:11:2c:5f:e3:31:47:ed:
66:2f:a0:80:ce:70:9f:2f:65:d3:b1:63:39:6c:2e:9b:8b:57:
68:12:40:cf:f1:fc:1b:a1:2e:df:ff:6c:ce:cf:2b:b9:3d:81:
2c:42:bd:e8:b9:f1:d1:da:65:ff:c8:a8:ac:bd:e4:f4:3a:8a:
d4:8c:75:7b:82:be:0d:f0:46:07:62:a1:c7:75:a6:44:2e:bc:
34:9c:9c:5a:51:f6:81:dc:b3:d1:86:70:4f:27:60:3a:70:3c:
fe:6a:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:25:18 2025 by rpki-client