Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa
File: 1A8D09D6DF3211EC97567B3EC4F9AE02.roa (raw, json)
Hash identifier: qwYEF/EaRRrOYyEUPPMKYxdD7QMVhE8hbQvYQGDcuZQ=
Subject key identifier: D5:A9:D8:46:82:14:69:54:BE:11:11:B1:EE:A9:BE:91:64:4E:64:B3
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 052D
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:34:08 +0000
ROA not before: Wed 31 Jul 2024 02:34:08 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 7630
IP address blocks: 58.137.161.0/24 maxlen: 24
203.146.18.0/24 maxlen: 24
203.146.224.0/24 maxlen: 24
203.146.225.0/24 maxlen: 24
210.1.2.0/24 maxlen: 24
210.1.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1325 (0x52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA
Validity
Not Before: Jul 31 02:34:08 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a2a0-0e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:4d:90:07:8e:ec:ed:c5:df:6a:2f:b2:45:
48:5c:68:90:d5:85:56:84:b5:0e:b4:3f:f0:79:52:
84:d1:9f:e4:b6:b8:e1:aa:03:34:65:97:87:c5:1e:
c1:f3:4b:99:03:9e:35:d3:c4:24:2f:bf:cf:d7:01:
41:94:2c:12:fc:0a:1f:e6:19:56:c0:e2:b9:0b:7e:
fe:b8:63:88:57:20:2e:a9:7e:95:c6:a8:bf:45:21:
1a:3c:17:b0:35:b5:0c:d3:24:25:76:a6:b4:cf:8d:
cf:26:dd:af:81:d8:f5:de:47:77:4e:52:32:95:57:
0c:11:7c:16:65:45:0a:93:64:3d:60:ff:93:b2:51:
7c:80:67:bf:e3:d6:5a:ce:50:5e:45:0b:86:55:56:
64:6b:5f:29:67:b6:09:09:4d:3a:da:48:98:be:21:
d6:60:b6:d4:c2:20:dd:5c:84:cd:d6:07:d9:94:50:
ea:d8:93:7e:94:b6:29:42:2e:15:43:bc:63:3d:16:
63:b8:b7:37:d3:b6:a6:12:d2:91:54:a4:f2:fe:de:
bb:7c:56:7d:ee:c7:47:63:77:ee:27:17:b4:86:1e:
b6:f3:3b:4a:ff:99:ed:ce:61:86:d1:61:96:50:e2:
bb:70:31:a8:57:7d:00:ca:43:5d:e0:95:8e:05:aa:
74:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:D8:46:82:14:69:54:BE:11:11:B1:EE:A9:BE:91:64:4E:64:B3
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.137.161.0/24
203.146.18.0/24
203.146.224.0/23
210.1.2.0/24
210.1.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:62:67:3e:24:39:e3:94:dd:4b:47:dd:1e:db:e1:e9:cc:c9:
13:30:fb:5c:86:a6:61:1d:c6:66:4e:10:9c:db:19:32:d7:36:
ab:3e:73:90:bb:ba:a7:9f:45:bb:48:cb:8d:4c:9d:c4:9e:fb:
22:79:37:98:30:18:8d:1b:18:3f:f7:9e:51:1b:0d:8a:86:cd:
a3:0e:3c:6f:b3:f2:59:d6:30:73:15:bf:7b:a0:fb:1f:48:e0:
8a:4b:22:d2:35:48:74:c1:5c:95:ec:4d:08:a0:4f:e1:1c:15:
34:76:97:69:ca:28:b5:ba:08:d5:0a:92:81:94:f5:57:62:fa:
d6:91:8a:7f:dd:21:0e:92:b5:9d:5c:e9:c9:b8:93:43:a2:ff:
0f:d3:04:1e:28:5f:2f:0b:bc:1b:d4:87:c7:60:e5:89:83:32:
42:20:4a:98:40:c6:2e:27:f4:90:8b:3d:6a:f6:31:fd:3f:de:
5f:1e:b4:f0:64:03:0e:cc:93:8b:75:48:0a:eb:91:67:f2:95:
20:c1:9a:7d:81:8a:09:a3:14:5f:20:6f:90:0d:d2:5d:28:61:
25:76:a0:63:b4:6f:2d:91:09:69:2c:97:ad:65:fc:1b:fa:e2:
1d:c0:cc:be:ff:9a:68:16:5e:71:36:88:d3:05:2d:98:e3:97:
ee:9f:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:07:29 2025 by rpki-client