Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/631F9D58053611F08A2C940AC4F9AE02.roa
File: 631F9D58053611F08A2C940AC4F9AE02.roa (raw, json)
Hash identifier: qOc5hpcVcy9NSdSSshZOYM1+8Jzn2ju6wiEgdaZretI=
Subject key identifier: 36:36:41:C4:BE:7A:14:B7:BE:27:9F:B7:A8:DA:7D:14:30:DA:57:CB
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 26F1
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/631F9D58053611F08A2C940AC4F9AE02.roa
Signing time: Thu 20 Mar 2025 02:52:40 +0000
ROA not before: Thu 20 Mar 2025 02:52:40 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9386
IP address blocks: 202.128.32.0/19 maxlen: 19
202.128.32.0/22 maxlen: 22
202.128.36.0/22 maxlen: 22
202.128.40.0/22 maxlen: 22
202.128.44.0/22 maxlen: 22
202.128.48.0/22 maxlen: 22
202.128.52.0/22 maxlen: 22
202.128.56.0/22 maxlen: 22
202.128.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9969 (0x26f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD
Validity
Not Before: Mar 20 02:52:40 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67db82f8-cab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2c:72:70:d0:99:89:ca:01:09:13:c6:b4:6f:
05:75:fd:d8:7e:5d:b6:a7:d2:5d:2b:75:05:07:1b:
2f:6b:fe:b2:cb:45:20:b8:4f:f9:0c:4e:79:5f:f3:
b9:ca:a3:d3:30:f6:32:ad:fc:0b:cc:af:39:79:28:
f1:27:51:22:9c:be:83:e6:c0:be:1a:ef:59:ac:b9:
f5:d2:ab:7d:4c:8b:cb:cd:60:a5:ee:d9:d6:64:9c:
2f:9c:d7:a5:6f:f6:99:d8:bc:1d:48:41:9d:7b:8c:
00:2b:7b:50:88:96:2c:3a:dd:cf:b9:c7:cf:51:af:
69:1f:47:54:46:32:05:fd:05:7c:65:fa:09:53:1c:
cd:14:f1:d1:70:3d:43:72:e7:bb:3a:5d:fc:0a:4a:
f2:ae:97:74:da:fe:07:6e:89:48:f7:f6:f3:10:24:
d2:2f:36:8b:99:e1:d1:75:d4:e9:f9:c4:ca:29:ef:
8a:9b:7d:1f:39:fa:6a:53:7b:e5:b1:df:d8:98:8f:
20:9d:a4:29:30:93:f9:39:24:df:44:ef:31:1b:2b:
4a:26:c4:6f:c5:dd:34:48:60:4e:21:53:24:8e:38:
a1:94:5e:64:b0:bc:64:21:af:34:fa:dd:5f:d0:1c:
d9:af:9d:12:49:33:4d:83:09:6b:b3:8e:85:5b:1c:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:36:41:C4:BE:7A:14:B7:BE:27:9F:B7:A8:DA:7D:14:30:DA:57:CB
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/631F9D58053611F08A2C940AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.128.32.0/19
Signature Algorithm: sha256WithRSAEncryption
50:11:9c:ab:ca:1f:39:ad:51:9b:6d:ea:5e:d5:bb:d8:c8:db:
30:26:21:44:f3:a5:83:98:cb:20:3e:24:15:3f:b0:f9:9f:f1:
ce:cb:a4:3d:33:37:9f:21:fd:2f:1d:39:70:e9:ad:2d:de:9d:
60:f9:04:56:3b:e7:fc:ad:a4:ad:88:b1:a8:81:9a:e9:06:ed:
dd:64:7c:7b:38:d3:38:0c:9e:82:9c:8c:67:75:e7:67:51:c7:
e5:0c:4f:0d:59:e0:9e:4d:f6:77:79:a3:4b:8d:20:81:8e:85:
50:71:f1:3f:23:50:2b:3f:e2:38:39:51:d8:1b:f2:00:a5:08:
67:6c:19:e5:77:da:74:03:03:19:92:07:22:ca:d0:11:91:42:
28:dd:89:6f:87:c4:6f:5d:10:56:f3:3f:3c:9d:5d:c4:02:9e:
a8:40:f3:7a:8a:69:ac:ad:ee:45:a8:53:aa:c6:93:95:7d:8e:
d4:24:a2:6e:8b:b8:b7:1c:76:a7:45:52:55:8e:4c:90:46:4c:
f0:14:53:a3:1b:00:b1:e9:69:d8:5c:28:da:90:67:92:2e:d3:
ec:39:a8:de:8a:0c:ac:92:14:0e:85:44:22:68:4b:b4:69:7e:
de:92:1d:35:61:67:35:dc:03:18:f6:92:0c:1a:ca:2d:db:e1:
e5:d0:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:00:12 2025 by rpki-client