Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
File: 30376074EF8811EFABCDFD34C4F9AE02.roa (raw, json)
Hash identifier: bPtg4MjC7eLz+ZT6OurE6aN4wcUNr7U76NQbeUk0pjo=
Subject key identifier: 60:FB:64:3A:44:09:83:FE:91:3F:EE:2C:1C:A5:21:A8:24:B7:DD:DF
Certificate issuer: /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial: 05
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
Signing time: Sat 22 Feb 2025 17:08:11 +0000
ROA not before: Sat 22 Feb 2025 17:08:11 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9664
IP address blocks: 163.61.198.0/23 maxlen: 24
2401:f1e0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA2D
Validity
Not Before: Feb 22 17:08:11 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ba047b-e779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:40:c8:1e:3c:26:d7:8e:94:21:07:2e:de:
36:0c:92:b5:14:a4:12:f7:0e:ab:c8:8a:17:fa:15:
52:29:f5:e9:d6:bd:8c:3a:e4:be:93:95:ff:d5:fb:
06:ab:aa:3e:71:09:4a:3d:45:00:6f:8f:88:a5:d3:
35:42:af:3d:f0:5c:81:7a:94:4b:4a:3e:f1:87:09:
de:0e:88:ea:f0:cd:34:e1:59:61:b1:d8:95:2c:6b:
ae:88:7c:db:56:ca:41:b7:cc:4b:e4:e8:4e:7c:6a:
b9:89:00:bc:b4:a4:4b:9d:48:78:0a:75:9a:d9:e9:
57:50:45:61:aa:2a:79:fb:20:7b:0e:9d:92:1f:97:
01:5e:6c:2f:41:db:52:68:fb:e2:4b:5b:0f:0a:22:
80:18:b7:b1:88:2b:95:d2:12:e8:a7:c2:56:15:06:
cf:e7:60:43:c2:95:5d:90:fe:d4:e7:0e:7a:16:ee:
f4:39:a1:cd:e8:ab:a6:df:6b:f4:7c:14:21:39:0d:
8e:7b:9d:ed:e9:73:53:08:25:89:7a:e1:16:90:27:
8e:0c:27:69:39:c1:f7:c3:3e:8a:e3:8e:e6:04:d8:
b0:0d:10:35:f5:32:71:0d:11:7e:51:17:85:ec:16:
40:b9:14:6c:27:84:9b:9f:61:2f:77:63:e4:23:63:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FB:64:3A:44:09:83:FE:91:3F:EE:2C:1C:A5:21:A8:24:B7:DD:DF
X509v3 Authority Key Identifier:
keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.198.0/23
IPv6:
2401:f1e0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:8a:89:4d:bb:d5:06:ce:6b:17:a0:2b:fd:6e:07:de:c1:8f:
3b:e7:40:3f:1d:a8:0a:0c:30:52:4a:5b:c2:9b:a3:14:2a:ba:
2c:64:ee:15:a2:9b:ae:a9:4f:4e:2e:c1:3e:0e:d0:f9:d7:c4:
fa:a1:fe:e5:3e:53:67:28:69:96:53:25:20:08:bb:8c:f6:a6:
13:05:e1:6c:65:84:a4:be:f3:6c:75:07:3d:de:eb:e2:6c:72:
ec:8c:b6:f5:f2:03:e7:79:46:7b:5e:83:b2:12:29:27:12:9f:
23:8d:b8:67:5d:d9:aa:20:73:b0:c7:5b:07:33:e2:57:5b:8f:
a7:5c:11:f8:8b:a0:fb:fd:bd:ff:9a:4b:3c:af:c3:9b:26:82:
cf:60:d6:ca:18:e8:ae:f9:84:34:61:5f:14:35:b2:c2:74:f8:
2d:28:9b:c3:8f:48:f6:88:b8:87:7f:60:20:de:e8:4f:02:06:
94:25:ce:5c:17:19:e0:e1:ac:64:de:d4:a7:3a:2e:ba:b9:f8:
91:29:d4:4a:d9:ba:54:1c:1b:31:80:d0:00:41:df:0e:8e:0e:
3c:0a:f3:44:28:a4:df:56:ce:4a:00:44:ca:05:46:a7:e9:f2:
4c:f8:dd:aa:62:48:26:56:9b:fd:fe:d0:52:a8:a0:47:0d:36:
e1:ea:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:16:22 2025 by rpki-client