Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/15D0D8C2FE3911EFAF123B80C4F9AE02.roa
File: 15D0D8C2FE3911EFAF123B80C4F9AE02.roa (raw, json)
Hash identifier: XUOHxMa/aQWYIO381T94gAX1GkRxbS4shDJBgLygZK0=
Subject key identifier: 14:C4:95:57:FE:8B:3E:28:9D:28:0A:92:89:E0:99:92:80:51:DD:71
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 09FF
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/15D0D8C2FE3911EFAF123B80C4F9AE02.roa
Signing time: Tue 11 Mar 2025 05:24:21 +0000
ROA not before: Tue 11 Mar 2025 05:24:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9908
IP address blocks: 61.10.0.0/16 maxlen: 16
61.10.0.0/17 maxlen: 17
61.10.0.0/18 maxlen: 20
61.10.64.0/18 maxlen: 18
61.10.64.0/19 maxlen: 20
61.10.96.0/19 maxlen: 20
61.10.128.0/17 maxlen: 20
61.15.0.0/16 maxlen: 16
61.15.0.0/17 maxlen: 20
61.15.128.0/17 maxlen: 20
61.18.0.0/16 maxlen: 20
125.59.0.0/16 maxlen: 20
203.83.64.0/18 maxlen: 18
203.168.222.0/23 maxlen: 24
218.252.0.0/16 maxlen: 16
218.252.0.0/17 maxlen: 20
218.252.128.0/17 maxlen: 20
218.253.0.0/18 maxlen: 20
222.166.0.0/16 maxlen: 20
222.167.0.0/18 maxlen: 20
222.167.64.0/19 maxlen: 20
222.167.128.0/17 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172
Validity
Not Before: Mar 11 05:24:21 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67cfc904-3b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:25:28:79:a6:11:ee:da:6e:d5:ad:9b:2a:
5b:29:fb:1d:28:01:66:95:9b:7a:56:4a:fa:cd:21:
15:fa:6f:0d:66:34:16:76:34:7b:bb:d5:56:34:50:
07:15:38:47:da:2f:89:81:9a:4d:4d:65:93:65:a8:
66:be:2c:dd:48:ef:7a:19:bd:de:79:40:e6:38:74:
1b:8f:a5:6a:97:ac:45:8a:32:e7:4b:ad:ee:5f:04:
d0:5c:43:aa:c4:6c:15:69:6a:a8:2b:5a:f9:01:7b:
57:33:0b:02:90:05:d8:95:04:48:c0:70:f6:bc:5c:
b9:9a:61:49:ad:3a:84:ed:86:a5:0c:0a:c0:48:24:
2c:08:b0:91:ef:db:4e:69:97:99:ac:c9:cd:29:d2:
cf:01:b8:09:55:86:95:1c:2a:88:cf:9e:8e:08:b5:
54:13:f2:76:d5:a2:a3:f3:8a:f3:50:15:29:90:4a:
b0:6f:94:5d:a6:3c:91:82:af:59:4e:0d:e8:ab:4f:
f4:2d:b2:85:9c:53:8f:1b:13:42:93:14:06:55:3a:
4f:4d:a4:34:21:e2:ce:5d:1f:d6:0e:54:97:c0:1d:
09:7a:4a:cc:3e:12:8b:08:35:a5:27:fd:8b:8d:41:
2c:12:9c:32:2a:50:06:f4:f7:bf:ec:74:09:5f:e2:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:95:57:FE:8B:3E:28:9D:28:0A:92:89:E0:99:92:80:51:DD:71
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/15D0D8C2FE3911EFAF123B80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.10.0.0/16
61.15.0.0/16
61.18.0.0/16
125.59.0.0/16
203.83.64.0/18
203.168.222.0/23
218.252.0.0-218.253.63.255
222.166.0.0-222.167.95.255
222.167.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1f:91:15:71:46:2a:83:41:07:23:c4:03:c3:c9:9d:71:25:4b:
63:56:c7:a8:cb:f3:11:da:90:be:27:01:4e:29:b1:fd:78:c9:
58:16:27:fe:31:31:ec:6d:c3:ac:6d:af:b5:b4:1c:25:8c:c0:
92:7a:4c:67:b1:e6:31:43:fa:5f:49:83:2c:81:d1:80:52:9d:
c1:58:d7:cd:f4:fb:d1:4c:e0:d1:47:7b:7e:54:89:c7:e1:97:
73:52:d7:07:7e:a8:fc:e0:fb:cc:99:36:3a:86:11:c5:10:28:
06:ec:48:86:9c:33:34:11:7c:7d:0b:dc:41:f2:a6:db:70:af:
37:eb:49:49:67:3a:2f:46:48:d1:6e:97:ab:d7:9a:f2:88:f3:
cb:99:94:88:18:c8:04:c7:5b:6b:ff:af:06:92:bf:73:e6:81:
4f:70:c8:e6:43:7a:b9:85:28:00:48:f3:7b:7f:26:27:5e:b7:
e1:2e:37:b7:7f:9a:48:87:f6:45:e6:7e:32:59:80:d3:50:2d:
b1:db:55:53:1e:14:b0:f6:6f:4c:e7:cb:bb:f7:c1:bc:31:1a:
b3:60:a5:36:e5:27:89:58:50:9e:b1:57:de:f8:6c:34:67:b4:
c5:83:60:00:2d:93:d3:fd:ba:94:a5:50:99:a8:a5:7c:3f:ae:
72:55:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:27 2025 by rpki-client