Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/4C939D904CE211EEB3D1C91AC4F9AE02.roa
File: 4C939D904CE211EEB3D1C91AC4F9AE02.roa (raw, json)
Hash identifier: Rxbf23II137kc/X0+ftbbRvAASqf8/Pbs16D7UAwXac=
Subject key identifier: 71:60:C2:ED:5C:D7:B5:7B:B4:E7:E0:E0:5E:58:C6:41:E5:D1:DE:F9
Certificate issuer: /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Certificate serial: 04F0
Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/4C939D904CE211EEB3D1C91AC4F9AE02.roa
Signing time: Wed 06 Sep 2023 18:22:13 +0000
ROA not before: Wed 06 Sep 2023 18:22:13 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 18464
IP address blocks: 58.84.52.0/22 maxlen: 22
103.197.68.0/22 maxlen: 22
116.206.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B6D4
Validity
Not Before: Sep 6 18:22:13 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64f8c354-8299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:db:eb:3f:75:77:c8:55:36:95:e9:70:5a:
db:b1:74:45:94:57:13:d3:97:b1:2c:a9:76:e1:d2:
90:9e:e9:b5:64:06:14:a6:bd:9c:fd:3b:68:1b:60:
1d:e3:8f:d0:b3:66:96:d9:74:75:aa:08:f5:81:d5:
4a:c5:91:03:81:5a:c6:94:82:68:18:d8:15:04:48:
1e:2b:60:01:c0:98:4e:f1:d4:ae:d8:f9:d3:3a:78:
03:97:2e:d7:9b:48:27:10:11:2b:73:a0:f0:19:65:
b5:9e:d2:ef:32:e4:a2:92:e2:06:1c:7a:ec:09:0e:
bc:fb:6e:02:8e:08:54:2a:39:9f:bc:aa:b9:49:50:
ee:86:88:40:e0:c5:9a:17:06:2a:fc:33:0c:1d:c8:
02:16:a9:7a:fc:93:de:b1:6e:ff:f2:2c:3b:b4:f6:
ac:4e:d5:45:a6:8b:ee:ce:c5:41:d3:b6:46:8f:c2:
e1:cc:3a:36:9e:c3:e6:13:cb:dc:34:63:10:1b:40:
c5:01:87:73:40:08:12:ce:67:fc:59:df:af:7c:f3:
9f:81:79:2a:ca:aa:d6:6b:65:ce:ae:11:7e:f7:52:
84:7b:b8:3c:c2:74:dc:52:cf:ff:80:04:5d:98:10:
81:fb:96:d2:6d:38:ce:c7:9e:3f:f9:dd:85:b7:b6:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:C2:ED:5C:D7:B5:7B:B4:E7:E0:E0:5E:58:C6:41:E5:D1:DE:F9
X509v3 Authority Key Identifier:
keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/4C939D904CE211EEB3D1C91AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.52.0/22
103.197.68.0/22
116.206.100.0/22
Signature Algorithm: sha256WithRSAEncryption
df:15:cb:1e:0c:4f:8a:ad:37:2f:64:e8:b1:53:f6:1d:5e:38:
bf:fb:d4:6b:f6:8d:d0:a6:85:e9:9b:45:f3:51:42:1a:c9:a9:
1c:09:f6:6c:60:96:cd:55:1e:46:f8:fc:78:21:c0:ee:fa:12:
53:4f:63:03:78:e0:a5:ed:5a:bb:aa:f4:46:7d:35:36:40:e7:
ff:b5:28:74:32:3f:de:57:93:12:68:12:77:fd:60:00:56:15:
78:fd:8f:1c:de:4b:62:47:04:cf:e0:ae:65:b0:90:02:a3:00:
e8:15:1a:86:9c:30:8a:6e:7f:43:3f:56:fd:58:65:c6:ec:6e:
03:8e:49:3f:ca:34:e2:02:01:7c:ec:8c:26:f6:4b:d4:a3:36:
06:86:aa:30:1d:bb:44:22:4e:9f:d5:cc:4f:a3:af:36:0d:cc:
80:dc:bc:73:30:af:84:91:05:a4:49:e8:5b:17:ef:38:48:2c:
e6:cc:6c:d6:7f:e2:b8:cb:a2:a0:4d:89:5a:83:d3:3a:4d:90:
e8:6b:7e:fe:23:48:5c:8a:79:0d:c7:68:38:9b:b5:8d:66:7a:
5f:4c:73:ce:08:33:14:d6:4b:b3:d9:5b:c9:4a:a8:b8:e5:6b:
0e:e1:7f:c0:07:58:26:98:29:21:96:d4:06:4c:02:7b:ac:57:
ae:7b:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:59:28 2025 by rpki-client