Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa
File: 3A9DF21A178411EC83735974C4F9AE02.roa (raw, json)
Hash identifier: /5vaFU/movPiNcrsjCj3H2p31M+BSywFDXfC27bwtzs=
Subject key identifier: D7:83:0B:34:85:10:A8:2F:95:EA:02:E0:CE:6A:56:F4:FA:3F:EC:20
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0530
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa
Signing time: Tue 03 Sep 2024 01:14:50 +0000
ROA not before: Tue 03 Sep 2024 01:14:50 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 134139
IP address blocks: 61.88.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1
Validity
Not Before: Sep 3 01:14:50 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d6630a-d3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:02:4c:e8:7a:67:2d:3e:4b:7d:22:f3:48:
44:6b:05:9d:0a:ed:63:90:6a:28:94:c0:87:71:37:
b8:bf:14:a5:94:5f:a4:78:00:95:72:b1:da:be:9b:
f5:94:30:9f:14:c2:82:22:d9:3d:8f:f1:b2:69:89:
d9:34:9f:02:42:bb:5f:18:62:5e:61:f6:a5:66:cc:
84:ef:1b:a4:ab:dc:46:14:6e:a2:e2:e8:09:d7:53:
89:21:4d:12:fd:a1:4e:24:fc:53:fb:4d:1d:7a:83:
1e:c4:ee:01:86:6a:aa:c7:3b:85:63:cf:ec:58:86:
a4:09:94:91:b9:65:63:47:fc:94:a2:58:37:30:92:
b8:ef:c2:dc:48:76:7b:c4:ba:e8:20:66:0f:34:b9:
2a:f2:fd:12:9f:cd:9d:4e:ec:64:3e:a6:eb:54:20:
de:c6:7d:d0:54:b7:bb:04:5e:c9:f1:99:1f:e1:9b:
1c:10:81:2d:f9:42:63:96:53:d5:70:4d:99:c2:72:
c0:76:38:44:6c:3a:c8:48:b3:f2:b7:69:66:cd:04:
f8:cb:0e:7e:e7:8f:7f:ec:45:7a:ea:fd:0a:02:1c:
b1:bb:a5:26:a1:58:32:f8:40:04:a6:55:1f:93:31:
c4:c5:7e:6d:d5:64:55:5c:22:26:77:85:75:fc:de:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:0B:34:85:10:A8:2F:95:EA:02:E0:CE:6A:56:F4:FA:3F:EC:20
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.88.231.0/24
Signature Algorithm: sha256WithRSAEncryption
62:19:73:ac:13:c0:e3:9e:c7:9f:88:e3:5f:33:71:37:eb:92:
d8:0b:35:65:1e:f6:e5:8e:6c:89:1d:0d:7f:f3:e2:13:28:ff:
db:63:f0:f1:b4:09:30:2e:58:48:f7:c2:88:d2:04:fb:9f:5b:
19:f9:7f:e9:af:8b:6b:c9:81:52:ea:8d:9c:f2:22:50:aa:cd:
b6:71:11:18:8b:9d:7c:9c:0d:4f:70:a0:c7:dc:9a:cd:ca:21:
16:d2:20:18:60:f2:15:f0:88:fb:ff:91:c6:89:b4:e9:bc:a7:
44:56:80:f8:05:64:0d:88:35:7e:ac:c3:54:d4:63:91:04:80:
96:19:9c:8f:ca:df:be:10:79:f1:09:61:a0:18:bf:fa:bb:d7:
20:ba:74:f9:70:1e:4d:79:10:c7:43:7d:0c:bf:f0:7a:93:8b:
7a:fb:ac:82:ea:62:8a:05:69:cc:1c:f0:c1:bd:80:1a:bf:3a:
3e:4c:6e:8c:37:98:cd:f5:d0:71:79:b4:67:ab:0b:24:49:6c:
df:bd:a0:60:41:07:34:b7:de:eb:db:9d:50:58:24:4e:97:0a:
94:29:f9:41:1b:cb:be:c9:20:62:0b:bb:91:c2:9a:a9:ff:e5:
5d:89:6c:9f:ca:4c:31:a2:01:0d:fa:80:d8:4f:9a:aa:1a:fc:
11:af:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:10:00 2025 by rpki-client