Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E74B2942A10D11EDB6423F70C4F9AE02.roa
File: E74B2942A10D11EDB6423F70C4F9AE02.roa (raw, json)
Hash identifier: 8cBCuzqdPmlEPGeW8Q6mPcYmSoXlg0n2Imwp4eb4R6I=
Subject key identifier: AA:4F:32:2B:CB:8F:A6:71:C7:94:59:47:A5:66:F5:F3:31:C8:33:5D
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 31F3
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E74B2942A10D11EDB6423F70C4F9AE02.roa
Signing time: Fri 10 Feb 2023 02:01:03 +0000
ROA not before: Fri 10 Feb 2023 02:01:03 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 21700
IP address blocks: 122.8.16.0/22 maxlen: 22
122.8.28.0/22 maxlen: 22
122.8.40.0/22 maxlen: 22
122.8.44.0/22 maxlen: 22
122.8.48.0/22 maxlen: 22
122.8.56.0/22 maxlen: 22
122.8.64.0/22 maxlen: 22
122.8.72.0/22 maxlen: 22
122.8.80.0/22 maxlen: 22
122.8.92.0/22 maxlen: 22
122.8.96.0/22 maxlen: 22
122.8.100.0/22 maxlen: 22
122.8.104.0/22 maxlen: 22
122.8.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12787 (0x31f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F
Validity
Not Before: Feb 10 02:01:03 2023 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63e5a55f-7247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:7d:31:82:12:79:6c:78:86:83:0b:25:01:
e4:86:e9:ab:e3:19:a9:c1:93:19:98:5d:4d:74:3e:
5a:4e:86:7b:b8:c0:b3:7c:c8:c4:3b:c5:bd:cb:e8:
96:8e:23:e6:0e:8a:83:8e:70:e2:73:71:a8:b2:1c:
3e:b2:09:85:fe:71:6f:2c:bd:14:b8:72:cc:fd:ca:
22:90:8a:f4:db:a8:b7:61:ec:17:41:65:5c:22:b8:
75:c2:66:7c:17:3c:9b:6c:24:51:4e:1a:d0:8e:97:
ab:d4:1b:64:97:4e:10:9f:65:ea:53:25:7c:89:f1:
18:ae:4a:76:ec:e9:c4:a2:80:28:e3:7e:96:8f:17:
50:ce:3c:38:1e:ae:d0:07:35:78:ac:3d:17:58:9e:
82:86:c3:cb:ff:9d:32:83:71:b9:eb:96:80:5b:cb:
02:3a:7a:ea:4d:86:f2:78:42:19:b6:fe:7a:11:a8:
a6:2f:3f:2c:9e:98:f4:64:25:d7:c2:04:0a:be:29:
2d:3a:6d:23:dc:17:19:56:67:e5:88:8d:bb:10:77:
5d:51:ed:cd:ab:e9:7a:c2:96:8a:cb:68:db:d2:ca:
70:34:e3:7b:88:a8:ba:5b:cf:b4:17:d1:c2:49:4a:
71:fc:a7:4c:12:fe:b1:15:50:40:db:7e:19:29:c5:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:32:2B:CB:8F:A6:71:C7:94:59:47:A5:66:F5:F3:31:C8:33:5D
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E74B2942A10D11EDB6423F70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.16.0/22
122.8.28.0/22
122.8.40.0-122.8.51.255
122.8.56.0/22
122.8.64.0/22
122.8.72.0/22
122.8.80.0/22
122.8.92.0-122.8.111.255
Signature Algorithm: sha256WithRSAEncryption
ed:2b:11:36:55:40:31:69:f6:8d:6c:d4:58:68:a3:82:a1:35:
4e:5e:c8:0e:af:30:08:1c:17:24:5c:de:57:67:a5:fd:46:e2:
ce:07:34:88:ed:96:e6:da:a2:57:da:b8:1f:c9:48:bb:fb:e3:
ea:5b:f9:7d:fc:7e:b2:10:cc:65:4c:34:94:05:fa:ee:fe:8d:
14:44:5a:0e:48:b3:51:f7:08:da:5a:ad:39:d9:e2:ca:60:54:
65:b1:a1:06:d3:84:70:5b:b5:94:61:17:49:ab:f0:c9:ec:9f:
dd:63:bf:45:0f:c8:ad:30:5a:d0:14:bd:e8:cc:cc:32:c7:9e:
aa:1b:99:db:4f:99:6c:db:03:46:bf:03:d2:61:d3:5d:08:44:
5f:5c:0d:68:7b:f3:5c:29:33:72:b2:62:be:12:dc:c7:46:88:
5c:2f:64:5b:a4:8d:ea:51:85:74:cb:71:0f:56:6d:f9:ac:be:
01:77:e6:63:fe:39:2a:66:69:02:ac:d3:73:71:71:64:1b:7d:
c9:b4:42:ef:75:53:fe:36:8d:b9:e2:43:ff:37:c3:df:e8:84:
59:9d:39:3e:e2:f2:f2:4c:ad:6b:22:b0:08:e4:5d:09:f5:77:
34:6f:72:c5:72:4b:40:0c:14:b9:aa:8d:56:b2:4a:c8:a4:e9:
5a:de:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:16 2025 by rpki-client