Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/692291CA8D2111EFBB185E3DC4F9AE02.roa
File: 692291CA8D2111EFBB185E3DC4F9AE02.roa (raw, json)
Hash identifier: +FriExrSUYjUiV6qWw7ipZhf6yQg/CPRfxaHxg9fZiI=
Subject key identifier: 1B:F6:AB:DB:80:3D:97:47:A1:9E:F8:40:75:F0:D0:5E:03:52:2F:4F
Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
Certificate serial: 29FC
Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/692291CA8D2111EFBB185E3DC4F9AE02.roa
Signing time: Tue 04 Feb 2025 15:42:12 +0000
ROA not before: Tue 04 Feb 2025 15:42:12 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 4913
IP address blocks: 202.80.160.0/24 maxlen: 24
202.80.161.0/24 maxlen: 24
202.80.162.0/24 maxlen: 24
202.80.163.0/24 maxlen: 24
202.80.165.0/24 maxlen: 24
202.80.166.0/24 maxlen: 24
202.80.167.0/24 maxlen: 24
202.80.169.0/24 maxlen: 24
202.80.170.0/24 maxlen: 24
202.80.171.0/24 maxlen: 24
202.80.172.0/24 maxlen: 24
202.80.173.0/24 maxlen: 24
202.80.174.0/24 maxlen: 24
202.80.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10748 (0x29fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620ED
Validity
Not Before: Feb 4 15:42:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a23554-1bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:2a:5c:89:d8:80:60:2b:a8:bb:19:dc:72:
2b:c3:2d:34:b8:51:fe:9c:a9:fb:81:c1:33:6a:9d:
4c:c4:d8:11:09:69:39:f7:53:c5:5a:bd:2b:a1:58:
5c:b9:e6:27:c6:81:29:c9:86:ac:d9:5d:83:18:97:
ec:46:6c:30:e9:6f:e5:3f:5c:93:64:65:22:38:69:
d3:19:d7:4e:47:67:75:52:d2:9d:1c:51:6a:e1:0c:
90:5c:7c:a0:6a:f9:e1:d8:ee:98:81:08:89:4d:c2:
60:ba:91:95:b0:cb:4a:41:c3:78:c0:8a:6d:fa:be:
62:63:48:15:80:96:5c:70:cc:a4:5a:64:5a:37:6a:
6f:63:f7:f1:26:55:23:0d:88:db:ea:2d:de:ae:bd:
59:bf:8e:c2:e4:d3:fd:71:71:ac:58:6e:39:c3:11:
30:22:1b:23:16:fd:1a:29:37:02:0a:44:dd:4f:e5:
be:55:10:b0:20:fb:8c:4a:89:4c:81:dd:4c:ad:16:
00:0b:67:a4:e6:b4:bc:d7:f8:7b:7c:f6:a1:e4:7e:
c7:17:34:63:cc:34:f4:32:aa:f2:85:b4:71:95:53:
2b:a4:89:fa:c8:6f:85:65:a0:63:3b:80:a2:7c:cc:
39:ff:14:74:9e:75:9e:84:6e:f6:ef:14:f4:98:66:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:AB:DB:80:3D:97:47:A1:9E:F8:40:75:F0:D0:5E:03:52:2F:4F
X509v3 Authority Key Identifier:
keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/692291CA8D2111EFBB185E3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.80.160.0/22
202.80.165.0-202.80.167.255
202.80.169.0-202.80.175.255
Signature Algorithm: sha256WithRSAEncryption
10:41:e0:01:be:a7:ef:62:a7:8e:76:1b:67:0d:10:e5:93:72:
b2:87:44:44:c4:27:a3:e0:3a:36:d2:35:a7:a0:cf:a6:1d:20:
fc:62:1e:85:41:bd:ef:7a:4d:1b:a3:1a:09:35:b8:cc:5d:da:
91:04:c7:84:17:89:cc:ec:3b:b7:0e:3a:18:57:db:28:db:70:
53:1b:70:20:83:20:96:d4:ac:af:23:64:4b:de:a3:38:9c:47:
06:f3:b2:0d:fe:ad:eb:d9:a2:57:05:08:b6:14:25:e6:06:ec:
53:df:c5:8e:89:ad:8e:e2:7b:2b:24:4e:05:51:48:ab:53:99:
67:ab:f0:6c:5e:da:53:0a:04:e8:e8:09:4c:50:33:c9:8e:01:
6f:c5:3f:e3:c0:55:b3:79:3a:74:0f:78:c0:1b:9e:62:a8:09:
c0:4c:53:b8:51:4a:60:7c:04:36:09:01:77:8d:07:81:52:2c:
17:0e:2e:e6:65:81:42:60:4e:a8:87:0d:db:00:66:bc:22:00:
7c:8a:61:dc:d6:cf:59:66:d1:84:57:a7:06:52:31:2a:56:cf:
a4:23:33:1a:3a:e7:db:c1:dd:8b:2e:02:ac:b2:db:a8:a6:e6:
56:1e:50:d8:d8:b4:03:ee:69:29:c6:a3:69:ba:09:a6:89:b3:
77:96:ff:88
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICKfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4
QjJBNUE4MTUwHhcNMjUwMjA0MTU0MjEyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2EyMzU1NC0xYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHsqXInYgGArqLsZ3HIrwy00uFH+nKn7gcEzap1MxNgRCWk591PFWr0roVhc
ueYnxoEpyYas2V2DGJfsRmww6W/lP1yTZGUiOGnTGddOR2d1UtKdHFFq4QyQXHyg
avnh2O6YgQiJTcJgupGVsMtKQcN4wIpt+r5iY0gVgJZccMykWmRaN2pvY/fxJlUj
DYjb6i3err1Zv47C5NP9cXGsWG45wxEwIhsjFv0aKTcCCkTdT+W+VRCwIPuMSolM
gd1MrRYAC2ek5rS81/h7fPah5H7HFzRjzDT0MqryhbRxlVMrpIn6yG+FZaBjO4Ci
fMw5/xR0nnWehG727xT0mGbY0QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFBv2q9uA
PZdHoZ74QHXw0F4DUi9PMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3
MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjIwRUQvRTdFMjMxRTYzNzAwMTFFNEIzMkJEMDZCQzRGOUFFMDIvNjkyMjkxQ0E4
RDIxMTFFRkJCMTg1RTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E
LDAqMCgEAgABMCIDBALKUKAwDAMEAMpQpQMEA8pQoDAMAwQAylCpAwQEylCgMA0G
CSqGSIb3DQEBCwUAA4IBAQAQQeABvqfvYqeOdhtnDRDlk3Kyh0RExCej4Do20jWn
oM+mHSD8Yh6FQb3vek0boxoJNbjMXdqRBMeEF4nM7Du3DjoYV9so23BTG3AggyCW
1KyvI2RL3qM4nEcG87IN/q3r2aJXBQi2FCXmBuxT38WOia2O4nsrJE4FUUirU5ln
q/BsXtpTCgTo6AlMUDPJjgFvxT/jwFWzeTp0D3jAG55iqAnATFO4UUpgfAQ2CQF3
jQeBUiwXDi7mZYFCYE6ohw3bAGa8IgB8imHc1s9ZZtGEV6cGUjEqVs+kIzMaOufb
wd2LLgKsstuopuZWHlDY2LQD7mkpxqNpugmmibN3lv+I
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:40:32 2025 by rpki-client