Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5C696C684ABB11EFB64F1B36C4F9AE02.roa
File: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (raw, json)
Hash identifier: /romVRaatuRgZ+EJdKn17wgiNjDQuY9ViJHeuhjzwIM=
Subject key identifier: 5E:E3:7C:62:83:F2:1C:0E:0A:F2:C2:57:CA:4D:19:9C:8E:EB:5F:72
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3760
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5C696C684ABB11EFB64F1B36C4F9AE02.roa
Signing time: Thu 06 Feb 2025 09:22:10 +0000
ROA not before: Thu 06 Feb 2025 09:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141031
IP address blocks: 111.88.0.0/24 maxlen: 24
111.88.1.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14176 (0x3760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B
Validity
Not Before: Feb 6 09:22:10 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a47f41-3b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1a:74:07:01:92:77:8b:99:2d:6b:c4:5e:87:
a7:ce:91:15:82:c0:b8:6b:f2:cd:79:38:42:ea:94:
69:ef:5b:ae:03:6e:56:b7:8f:ce:59:7a:43:9a:21:
eb:57:30:20:a5:a4:78:80:0f:f4:84:46:32:6c:18:
d3:dc:fb:66:eb:8c:fa:2d:85:29:bf:81:75:86:50:
42:08:da:13:c6:e6:39:5e:fb:ff:ee:00:b4:d5:98:
b7:8a:c2:d4:93:70:79:a7:40:93:6a:c6:f2:9f:34:
be:ef:79:10:19:15:1c:ad:b0:b6:85:1d:bb:a8:ed:
38:db:1c:30:1c:0b:ca:5b:5f:2e:d5:bb:18:ec:28:
14:91:df:1f:44:2f:67:7b:dc:17:38:f1:ce:61:ad:
8d:b9:4b:4d:ae:67:2b:56:7d:f0:c8:02:d7:27:61:
be:8b:c9:41:5d:0b:86:7d:97:2a:90:9f:74:55:72:
8d:21:51:6b:9c:0f:5d:68:14:4f:d3:3c:96:09:1d:
2a:c3:c6:3a:66:86:7b:1a:a7:0a:d6:56:42:04:28:
42:93:84:bf:41:6f:3f:ef:df:4a:f0:4f:7b:18:8a:
51:16:57:91:2f:1c:ae:3d:c9:a2:06:26:74:4e:ba:
8d:73:4d:46:df:e3:6b:28:43:7f:5e:ae:18:e9:9f:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:7C:62:83:F2:1C:0E:0A:F2:C2:57:CA:4D:19:9C:8E:EB:5F:72
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5C696C684ABB11EFB64F1B36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.0.0/23
115.186.2.0-115.186.9.255
115.186.76.0/22
Signature Algorithm: sha256WithRSAEncryption
86:29:3f:e5:5b:0d:bd:c2:bb:e6:44:06:21:9d:60:ae:14:49:
4a:ff:be:7d:bd:a3:d6:0d:cf:8e:b1:11:73:f3:f4:0e:dc:2e:
be:ea:2c:b2:f2:7f:a5:f6:77:d1:77:07:37:bf:4d:b0:e2:f6:
a9:62:c6:44:05:d7:e8:a5:32:6e:5f:38:67:6b:e5:58:c9:4a:
b2:05:90:9d:a4:31:c2:55:5d:c9:ac:76:3b:fb:3e:9c:53:58:
03:a7:8a:db:30:d6:25:81:4a:c1:0e:37:dd:cb:17:6d:34:ff:
03:76:0d:fa:05:0b:c3:9e:eb:0c:47:bf:67:23:78:3f:94:2c:
82:df:06:a0:24:ac:12:71:33:61:4d:3c:d6:52:9c:d7:92:83:
e7:50:6e:4b:03:03:60:5b:1a:87:31:66:4d:30:57:c6:b3:c8:
8c:4a:98:5d:0a:09:a8:a8:2f:98:b9:08:92:3a:f0:d6:50:f2:
0b:b7:9f:40:83:e7:b7:54:19:0f:4e:0c:e6:28:0c:09:6f:5b:
e0:1a:58:e0:26:21:de:d6:70:34:54:5b:7a:f2:5c:14:7e:a4:
0e:21:ed:02:2e:b6:18:ed:87:c8:2e:b1:62:8b:0a:8a:84:4b:
4b:4f:be:31:43:6b:c5:02:49:89:5f:ca:f5:49:95:ce:1d:66:
3d:f5:b9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:51:00 2025 by rpki-client