Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa
File: 66425D7E2B1311EB89CBB164C4F9AE02.roa (raw, json)
Hash identifier: 1qW8PqOKetCMk2x9xmkWWa9Gzva1wDC2Cgrt+Bc+QO8=
Subject key identifier: CC:01:17:61:54:27:4E:88:97:0B:09:81:8B:4A:A5:C7:46:44:FA:85
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 0F65
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa
Signing time: Thu 30 May 2024 18:51:47 +0000
ROA not before: Thu 30 May 2024 18:51:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 141362
IP address blocks: 203.159.77.0/24 maxlen: 24
2405:3340:e000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3941 (0xf65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798
Validity
Not Before: May 30 18:51:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6658cac3-62f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:52:a4:75:27:ff:21:bd:f5:08:02:23:06:
61:7f:f9:e3:8e:32:19:e9:41:59:d4:ee:72:b7:a2:
b1:91:ee:b9:39:81:c4:1a:d4:b1:17:fd:d0:a2:e9:
fd:f0:6c:c8:63:9c:0e:91:05:74:12:51:8a:58:27:
4f:48:65:6e:bf:29:ca:c8:9c:b5:fc:53:db:99:3b:
75:98:c3:bd:56:bd:07:5e:4f:20:20:bf:57:80:01:
e3:e6:c0:ec:4e:bb:37:dd:c4:96:0c:17:1e:dc:eb:
a8:23:0e:01:b9:98:ab:fa:58:95:94:f1:a3:36:dc:
ef:ab:40:1f:0e:66:b7:08:fa:12:72:66:9e:f3:7d:
b4:cd:c7:71:df:05:ef:b3:6d:b0:7d:b5:1a:f7:78:
d8:47:41:6b:8b:16:6f:af:a3:67:18:94:00:b7:d5:
4c:34:4e:e8:68:ed:af:06:42:24:7e:d9:c3:2f:8e:
85:e6:4a:c0:71:d6:d6:a4:51:7f:43:ba:52:5a:a3:
34:f5:35:a0:03:d3:7a:d3:53:16:e2:9f:2f:87:81:
f8:9e:d7:9c:64:45:98:4d:5a:aa:85:98:9e:b4:b0:
03:57:9b:89:7e:18:fd:d3:72:3f:17:96:c8:48:f8:
bb:df:ad:7d:27:e0:0a:81:c7:58:7e:01:d6:89:75:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:17:61:54:27:4E:88:97:0B:09:81:8B:4A:A5:C7:46:44:FA:85
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.159.77.0/24
IPv6:
2405:3340:e000::/48
Signature Algorithm: sha256WithRSAEncryption
5b:7f:d2:36:34:57:70:16:53:a9:ae:d3:f2:f5:ae:e7:ab:b3:
ee:88:cf:91:de:56:a3:7c:5d:9a:ab:4e:97:15:14:5e:3f:d6:
8e:a6:5d:30:56:eb:e2:bf:f9:c8:a8:6a:10:0a:a3:6c:f3:c0:
62:c9:81:b1:db:23:9d:fe:f1:eb:98:1c:06:9b:6e:f5:53:bd:
a1:95:2f:2d:75:84:31:e5:a3:27:48:88:38:9f:81:78:a1:3c:
d1:18:b3:66:4c:15:b1:13:ff:11:7c:da:0d:0f:73:4b:d1:f2:
05:1a:96:54:ed:bc:92:19:5b:9d:d1:77:49:d3:a2:10:0a:54:
41:2f:db:33:e9:d1:08:59:12:53:c6:78:a3:fe:8a:07:57:35:
37:c8:2d:63:82:d5:6c:9c:1e:01:a3:87:a1:41:9a:b3:d9:0f:
f2:2f:e0:fc:0f:a7:b2:18:eb:d1:98:e1:26:74:8c:c2:79:51:
4c:6b:b3:ac:91:b0:34:13:dd:fb:7d:d7:84:40:f9:bf:34:79:
04:b5:40:75:6a:a6:27:ac:a1:3d:66:bd:57:c9:17:4a:bf:33:
c9:9c:8c:6b:55:1e:f3:99:63:53:02:68:4d:c5:a0:a0:b2:c9:
16:5c:e6:72:c9:fe:70:b6:09:89:89:f8:41:f8:61:c5:23:e3:
f2:c1:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:09 2025 by rpki-client