Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/FFAB3BEA093D11F09D0BF611C4F9AE02.roa
File: FFAB3BEA093D11F09D0BF611C4F9AE02.roa (raw, json)
Hash identifier: yI/j1xgiS/fqVtmbq53pKNzmCkVrwuDmHepyJ+SQ0M0=
Subject key identifier: DD:96:25:BB:8F:2B:20:50:B0:5C:3C:5E:21:AA:C2:09:90:B4:F6:DC
Certificate issuer: /CN=A918BAEC/serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
Certificate serial: 04
Authority key identifier: 7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/FFAB3BEA093D11F09D0BF611C4F9AE02.roa
Signing time: Tue 25 Mar 2025 05:57:14 +0000
ROA not before: Tue 25 Mar 2025 05:57:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149024
IP address blocks: 163.223.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BAEC
Validity
Not Before: Mar 25 05:57:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67e245b9-c582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:de:2f:a5:68:2e:56:c2:8d:ee:7c:7a:36:
d0:46:9a:53:26:a1:82:f1:d6:76:4d:27:39:04:7b:
02:0d:af:2b:e3:f4:2d:f5:cb:97:0e:99:9d:bf:65:
36:46:1a:46:1c:5f:8c:19:ef:19:9d:fd:b7:ea:a3:
f7:a3:6a:4a:f2:45:6d:3c:4c:b0:f3:33:aa:50:ed:
d9:f3:36:3c:95:89:fa:3c:bd:1a:d6:ba:ef:82:00:
e4:4c:6a:41:80:8b:a9:26:87:44:c2:fc:1d:7c:e5:
bf:63:6a:f3:58:f1:00:e9:c9:9c:d6:1e:03:fa:9a:
99:c3:ea:e4:22:1f:83:7b:0d:29:4d:ba:5c:3d:b1:
81:0f:9c:5c:e6:7a:ad:14:ba:be:d2:b1:fd:a5:67:
d8:70:97:34:df:01:3a:41:5f:48:bf:6d:c3:88:01:
0b:d9:e8:56:62:fa:c4:70:1e:b4:40:da:d1:9a:2c:
23:25:9b:33:34:7a:61:0e:f3:c9:2e:e4:fa:6a:f5:
80:d0:b8:8f:bb:42:43:cb:09:ee:92:e0:93:3a:43:
41:fa:1a:1b:5b:4f:70:0d:68:ed:e4:79:73:bc:df:
4f:be:e9:26:7f:99:d9:7e:4a:4e:51:a7:24:35:a9:
3d:3e:96:ad:11:d6:c1:a5:c5:6c:68:26:c9:5d:e9:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:25:BB:8F:2B:20:50:B0:5C:3C:5E:21:AA:C2:09:90:B4:F6:DC
X509v3 Authority Key Identifier:
keyid:7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/FFAB3BEA093D11F09D0BF611C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.180.0/23
Signature Algorithm: sha256WithRSAEncryption
63:29:41:9c:aa:80:08:73:b2:90:d0:2d:89:c8:ff:73:d7:b9:
53:ba:ed:da:f7:7f:a5:e5:3a:b1:25:88:51:af:b5:06:c6:a8:
c9:ce:da:ac:15:9a:cf:53:d1:70:a0:c1:da:60:91:a1:75:1a:
fe:4f:48:44:24:f5:c1:df:fb:8e:3c:dc:29:db:23:0f:0b:c2:
1e:fe:93:85:fd:cf:48:14:ae:2f:a2:c7:d7:d8:63:f4:03:5d:
f2:e1:5f:51:21:bf:94:cb:1a:72:b2:f0:a3:22:63:bb:84:6b:
f5:ac:ce:ee:6f:52:9d:0c:39:38:45:d3:14:50:23:49:08:ff:
9e:e1:17:df:1c:dd:c9:76:7c:84:27:e9:53:fd:4b:6a:47:6b:
5d:95:19:ca:fa:be:82:13:3e:db:2c:86:b4:e6:26:57:13:e4:
2d:fb:f9:eb:87:5d:b6:d4:63:4a:80:67:dc:38:58:aa:b8:ea:
40:60:12:4a:32:3a:02:59:2f:ee:64:14:42:04:d3:49:8e:15:
27:01:de:d4:f9:98:f3:af:66:e2:07:74:69:37:49:11:b5:77:
68:4d:b5:f3:dd:3f:7c:02:67:b6:4f:72:42:1d:b4:2d:b9:0d:
73:51:b3:dc:f5:ec:3b:2f:15:ea:bf:07:11:db:03:eb:64:37:
0a:04:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:19 2025 by rpki-client