Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B026AFDE087D11F08C70F075C4F9AE02.roa
File: B026AFDE087D11F08C70F075C4F9AE02.roa (raw, json)
Hash identifier: WxoiL2/qNaACvD+du02AcJLL32hJEvlAq17tl1Ch1FA=
Subject key identifier: 50:61:01:62:C4:EE:A6:EF:30:92:90:B6:D7:F6:B1:A3:88:39:E1:39
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AC07
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B026AFDE087D11F08C70F075C4F9AE02.roa
Signing time: Mon 24 Mar 2025 07:00:37 +0000
ROA not before: Mon 24 Mar 2025 07:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153675
IP address blocks: 163.223.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44039 (0xac07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 24 07:00:37 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e10315-3107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:25:5e:1a:7e:71:71:64:9c:d7:19:36:46:
ae:09:f1:cf:32:e3:c8:13:13:58:6a:10:e0:95:a9:
64:b8:d1:0e:e1:6d:1f:e0:20:f3:0d:8e:f0:6d:94:
10:0d:51:4d:25:98:de:cb:0e:07:f9:3b:f9:2c:b1:
e0:2a:dd:32:6f:93:09:7b:a5:f9:e8:95:ef:58:29:
b4:f2:1d:3a:df:ad:2f:8b:4b:d3:15:05:fe:76:9d:
a4:8a:b5:35:d3:f7:33:af:81:8a:5b:97:d4:9d:4f:
9b:e6:08:e5:fe:73:44:3f:34:e5:56:91:ed:16:d7:
73:bd:6f:02:6c:2e:0c:59:f8:bc:98:6d:11:ce:0e:
11:b3:45:bd:00:29:bd:86:2c:e2:93:e0:1d:38:e7:
ea:3b:34:25:76:fc:25:45:42:bb:14:fd:71:96:56:
5f:2f:9e:f7:33:bb:bc:0a:61:56:3c:45:da:c8:ca:
2d:ec:85:85:fa:eb:44:cd:ee:78:00:81:9d:ad:c2:
ee:ac:b4:30:3b:39:4d:ca:49:4a:59:44:e9:fe:0e:
ca:ec:bc:4a:a0:f5:05:85:f0:80:68:6f:1a:e6:7c:
c1:cf:c4:8c:32:c0:d6:01:3b:74:70:dc:c5:ad:73:
6a:8c:7d:b7:3e:e2:8e:52:53:54:47:99:9b:57:46:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:61:01:62:C4:EE:A6:EF:30:92:90:B6:D7:F6:B1:A3:88:39:E1:39
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B026AFDE087D11F08C70F075C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.46.0/23
Signature Algorithm: sha256WithRSAEncryption
13:41:ef:b5:ec:11:32:71:63:da:72:c5:50:15:2b:25:50:d7:
78:11:b8:d9:97:bd:ea:f8:b1:2d:a9:7a:93:f8:2e:e3:e0:79:
be:6f:7b:83:73:c3:ee:41:b3:a6:40:e3:04:49:3b:32:c3:10:
9a:03:75:5c:d6:ab:a1:c0:3d:d9:40:82:8b:bd:c0:4b:ef:e3:
2b:40:1a:59:35:c7:9f:c6:e8:5a:45:ca:0a:bf:0e:fa:9a:c1:
95:50:a9:f1:f1:e6:85:56:b0:5f:ae:02:e7:15:7a:bf:e4:5e:
30:3b:ac:69:05:99:ad:7f:34:9e:a2:e2:28:42:e1:cc:03:2c:
1c:e6:7e:0d:46:21:5c:f0:d8:ba:7a:68:4b:d1:33:e8:50:76:
12:85:3c:9c:dc:09:73:3f:be:46:df:62:2b:3c:fd:41:32:b4:
b2:af:d7:76:29:26:74:7f:4a:2a:4a:68:68:ef:01:20:68:ca:
4c:1f:23:6a:da:4e:e5:b7:54:4e:8d:1e:56:24:d6:77:f7:39:
c2:50:cd:0a:0b:93:eb:5e:ac:db:42:9d:cb:c5:96:26:7f:4e:
0d:81:93:b2:8c:8a:f1:b8:1b:cf:9e:7e:99:6f:96:de:a5:82:
05:03:2b:0b:e1:07:e4:54:4d:03:68:d5:b5:27:12:db:b1:a6:
62:8f:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:06 2025 by rpki-client