Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/E009A066072B11EAB6E08A52C4F9AE02.roa
File: E009A066072B11EAB6E08A52C4F9AE02.roa (raw, json)
Hash identifier: 4SqIkb1OTSgOBPyoPlmo5OcZbHHLhA/uBdR3qwJnhQM=
Subject key identifier: 11:DC:F5:5A:4B:B9:4F:3B:22:E2:39:AA:7E:F5:34:8A:88:F7:F7:22
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 0F93
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/E009A066072B11EAB6E08A52C4F9AE02.roa
Signing time: Fri 28 Feb 2025 19:30:24 +0000
ROA not before: Fri 28 Feb 2025 19:30:24 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 58620
IP address blocks: 119.161.48.0/24 maxlen: 24
119.161.51.0/24 maxlen: 24
119.161.61.0/24 maxlen: 24
120.29.248.0/23 maxlen: 23
120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:21::/48 maxlen: 48
2001:dcd:23::/48 maxlen: 48
2001:dcd:24::/48 maxlen: 48
2001:dcd:31::/48 maxlen: 48
2001:dcd:33::/48 maxlen: 48
2001:dcd:34::/48 maxlen: 48
2001:dcd:35::/48 maxlen: 48
2001:dcd:42::/48 maxlen: 48
2001:dcd:43::/48 maxlen: 48
2001:dcd:44::/48 maxlen: 48
2001:dcd:45::/48 maxlen: 48
2001:dcd:52::/48 maxlen: 48
2001:dcd:53::/48 maxlen: 48
2001:dcd:54::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3987 (0xf93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA
Validity
Not Before: Feb 28 19:30:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c20ed0-18cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:96:55:4a:f7:2d:4c:f6:ea:82:80:b3:05:
44:3b:02:43:88:f0:96:35:d5:0b:37:f6:eb:fe:4b:
f8:61:54:cf:d4:b3:96:c9:2a:c2:79:71:3b:3e:eb:
c4:c5:dc:77:53:2a:61:fc:54:44:fa:51:b9:85:4c:
f8:0d:ea:dc:71:96:3e:55:38:ac:90:00:d1:5e:63:
41:ed:15:55:a3:7a:c8:03:0b:f3:70:90:c9:8c:1e:
b1:f5:54:b6:21:1c:e0:b7:b6:55:02:68:00:14:6a:
20:04:cd:35:e7:95:09:24:d9:ea:ef:3d:77:cc:d9:
d1:d9:1a:21:2c:d4:05:e0:54:61:b7:85:e8:65:dc:
ce:6f:92:fa:04:4a:6d:5c:5b:1d:de:00:df:89:ab:
2f:79:57:1e:2b:cb:32:a1:db:16:05:eb:0f:76:30:
03:ce:27:b5:56:31:5d:b0:5d:2c:d9:f8:73:54:5a:
dd:57:ca:15:3e:75:15:21:ac:a8:7c:fa:a9:fc:3e:
64:a3:fa:bf:11:9b:c2:bb:b9:c7:92:29:94:fd:ac:
3c:16:aa:a6:9f:fd:a7:5e:62:c8:19:11:e2:aa:43:
fd:93:ff:f3:e5:55:30:38:99:6a:fc:9d:98:a3:5a:
24:c9:4c:68:dc:78:7d:6b:d2:92:da:8d:b5:b3:31:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:F5:5A:4B:B9:4F:3B:22:E2:39:AA:7E:F5:34:8A:88:F7:F7:22
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/E009A066072B11EAB6E08A52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.161.48.0/24
119.161.51.0/24
119.161.61.0/24
120.29.248.0/23
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:21::/48
2001:dcd:23::-2001:dcd:24:ffff:ffff:ffff:ffff:ffff
2001:dcd:31::/48
2001:dcd:33::-2001:dcd:35:ffff:ffff:ffff:ffff:ffff
2001:dcd:42::-2001:dcd:45:ffff:ffff:ffff:ffff:ffff
2001:dcd:52::-2001:dcd:54:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
59:51:86:c4:88:b0:40:1f:2d:a2:7e:05:2a:c0:24:72:ab:e0:
34:ce:51:f9:da:85:f6:af:c7:5b:11:a2:bf:4e:d1:d3:de:8c:
4c:7e:96:63:8b:f6:f0:87:54:54:43:e4:ba:4f:ab:8a:30:e1:
04:08:73:99:5b:7d:64:49:1b:fa:f2:cd:6e:4b:50:ef:0a:7d:
5a:be:c2:60:ac:31:be:6a:90:c3:30:6d:31:0b:0f:ab:f8:09:
8f:04:ec:9d:83:2c:95:19:c9:28:a1:9a:39:63:0c:e7:c7:cd:
34:1d:3b:dc:5f:45:16:02:bc:c3:6b:8b:48:30:37:7f:ce:15:
ef:24:93:d5:45:48:d4:69:57:8b:bf:e9:45:b5:6a:c5:d2:fa:
99:5c:c5:dd:da:c6:5e:d4:a3:03:a5:f0:c5:e8:25:df:a2:0e:
d0:8d:6d:44:e4:21:7a:89:4b:98:c6:11:13:48:e6:64:4b:09:
5a:cf:3d:ca:18:32:18:6d:ed:c8:7a:60:8a:2c:6e:a0:2b:ea:
7f:7e:da:a8:c6:d3:ca:ef:7c:f9:4f:67:01:73:13:dc:52:f7:
50:aa:14:92:3f:0f:1a:1d:4e:25:1a:91:04:f2:9b:da:c9:af:
f9:06:4f:8f:be:d3:1d:85:cf:71:c1:c3:bd:0b:53:6d:1f:c0:
fa:97:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:39 2025 by rpki-client