Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F1D9CD5E099A11EAB5891D5BC4F9AE02.roa
File: F1D9CD5E099A11EAB5891D5BC4F9AE02.roa (raw, json)
Hash identifier: a8AgtCob340nx8yuXL+f5RfLTroT5sWQn5L8IBvoNJc=
Subject key identifier: 0E:98:EE:7A:07:C3:14:28:81:76:57:56:1D:C8:17:25:7E:B9:28:44
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 0F7F
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F1D9CD5E099A11EAB5891D5BC4F9AE02.roa
Signing time: Fri 28 Feb 2025 19:29:57 +0000
ROA not before: Fri 28 Feb 2025 19:29:57 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 397225
IP address blocks: 120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3967 (0xf7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA
Validity
Not Before: Feb 28 19:29:57 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c20eb5-076a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:39:5f:bb:a8:7d:98:20:79:0f:8f:dd:3c:
05:ee:f9:0a:03:ab:f1:42:c2:38:a8:af:09:62:25:
51:34:51:a0:1a:08:9d:c1:f0:7f:39:84:ee:70:4c:
3d:aa:ca:f9:69:36:70:1f:ef:9a:34:85:69:65:97:
8c:21:a5:37:1e:b2:29:0c:62:b2:e3:94:0a:05:f5:
eb:70:5c:70:3e:51:e0:0c:93:ba:7f:19:fb:a9:9f:
4c:88:9d:51:69:db:40:2b:1a:63:e2:a2:b5:4b:e3:
b4:a9:38:c4:f1:56:e8:de:c4:e0:65:b2:31:db:b1:
9d:78:d5:ae:95:57:68:8b:6a:75:d4:03:5f:9a:a2:
c9:4e:50:8d:49:0f:9c:f1:b2:88:05:b7:15:b2:a8:
9c:d2:98:16:9c:9d:87:54:13:c2:5e:d1:0f:a4:3d:
ec:2b:ea:23:99:76:7c:70:5f:48:42:9f:4f:f9:e2:
66:3d:4c:76:b7:9c:fa:bc:f1:92:aa:8b:b6:00:58:
14:78:7c:65:e4:82:29:58:29:46:21:c5:c6:be:00:
e9:c9:85:b9:f4:76:86:d9:bd:a1:e1:8a:0e:f3:5c:
1b:ee:eb:cf:14:83:a6:4d:c4:e5:e8:c7:36:1a:59:
10:c0:0c:30:01:ce:56:03:ac:61:e6:04:ae:94:10:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:98:EE:7A:07:C3:14:28:81:76:57:56:1D:C8:17:25:7E:B9:28:44
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F1D9CD5E099A11EAB5891D5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
1a:da:f5:b6:9a:1a:3b:1d:9a:34:da:f7:7b:ae:16:66:13:ef:
ea:9a:ca:9a:f7:ed:aa:c6:01:8a:63:f2:9a:7f:8a:38:4c:39:
c5:90:67:2d:45:cd:68:5f:5e:5b:e2:f6:4f:4d:aa:33:0b:a5:
81:29:bb:7d:72:e5:c7:ee:23:e8:fd:2d:06:e0:9c:73:29:ca:
35:31:52:6a:fa:14:b7:23:09:80:ee:dd:6f:ef:5d:a1:09:99:
89:76:6f:9c:57:69:85:f9:61:38:bf:6a:43:e0:11:d2:b7:b2:
8b:fa:e6:0a:dd:21:e7:77:0d:80:66:f6:e5:6b:33:a8:79:1b:
9c:45:12:8c:65:43:24:93:de:9f:38:ee:84:e0:c4:eb:4c:5c:
b5:c2:fb:be:35:43:8a:a7:fb:40:68:00:fc:96:07:02:cc:9a:
90:c6:fc:d6:0b:79:d9:fd:08:f1:36:f0:d4:2f:29:47:ae:89:
02:96:06:20:7f:23:0f:8d:99:59:1d:a2:0b:a9:aa:79:1c:b4:
02:37:dd:d4:c3:7e:24:79:2c:47:c4:79:e6:80:7b:ce:d3:93:
cf:8a:ac:33:e0:02:d7:34:ca:96:ec:23:1e:b9:fa:94:e3:69:
61:20:70:1c:cf:00:82:9d:93:65:e7:5f:85:48:4e:10:fd:0e:
10:29:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:25 2025 by rpki-client