Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/28111E50700B11EFAE32B25FC4F9AE02.roa
File: 28111E50700B11EFAE32B25FC4F9AE02.roa (raw, json)
Hash identifier: XXuJm46uHpZHmYItl9dfHPQ08cNfNbo1TOpvDvMppfQ=
Subject key identifier: F1:A6:C9:38:6D:3E:9D:49:C1:6E:BE:BB:2D:06:66:39:DC:AA:35:2A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4A40
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/28111E50700B11EFAE32B25FC4F9AE02.roa
Signing time: Sun 23 Mar 2025 07:27:01 +0000
ROA not before: Sun 23 Mar 2025 07:27:01 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 23899
IP address blocks: 117.122.120.0/22 maxlen: 24
2001:dc8:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19008 (0x4a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Mar 23 07:27:01 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67dfb7c4-7cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:60:a6:da:8b:6a:72:10:bb:06:22:fe:a5:05:
49:8f:82:e0:c0:01:b4:2d:77:9f:00:48:4d:45:97:
59:79:d4:76:32:79:ca:ba:c0:ee:ac:6a:0e:40:ad:
93:69:9e:89:d2:cf:e2:0a:90:61:1c:a0:51:19:8e:
58:66:28:69:90:9a:8b:85:3e:24:7b:53:2c:56:2c:
80:75:d9:e4:8e:fd:32:33:61:47:10:7d:7b:d8:36:
67:4b:12:0f:eb:67:15:4c:8b:7a:52:d4:42:22:63:
03:c8:6f:76:65:17:0a:f2:93:9c:8a:5e:a4:5e:ec:
03:9b:d7:81:84:56:5f:c3:b3:e9:9d:0d:2c:e3:a4:
66:a9:5a:a5:e6:2d:88:c8:b0:17:b5:b4:69:a5:da:
76:46:67:61:4a:d4:cd:fa:f4:6e:9d:58:b7:e7:7e:
6e:7c:72:b0:fc:50:72:26:dc:06:93:1f:da:76:bb:
ae:09:f1:5f:05:df:e5:24:f4:86:0a:51:cc:a6:71:
f8:54:57:6a:33:73:2a:94:f1:f6:36:f3:2e:fc:5b:
0f:50:20:e9:7f:36:43:76:6b:56:b3:95:5c:f9:27:
c0:6a:62:21:d3:ae:65:21:31:93:a5:b0:3d:60:07:
9b:e1:ae:10:24:20:a5:10:80:f1:dc:f4:e3:b2:41:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A6:C9:38:6D:3E:9D:49:C1:6E:BE:BB:2D:06:66:39:DC:AA:35:2A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/28111E50700B11EFAE32B25FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.122.120.0/22
IPv6:
2001:dc8:2000::/48
Signature Algorithm: sha256WithRSAEncryption
59:b9:5e:44:70:c2:9d:e3:2f:72:03:8e:e4:b0:2f:bc:b6:f7:
8f:26:e9:78:ee:49:15:71:14:ae:ec:b7:72:d1:35:ca:64:45:
09:c4:57:51:b0:0f:87:87:7d:c5:23:76:5c:f2:6b:00:f9:bc:
31:42:68:97:43:d9:00:13:87:ad:f6:1c:d9:e9:91:10:9e:04:
ec:a2:c5:52:d4:4f:77:d1:bf:44:b3:4f:74:70:d0:c3:bd:de:
24:dc:c9:a7:4a:ae:23:ab:68:e1:69:91:6c:78:d4:90:32:eb:
5f:3b:d4:db:11:03:cc:d9:08:64:61:10:fb:48:17:06:74:3c:
b8:a9:4c:7a:d0:b2:0d:10:00:4e:45:91:0a:1c:15:4d:0d:17:
b2:a0:04:50:4a:0f:46:1b:e2:21:da:4a:b9:52:54:8f:a6:7f:
4e:f9:7d:29:e7:f2:c5:78:40:df:a1:9b:3e:30:56:a0:6e:b8:
e9:33:91:95:cf:51:76:eb:ca:4a:47:df:be:b7:2f:c7:8b:f8:
55:e8:2a:fb:93:d0:4c:a0:c5:75:1e:f0:ce:07:1a:16:6b:02:
ab:1d:9c:73:a9:b9:1a:1f:15:4f:d6:85:a7:b7:66:b7:ef:d3:
e0:a0:30:4e:ed:ed:47:2f:1d:3c:e5:c5:ec:93:47:1a:d1:a1:
e8:48:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:41:14 2025 by rpki-client