Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa
File: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (raw, json)
Hash identifier: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=
Subject key identifier: C5:BF:41:B4:7B:58:2C:06:E8:99:70:D4:CF:3A:9C:0F:D5:9B:17:69
Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial: 06CA
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa
Signing time: Sat 26 Oct 2024 22:03:12 +0000
ROA not before: Sat 26 Oct 2024 22:03:12 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 55834
IP address blocks: 49.0.8.0/23 maxlen: 23
49.0.8.0/24 maxlen: 24
49.0.9.0/24 maxlen: 24
49.0.10.0/23 maxlen: 23
49.0.10.0/24 maxlen: 24
49.0.12.0/24 maxlen: 24
49.0.13.0/24 maxlen: 24
49.0.14.0/23 maxlen: 23
49.0.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B58FF
Validity
Not Before: Oct 26 22:03:12 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=671d6720-31eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:44:05:f9:bb:a4:3d:ed:e3:11:72:b4:35:
07:34:93:69:50:35:bc:e8:a4:b1:e0:aa:fe:c7:1a:
9f:16:af:27:c3:19:b9:01:6e:c0:c3:66:41:b2:32:
7e:6d:1e:e7:64:8b:26:38:e2:bc:4a:0b:ce:ff:62:
36:fa:27:44:88:c9:64:18:c7:53:b0:16:e8:95:a5:
33:76:77:f7:78:24:e5:66:b4:81:6b:fb:6b:12:2b:
3e:fe:57:76:72:63:f5:e3:e0:30:70:7c:60:32:f0:
b0:19:73:30:2e:14:56:7e:b3:a7:d1:7e:ea:16:2e:
47:10:3a:91:78:f6:ea:5f:49:da:e8:05:b7:3e:a3:
48:59:b3:60:d4:85:43:4e:95:9f:8e:ea:6f:09:0b:
ba:67:92:2a:66:13:07:c1:2f:86:71:fa:39:d3:5d:
db:b6:9d:a6:42:62:6c:21:8e:09:06:2b:5f:5a:ab:
6c:cd:a6:94:3f:2b:6a:99:ef:23:6b:cd:1a:c8:47:
c9:84:af:65:1e:66:88:7b:f7:28:4f:d1:27:02:aa:
9a:57:30:27:78:80:fe:00:2e:a8:fc:82:7d:2e:4c:
f7:dc:e0:65:40:64:c1:b5:e2:af:17:72:f2:bc:9c:
f8:63:75:03:05:8e:60:5a:ea:da:10:6c:08:c2:00:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BF:41:B4:7B:58:2C:06:E8:99:70:D4:CF:3A:9C:0F:D5:9B:17:69
X509v3 Authority Key Identifier:
keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.0.8.0/21
Signature Algorithm: sha256WithRSAEncryption
76:32:2c:a3:21:18:68:42:e4:5e:be:d5:34:39:35:fb:ef:fe:
8d:b1:83:55:6e:94:11:c1:94:ae:02:4d:2a:63:c9:d0:2c:e3:
98:5a:81:94:56:25:f2:35:e3:e2:3c:82:53:1e:e6:9e:5b:34:
3b:d5:f3:06:d5:6a:91:51:ba:23:3c:eb:f4:b9:cb:f0:bd:16:
e2:8f:93:2f:8f:e1:d4:6f:f5:cb:37:9f:9c:b2:1f:29:ca:3d:
56:45:c7:f3:18:3f:42:bf:fa:ff:04:63:fb:e4:e1:bd:4a:71:
0c:2e:59:a4:28:d1:e4:33:fe:1f:0f:91:97:70:dc:ef:ff:e6:
b9:c0:69:22:bb:53:47:ba:b7:5d:33:e1:e8:73:df:d7:c2:ec:
22:0a:70:3c:4e:fc:91:8b:9b:fe:e5:a7:cd:10:09:87:7d:93:
ff:c0:e9:25:ae:3b:4e:e1:ca:5e:6f:c5:29:5c:c1:1f:93:fd:
08:39:88:89:9c:04:55:a8:a3:1f:a6:e6:fe:b8:fe:cb:bf:9f:
ee:0d:7d:d9:35:34:32:8a:19:a7:78:98:f3:2a:ce:89:dd:4f:
d4:1a:f7:4c:b8:08:8a:62:20:d7:5f:60:10:93:70:b4:13:f6:
3c:70:31:55:10:23:86:77:e0:a2:9a:3c:47:da:b3:fd:b0:67:
f9:f0:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:51 2025 by rpki-client