Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/2110795ED38E11EDADA86381C4F9AE02.roa
File: 2110795ED38E11EDADA86381C4F9AE02.roa (raw, json)
Hash identifier: 3scFbI2eqJmRXNfrH/g1NhiMJkdzFzRzL2hCN9j3R/w=
Subject key identifier: CA:02:90:40:D5:07:2C:A9:6D:7A:AD:1C:21:8D:E4:BA:3E:22:D4:AE
Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial: 0424
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/2110795ED38E11EDADA86381C4F9AE02.roa
Signing time: Sun 11 Aug 2024 00:51:58 +0000
ROA not before: Sun 11 Aug 2024 00:51:58 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38224
IP address blocks: 112.109.96.0/19 maxlen: 24
114.31.224.0/20 maxlen: 20
114.31.224.0/23 maxlen: 23
114.31.226.0/23 maxlen: 23
114.31.228.0/23 maxlen: 23
114.31.230.0/23 maxlen: 23
119.252.144.0/20 maxlen: 20
119.252.144.0/21 maxlen: 21
119.252.144.0/24 maxlen: 24
119.252.145.0/24 maxlen: 24
119.252.147.0/24 maxlen: 24
119.252.148.0/24 maxlen: 24
119.252.152.0/24 maxlen: 24
119.252.153.0/24 maxlen: 24
119.252.154.0/23 maxlen: 24
119.252.156.0/22 maxlen: 22
119.252.156.0/24 maxlen: 24
119.252.159.0/24 maxlen: 24
202.137.232.0/21 maxlen: 21
202.137.234.0/24 maxlen: 24
2405:e200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D025A
Validity
Not Before: Aug 11 00:51:58 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66b80b2e-f32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:bf:41:ad:ab:da:9a:ba:da:46:7f:72:5c:
6b:7a:6d:29:17:ef:d3:8d:8c:9b:6b:ac:e6:0f:29:
05:a6:e1:63:2b:17:61:eb:24:2d:db:ac:78:d7:d5:
ae:8c:89:d4:14:c2:80:7b:d0:2a:ab:81:8c:a7:de:
b4:fc:4c:76:0c:1c:43:f7:b1:ff:07:27:2a:95:c6:
54:a6:da:20:26:86:c8:02:41:f6:57:bf:fd:c0:8c:
a7:a1:b7:96:93:59:39:14:72:87:40:79:94:5b:8f:
ed:26:21:e2:52:c5:2e:9f:a8:cb:d3:da:df:9d:08:
c6:2e:9c:59:83:d5:18:c2:59:92:a6:cd:26:1a:c7:
e3:51:cb:f1:f8:36:57:bf:bf:2d:1b:77:b8:12:f3:
27:58:1b:b4:4e:a6:91:65:6d:2a:0c:ce:c3:4e:c9:
89:3a:0b:11:a4:4a:82:4a:87:cb:6b:dd:34:86:41:
4d:7e:44:24:d2:66:38:e5:97:20:a8:19:89:42:f0:
77:19:63:c3:c3:95:8c:f4:77:2c:c2:93:2f:eb:31:
8c:c9:99:56:2e:1e:16:10:46:c2:84:17:99:51:ba:
6f:6f:37:4d:8b:ca:8a:37:9b:0e:95:40:fe:98:e7:
b7:a1:b8:6c:c7:0e:41:27:68:e0:91:42:ad:57:2f:
79:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:90:40:D5:07:2C:A9:6D:7A:AD:1C:21:8D:E4:BA:3E:22:D4:AE
X509v3 Authority Key Identifier:
keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/2110795ED38E11EDADA86381C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.109.96.0/19
114.31.224.0/20
119.252.144.0/20
202.137.232.0/21
IPv6:
2405:e200::/32
Signature Algorithm: sha256WithRSAEncryption
d1:61:74:6d:4b:7d:d8:f4:da:83:2d:d7:38:39:cc:35:66:f6:
c2:67:e9:02:50:f8:26:4f:bc:ae:ad:b3:a5:28:6a:bf:c5:eb:
c0:5a:ba:52:a8:98:6c:d2:dc:98:52:57:b0:08:34:40:42:fe:
b5:99:52:a5:0b:ce:a1:18:6a:e4:20:bf:32:86:04:bf:de:6d:
50:8b:b3:94:74:9a:7a:9f:51:81:87:d5:8d:40:ad:50:ed:ee:
04:1b:e8:97:c3:d0:7e:54:77:2b:1b:d2:44:0f:60:62:fb:a7:
d7:c5:31:d0:1d:23:3f:23:49:57:bd:5a:c0:2a:5d:07:3e:0b:
1c:cc:47:2c:d7:e8:71:c5:ee:0a:1a:65:a4:be:98:c3:1d:f3:
04:f6:5d:10:df:93:b2:d5:8f:d8:3a:03:02:9d:a6:5d:a4:d5:
52:2a:28:bd:f4:39:cd:48:d1:31:fb:83:75:be:77:e3:d7:6c:
6e:0e:42:b0:d4:ae:0a:62:eb:61:55:c3:1d:f7:2e:6b:fd:89:
99:66:fb:3e:37:5e:66:28:f8:d2:63:8a:93:62:e0:c8:f0:d6:
d7:9d:c5:c9:a5:30:2f:9a:1e:f6:59:a0:6b:cb:f0:31:32:38:
64:3f:83:ee:89:d4:97:90:6e:44:73:91:8c:ae:df:74:89:69:
0a:20:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:43 2025 by rpki-client