Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F8C02F3CDA4E11EC9C09A446C4F9AE02.roa
File: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (raw, json)
Hash identifier: ek3DgpwlstOVnuguW/pHkiP1RxK/zlxH+dHxarNuX94=
Subject key identifier: 9F:16:D0:17:0D:09:83:C7:6B:ED:FD:E6:68:B7:D7:0E:0B:2A:C1:2E
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 07F0
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F8C02F3CDA4E11EC9C09A446C4F9AE02.roa
Signing time: Tue 28 May 2024 23:03:14 +0000
ROA not before: Tue 28 May 2024 23:03:14 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 36131
IP address blocks: 164.90.99.0/24 maxlen: 24
164.90.100.0/24 maxlen: 24
164.90.101.0/24 maxlen: 24
164.90.118.0/24 maxlen: 24
164.90.119.0/24 maxlen: 24
164.90.120.0/24 maxlen: 24
202.63.47.0/24 maxlen: 24
202.63.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A
Validity
Not Before: May 28 23:03:14 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665662b2-13aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:68:f1:ef:06:35:90:01:73:7d:ec:f3:83:
16:5c:fe:f6:61:6c:13:30:0c:ca:49:20:68:bf:c3:
c0:d3:79:82:8e:62:a2:91:12:cb:23:0b:06:08:77:
21:6c:73:5c:d7:c3:a1:80:0c:3f:a7:42:1e:03:42:
7e:26:82:fa:06:8a:51:6c:c4:3f:3b:79:2b:d9:39:
ca:71:1c:b3:56:20:d5:cb:27:96:db:21:47:33:ac:
a4:3e:0d:81:29:ee:21:88:94:a6:19:ce:43:dc:b2:
a0:6c:9a:ef:b1:b3:db:76:83:78:19:7d:c1:ea:c6:
76:c5:33:0e:28:b8:38:33:0b:c7:3a:96:d9:f2:2b:
ba:1b:e7:2f:da:2a:a3:9f:9b:44:8c:3a:09:39:b2:
19:ec:88:99:78:bb:c9:bb:df:a2:52:8d:53:9a:49:
d3:93:5a:26:9a:81:84:55:b1:d3:90:9e:e0:c0:28:
a7:49:40:ee:cd:ec:cf:18:83:dc:45:01:97:46:5d:
d7:8b:f6:25:f9:90:d9:6d:04:55:17:42:f5:b6:e9:
2c:44:b4:f2:57:a7:b9:19:79:35:5a:21:17:f9:2e:
f0:75:04:66:e2:bf:71:60:74:f5:b5:4f:ad:8f:7b:
27:58:10:6e:65:5a:26:f3:ee:b0:c9:1e:28:d8:86:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:D0:17:0D:09:83:C7:6B:ED:FD:E6:68:B7:D7:0E:0B:2A:C1:2E
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F8C02F3CDA4E11EC9C09A446C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.90.99.0-164.90.101.255
164.90.118.0-164.90.120.255
202.63.47.0-202.63.48.255
Signature Algorithm: sha256WithRSAEncryption
10:2a:f1:db:c7:12:da:12:cb:74:72:f3:6b:2b:b2:25:63:1c:
25:f0:f5:d8:5d:8f:80:76:36:d6:fd:5a:a5:3c:d9:6f:17:c3:
6b:28:b4:a7:57:32:3c:d3:3c:4a:d6:f8:2d:f7:bb:7f:3b:98:
f8:f2:3c:ff:e6:3d:03:81:a3:ec:8a:f0:da:37:f2:54:84:e1:
d8:a7:8c:e8:17:1b:78:71:72:a2:c4:fd:e4:3b:0d:21:a7:ed:
7f:a8:52:19:c4:0a:5c:00:92:6e:d5:f3:7e:bf:7e:8e:57:ae:
76:b4:b6:a1:ae:02:7a:0c:ca:10:33:67:97:86:ee:57:ba:51:
54:bf:98:c4:81:11:47:a5:f7:6b:35:02:cb:b1:b7:34:72:dd:
88:dc:5a:e3:b9:1f:e0:6c:ff:33:ae:95:c0:1f:63:a5:12:69:
0a:ee:a7:78:77:7d:32:90:87:96:ed:78:2e:10:bc:3e:4c:da:
b3:94:31:1d:2f:37:68:76:7a:e7:80:91:44:3c:75:ef:16:29:
8e:27:fd:0f:dc:ff:dd:13:b4:80:0f:e4:26:a1:9e:4a:95:1f:
7a:97:31:38:4b:3e:5f:eb:ce:f9:0e:3f:52:9f:24:5f:e3:b6:
4c:38:c8:e1:5b:76:53:f8:16:53:ca:d8:fe:ac:4d:b3:ec:cb:
6f:ce:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:33:31 2025 by rpki-client