Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa
File: 6D6DED2830BE11EC9401610CC4F9AE02.roa (raw, json)
Hash identifier: WHACvNrcE0YDUYNFLw70C4k+Gn2fGHs4oAn4CLKhehw=
Subject key identifier: 3C:55:3F:12:0D:55:28:97:8E:C1:4E:09:00:C7:E5:C5:A5:E8:64:E7
Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial: 0DFA
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa
Signing time: Tue 26 Nov 2024 17:55:48 +0000
ROA not before: Tue 26 Nov 2024 17:55:48 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 38235
IP address blocks: 202.178.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3578 (0xdfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87B4
Validity
Not Before: Nov 26 17:55:48 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67460ba4-4302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:fd:32:de:b4:15:5e:26:23:df:ae:ab:9e:
db:66:57:26:26:6c:23:85:c9:91:5e:cc:75:ec:c3:
89:76:a1:2d:3b:96:ab:90:fd:b8:09:4d:f3:25:07:
89:52:64:8a:05:08:48:13:6b:69:eb:28:9c:ad:57:
b3:e6:2b:50:45:94:64:b1:2b:ea:e9:4a:6d:ef:6f:
c5:4d:56:c5:dd:1e:68:11:28:de:6b:fe:a1:1d:5c:
34:a2:f1:ff:af:d9:d4:00:b7:d9:c6:49:2c:e2:d6:
22:90:74:97:45:ae:af:11:4b:b1:48:61:61:7a:e5:
0c:73:18:96:b0:ad:b2:a4:20:96:4b:9f:90:fd:c7:
c7:18:e7:79:ab:c9:f0:d6:0a:3a:59:8e:cd:d5:51:
48:54:d8:ed:cb:27:79:4a:d2:2a:65:f6:78:4d:5a:
35:70:aa:22:dc:73:2b:ea:b2:40:11:48:87:0d:a6:
1a:91:9d:1b:09:34:c2:6d:28:c8:12:1e:e2:68:f7:
79:7a:65:08:5a:ea:72:bf:c9:4f:6b:35:5c:78:23:
77:ed:1a:01:b3:c9:d4:d7:14:c0:7a:ec:1d:f4:3d:
94:6d:8c:62:39:e2:01:fc:ac:25:a2:36:33:7f:be:
ed:d1:b9:5f:9b:03:96:3a:05:9a:a7:65:b7:14:38:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:3F:12:0D:55:28:97:8E:C1:4E:09:00:C7:E5:C5:A5:E8:64:E7
X509v3 Authority Key Identifier:
keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.178.112.0/20
Signature Algorithm: sha256WithRSAEncryption
27:07:78:7a:0c:5d:85:8e:b0:07:e2:d5:6c:96:36:1e:10:1e:
db:f0:85:44:a0:81:3e:a7:fb:37:67:1e:76:e0:0d:d2:f1:a9:
3a:1d:e5:69:c6:03:ee:99:2b:41:13:02:f7:55:ac:d5:80:98:
6f:7e:55:38:37:e4:a5:f5:e7:d8:49:48:07:cd:07:c8:a1:c5:
05:e1:ee:88:7a:c7:02:3b:33:c1:65:b0:a6:47:63:29:df:4e:
aa:84:1f:49:12:d4:5e:89:35:4b:49:e5:bd:88:5b:a2:8e:b7:
67:81:af:4a:b2:64:5e:0e:42:97:de:61:8b:cc:28:a4:3d:1d:
8c:da:4f:d7:e0:82:54:30:bf:71:80:31:51:e1:b1:fb:2d:91:
96:45:d1:3f:ea:ae:62:24:32:98:2a:65:28:44:31:d4:c8:f1:
51:b9:40:76:54:96:41:71:f8:de:45:81:8d:49:4c:6e:a2:c2:
5b:84:2f:41:9b:e8:7a:ee:f2:90:9b:92:49:26:6c:6d:27:d9:
cf:39:b4:69:6c:65:b1:13:be:21:dd:8b:9f:1c:eb:4e:80:f9:
e2:af:24:64:91:48:18:ed:e6:2e:26:53:1a:77:47:68:e8:46:
09:8a:dc:2f:18:a3:a5:35:58:5e:d0:1a:38:96:34:96:48:96:
27:0d:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:26:00 2025 by rpki-client