Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa
File: A87BC510622E11EC92E1870CC4F9AE02.roa (raw, json)
Hash identifier: 7MtcxTQ2rMr9wRU4t+OZ5IgSjQo76u9up+VI67f9CpM=
Subject key identifier: FD:38:93:36:D2:C4:39:5A:1C:E3:B4:49:1A:93:ED:76:0B:A3:B7:23
Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
Certificate serial: 03A9
Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa
Signing time: Tue 03 Sep 2024 02:14:40 +0000
ROA not before: Tue 03 Sep 2024 02:14:40 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 38259
IP address blocks: 122.248.0.0/20 maxlen: 20
122.248.0.0/24 maxlen: 24
122.248.1.0/24 maxlen: 24
202.84.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEB30
Validity
Not Before: Sep 3 02:14:40 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66d6710f-d888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:53:35:59:7c:3b:f2:2f:bc:5a:c7:2b:37:bd:
27:a2:81:c3:ec:89:63:1e:4a:37:16:4e:38:c8:06:
d0:0c:c1:86:0b:7b:48:bf:f9:9f:03:32:14:95:64:
d2:b2:7d:d5:4f:08:71:6c:5f:df:95:b2:aa:1d:e6:
99:2c:59:2b:fb:81:87:34:74:87:08:a3:91:1c:b0:
35:f5:28:54:76:9f:03:3f:76:e0:dc:c0:df:58:02:
9d:6f:e2:37:b2:35:b5:c4:65:bb:ff:9c:f5:59:0c:
88:2b:c1:88:82:6d:5f:c5:0b:60:42:d0:0f:ea:be:
95:bc:a2:e6:75:ee:5f:55:91:de:d7:c6:12:18:35:
ea:88:97:d8:e8:e8:a0:37:8f:43:c0:09:9d:9f:be:
46:58:8b:89:ce:79:7f:03:aa:1f:6e:92:20:21:44:
88:d9:9f:be:86:1e:7a:f0:ab:10:69:2f:be:2c:73:
14:cc:05:db:3a:3d:73:eb:df:80:8b:e8:c9:9d:19:
b5:72:0c:11:a4:34:df:51:6f:15:44:0c:ab:6e:36:
35:81:87:7d:e4:65:6c:71:44:da:f7:b7:02:b4:1d:
0d:25:b7:03:d1:26:f4:7a:ee:8b:44:ea:2b:58:ff:
02:03:59:7c:04:c9:90:68:bf:33:54:61:01:3f:02:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:38:93:36:D2:C4:39:5A:1C:E3:B4:49:1A:93:ED:76:0B:A3:B7:23
X509v3 Authority Key Identifier:
keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.248.0.0/20
202.84.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:f4:13:f8:ee:b5:96:e1:3d:de:6e:46:e1:f1:ba:48:31:9d:
32:df:c9:6b:0a:ac:53:d0:b4:d1:7f:b9:cd:a9:47:f7:2f:20:
c1:c8:33:cf:02:e1:fb:9a:48:a5:c2:71:07:8f:9e:00:34:45:
0c:47:aa:9a:03:0f:32:ae:1f:d9:9a:fa:52:01:d0:4f:7c:ff:
3b:65:57:3a:07:54:b7:de:dd:0b:d1:18:5c:83:98:04:7b:55:
d8:5e:3e:29:d3:4f:2a:65:3e:76:c6:84:7a:e8:09:eb:ed:c8:
8a:6a:13:e1:bc:df:5d:26:67:15:3a:51:de:2d:4e:27:8d:17:
03:aa:5b:a0:82:fd:3d:dd:4b:8b:46:4e:a0:22:7b:08:87:86:
0e:87:1a:bc:c7:57:f7:6e:cd:ea:dd:10:8f:95:b0:23:13:65:
f6:d1:c3:e8:ac:dc:c1:99:00:b3:39:62:7e:b8:a6:f0:81:34:
a3:16:1c:65:42:3e:1e:cd:74:a2:4e:9f:60:fe:fd:20:18:41:
7a:e9:6d:02:c2:7c:21:12:ff:b1:46:12:ca:a9:26:0c:71:6f:
db:37:2a:8b:76:60:20:54:f9:4c:3e:3e:fe:9a:9f:65:98:1f:
82:be:87:33:fa:e9:ad:64:e8:8c:b5:df:92:d4:68:c7:f2:b9:
5d:94:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:17:28 2025 by rpki-client