Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
File: 53CAA3B2023811EBA421D755C4F9AE02.roa (raw, json)
Hash identifier: gjOpVTIrCg/GRDI2g0j816CEONXvKaN06KAW+xe46vM=
Subject key identifier: 9B:A5:68:1E:5C:59:1E:6B:29:3B:11:0D:24:F2:41:B4:91:E3:A2:4C
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0A90
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
Signing time: Tue 22 Oct 2024 19:59:06 +0000
ROA not before: Tue 22 Oct 2024 19:59:06 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58807
IP address blocks: 223.118.32.0/24 maxlen: 24
223.119.8.0/21 maxlen: 21
223.119.10.0/24 maxlen: 24
223.119.26.0/23 maxlen: 24
223.119.28.0/23 maxlen: 24
223.119.32.0/24 maxlen: 24
223.119.34.0/24 maxlen: 24
223.119.35.0/24 maxlen: 24
223.119.36.0/24 maxlen: 24
223.119.37.0/24 maxlen: 24
223.119.74.0/23 maxlen: 24
223.119.88.0/23 maxlen: 24
223.119.100.0/24 maxlen: 24
223.119.192.0/24 maxlen: 24
223.119.253.0/24 maxlen: 24
2402:4f00:f000::/36 maxlen: 36
2402:4f00:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF
Validity
Not Before: Oct 22 19:59:06 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67180409-2559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:e1:90:e8:4f:f8:eb:ff:e5:0f:fe:3d:26:
b8:db:02:89:c4:f5:5a:a3:96:0f:08:2a:07:b3:4c:
7b:88:b1:fd:3b:7d:08:b3:02:d8:25:92:c8:1e:68:
ad:a1:1e:5a:32:c4:e7:00:43:41:35:98:fe:a9:9c:
4b:44:9d:29:fd:f6:7b:27:eb:54:bd:2f:8b:83:bb:
2b:b0:9a:1d:5e:d3:05:cc:89:5c:2a:33:ba:66:0f:
ba:37:e2:b5:c0:d3:97:cf:31:18:0e:18:9c:2d:ff:
f5:15:fb:55:41:06:cc:25:a8:48:00:82:97:ff:72:
a5:fa:9b:d1:2d:0a:ea:b6:32:0d:52:02:11:49:9e:
36:44:14:63:ea:91:0c:5e:6e:36:1a:da:fd:97:07:
91:03:bb:4e:34:08:4b:66:07:d1:0d:85:8c:62:77:
a0:19:ca:3a:53:bb:0a:0e:ac:4a:f5:01:04:65:34:
a4:f1:ae:f7:d5:7e:31:a8:4f:94:a6:6c:a8:1d:c5:
e8:dc:9d:20:dd:eb:d0:c6:fd:08:05:98:a4:c1:4c:
3c:2a:19:d4:3a:69:45:35:d1:01:fa:e1:28:7a:cd:
20:de:4a:75:b1:39:be:fd:35:21:dd:dd:7a:98:c3:
53:6b:94:52:36:d9:c2:1e:2f:54:0d:2d:b7:bf:12:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A5:68:1E:5C:59:1E:6B:29:3B:11:0D:24:F2:41:B4:91:E3:A2:4C
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.118.32.0/24
223.119.8.0/21
223.119.26.0-223.119.29.255
223.119.32.0/24
223.119.34.0-223.119.37.255
223.119.74.0/23
223.119.88.0/23
223.119.100.0/24
223.119.192.0/24
223.119.253.0/24
IPv6:
2402:4f00:f000::/36
Signature Algorithm: sha256WithRSAEncryption
04:66:57:98:d8:3d:04:cf:fa:3b:84:72:b9:df:a6:da:52:3d:
22:48:d7:f0:70:ab:c9:ba:9e:93:be:98:42:c3:fa:7a:6e:ca:
51:a5:de:07:bb:a2:6f:79:b7:da:50:b1:33:6c:5e:ef:b8:bd:
c2:54:a0:a4:fd:6b:cd:f0:fc:40:c8:43:b0:63:7b:2f:28:cb:
5a:9b:ec:ae:65:d5:a1:be:cf:a4:67:01:59:13:af:3d:9e:33:
67:78:f8:c0:c9:3f:05:14:ca:f0:0b:f6:86:4f:0c:48:e9:c8:
12:44:08:4d:c4:fe:49:15:5c:84:78:1c:69:4c:f9:af:51:79:
fe:54:8d:c5:74:17:f1:df:81:4e:2b:b4:da:c7:bf:4e:89:e6:
e1:06:6b:17:88:76:4d:18:4e:32:95:28:dd:46:90:4e:5b:51:
e7:f7:b5:41:7b:ca:95:27:8c:01:e4:03:bf:f8:c1:74:8d:b9:
5d:c8:20:91:6e:d3:69:db:db:18:b0:5b:ea:b1:6f:8b:c4:18:
19:a3:9d:3b:12:04:00:ae:a7:e8:21:75:e3:3e:cd:b4:fd:0b:
eb:55:00:a8:85:04:5f:f9:d9:14:f9:d0:e7:fb:58:fb:cc:a4:
6d:a3:46:a6:07:18:2a:9a:18:bb:e7:66:84:16:77:c4:16:d7:
b1:35:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:12 2025 by rpki-client