Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4AA814BC3B3611ECB60C5429C4F9AE02.roa
File: 4AA814BC3B3611ECB60C5429C4F9AE02.roa (raw, json)
Hash identifier: SOTLfBHftmuqFaopezX83UuVgf8d9Ap8rEI0b+CEV1c=
Subject key identifier: 85:68:5E:32:38:F6:F4:8C:48:9D:65:73:4B:21:26:57:F6:42:76:47
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0566
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4AA814BC3B3611ECB60C5429C4F9AE02.roa
Signing time: Mon 01 Nov 2021 17:08:11 +0000
ROA not before: Mon 01 Nov 2021 17:08:11 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 17447
IP address blocks: 113.203.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Nov 1 17:08:11 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61801efb-358c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:dd:78:8b:84:61:3f:a1:fa:fd:9b:4a:83:
50:81:e5:6d:b5:05:af:42:c8:00:d4:ac:7e:82:a0:
f8:9f:71:1d:c8:c4:e8:75:af:0c:7a:2d:6b:42:5b:
56:ee:a2:00:6d:ef:d3:52:32:ad:43:66:8d:28:26:
0f:eb:74:a5:5e:9e:94:42:d0:99:f4:90:ad:6f:3a:
ec:0f:98:8d:2c:01:8d:e9:55:18:c0:fb:1e:8f:c8:
81:ba:35:3d:64:a6:e7:4a:71:41:32:63:9a:f4:4e:
4a:1f:7b:4e:7a:b1:0a:79:19:b4:de:08:dd:d8:a6:
8f:ae:31:95:e4:78:20:ed:1c:0f:93:4c:89:fe:0d:
57:3a:89:2e:12:54:72:6f:59:ef:6c:a5:a2:f6:54:
9c:9a:2a:79:d1:c3:c1:8f:9d:af:b4:d5:84:9c:fd:
d2:7c:75:69:d3:20:4d:a4:a2:63:ce:18:02:a3:db:
15:00:f8:8c:7d:f7:6d:64:a9:04:23:a0:70:1d:d4:
96:65:87:3d:38:ed:36:61:91:f2:df:c6:92:9d:59:
88:2d:a0:3f:c7:c6:c0:25:c4:13:e9:e4:2a:0e:70:
dc:52:43:d5:6a:f0:be:b8:df:35:18:41:eb:c8:1f:
dc:62:c5:e1:f2:6e:4f:b6:29:d0:9d:00:fd:f8:89:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:5E:32:38:F6:F4:8C:48:9D:65:73:4B:21:26:57:F6:42:76:47
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4AA814BC3B3611ECB60C5429C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:39:30:92:95:93:ed:7d:1d:64:f9:96:56:4f:20:6b:9c:31:
a2:65:3a:f3:04:22:b0:ce:88:d3:4f:57:98:ad:52:81:a6:de:
2f:15:40:4b:8d:7a:56:b2:1b:b1:89:58:bd:ea:2d:5a:82:68:
bb:ec:d3:9d:7e:f9:42:b3:9f:1d:d7:39:8a:d5:e2:f3:3b:d0:
a4:f2:02:51:b6:3d:98:75:1a:45:ba:fe:24:bc:6f:43:30:7a:
ee:41:31:96:7c:40:a5:03:a8:2b:d8:f9:4c:50:e2:d3:2c:49:
21:4a:ad:07:d2:27:0e:73:c0:23:a8:47:de:5e:c5:bf:15:f9:
2f:61:f4:9c:68:6b:91:d8:6c:28:96:0d:6f:28:63:bb:06:9f:
33:fc:d3:53:f9:f6:f0:5d:64:79:65:83:e5:35:9f:2d:29:21:
00:14:f5:e5:a4:e4:9e:e4:49:fe:49:55:2c:c1:d7:64:93:be:
6c:b6:22:48:1c:3d:88:fc:65:2f:8c:b0:63:79:73:4a:68:46:
75:28:b9:10:69:46:8c:75:15:bf:54:0a:20:a1:bc:0b:77:94:
4b:3c:06:19:0f:86:5f:da:48:59:52:4e:40:2e:31:30:50:2e:
0e:8d:79:6c:b2:b7:d1:76:26:1b:b7:7f:67:a0:f0:72:37:8c:
e1:21:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:59:23 2025 by rpki-client