Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6FAB8F943B3311EC98D6F81FC4F9AE02.roa
File: 6FAB8F943B3311EC98D6F81FC4F9AE02.roa (raw, json)
Hash identifier: qNLS2EMfY2n6/TG61FzU/Izqp/uiVQgMCXxmDd9DqLc=
Subject key identifier: D7:32:9B:2F:82:04:C6:0E:DF:99:BD:C1:00:CD:4E:16:6F:10:2D:46
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 05DF
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6FAB8F943B3311EC98D6F81FC4F9AE02.roa
Signing time: Wed 15 Dec 2021 06:58:47 +0000
ROA not before: Wed 15 Dec 2021 06:58:47 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 211252
IP address blocks: 113.203.228.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Dec 15 06:58:47 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61b99227-ba57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:ab:42:c9:25:05:87:ce:d8:d8:86:23:50:
10:c3:e7:d2:62:98:75:a6:85:e7:a4:da:16:5b:fc:
38:ed:6a:9d:c6:98:3a:ee:bf:21:03:39:cc:ab:82:
ab:fb:cb:83:26:b2:98:04:e7:0d:99:fd:4f:ab:b6:
eb:80:41:71:26:eb:dc:d7:42:7f:ba:3c:30:33:27:
6b:f9:52:b8:fb:af:55:a6:d7:dd:92:2b:d0:80:2b:
ba:4c:16:0c:29:71:f2:cf:5f:79:12:a2:72:5c:00:
ce:31:32:0e:a4:e3:a8:fd:eb:72:32:df:0d:d2:43:
e9:ef:f7:bc:20:75:ee:c5:2d:2c:86:59:88:6b:b4:
91:06:8e:27:80:d6:2e:32:25:8d:90:ac:61:fd:3f:
cb:bd:06:c2:17:8d:43:8f:b2:ea:d3:02:d2:63:55:
e0:9c:1c:72:f6:a8:65:8d:30:07:38:c1:ab:c6:28:
13:5a:2a:7b:47:c2:27:5e:f5:b5:1c:bc:31:52:d1:
e9:9d:62:31:d2:ff:6f:70:63:09:be:f5:0e:28:78:
ea:c0:a3:1f:40:11:c6:02:34:b7:ab:a0:7b:af:5b:
63:07:21:fc:e3:4e:6b:86:8f:dc:0e:5b:a7:c2:78:
f0:9d:ef:de:bd:d9:25:aa:74:09:50:75:76:73:e3:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:9B:2F:82:04:C6:0E:DF:99:BD:C1:00:CD:4E:16:6F:10:2D:46
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6FAB8F943B3311EC98D6F81FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.228.0/24
223.29.236.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ce:34:e2:5e:20:9f:c4:81:64:a1:e4:d2:76:88:91:fe:bc:
f2:b6:d8:a9:4b:43:05:60:18:3b:70:21:b7:68:63:6a:94:d9:
46:bd:fa:fc:f0:4c:d6:1f:7c:38:0c:58:6d:b6:73:52:b4:f5:
dd:e5:54:ea:a4:0e:d3:b4:39:99:23:dd:48:21:30:49:3a:e6:
49:f9:aa:47:b5:99:9a:78:b5:13:57:e5:65:2a:8e:f5:b7:e5:
81:bf:e0:89:7d:55:65:d6:40:85:6e:c4:08:3e:e3:99:23:3d:
88:71:9f:15:a3:d1:5a:7e:a0:28:8a:88:e2:63:38:d6:52:6e:
d5:37:f5:31:33:33:22:9a:4c:af:41:54:f1:d5:89:ed:4c:de:
f0:b5:9a:58:32:21:03:82:5f:1b:26:87:de:5c:ab:c4:00:95:
82:ff:19:c0:02:ff:4b:a3:7c:48:3b:88:20:86:a4:fb:18:36:
db:59:c3:fe:b3:37:40:97:fd:4d:a3:d2:bb:c2:59:f6:f2:51:
fd:ca:8d:39:44:7a:4f:7f:f7:61:73:8f:2e:bf:02:0e:6a:79:
6d:ed:69:f0:4a:5d:a9:fc:e3:c6:66:d8:b8:13:84:db:ea:4c:
4d:4e:d2:b9:38:9c:c1:21:93:5c:2d:76:6d:e9:0a:be:a8:df:
58:a2:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:59:27 2025 by rpki-client