Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/CC835D5AE35211EDB7F6B44EC4F9AE02.roa
File: CC835D5AE35211EDB7F6B44EC4F9AE02.roa (raw, json)
Hash identifier: gtVx125gn4KlpQPpNBU13ZifXg5ZQmlh517qwsE0e/k=
Subject key identifier: C2:8D:E7:D2:18:36:CF:8F:53:F9:88:9B:D1:26:02:07:1B:77:EA:86
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A49
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/CC835D5AE35211EDB7F6B44EC4F9AE02.roa
Signing time: Tue 25 Apr 2023 10:20:28 +0000
ROA not before: Tue 25 Apr 2023 10:20:28 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136969
IP address blocks: 223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2633 (0xa49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Apr 25 10:20:28 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6447a96b-6683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:95:c4:39:bd:04:97:14:90:bf:86:a3:ee:
11:20:12:c6:5b:57:d1:15:e6:cd:de:a7:d6:8a:df:
8a:a9:c6:29:33:e0:ff:de:c3:dc:79:53:f9:fa:c6:
5b:b8:a8:18:86:49:cb:2d:f1:3e:f0:41:13:fe:28:
de:ba:a1:a6:0a:ea:ae:af:3c:02:fd:c2:11:c0:d5:
df:a0:fa:1e:d6:1b:57:f7:99:ef:07:d8:ad:f2:33:
13:18:eb:33:a2:b6:5f:0a:a0:3a:29:38:b6:a4:aa:
c2:32:9f:33:ee:33:35:d1:68:f3:5c:f7:6d:7b:47:
d9:6f:5f:9d:9a:19:88:fa:fa:2f:fc:b1:c9:96:e0:
8c:59:b1:3c:0b:53:28:62:08:13:9a:7a:14:52:62:
86:03:7b:46:33:f0:73:08:93:41:48:5f:18:f8:32:
5b:0e:d1:74:77:d7:a1:93:da:73:54:50:be:cf:98:
f3:13:9d:54:b1:0a:d5:f8:17:e1:7e:41:bd:1d:75:
0f:5d:6c:0c:78:d1:ca:75:e4:cd:f5:35:65:95:f9:
93:ad:71:b6:11:53:bd:e9:4c:15:73:5d:5b:b7:19:
0a:62:ef:b3:dd:87:b9:d2:10:b2:10:ca:ee:e8:f0:
35:b8:f8:ff:ed:52:f3:03:a9:ed:4f:1b:45:db:64:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8D:E7:D2:18:36:CF:8F:53:F9:88:9B:D1:26:02:07:1B:77:EA:86
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/CC835D5AE35211EDB7F6B44EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.228.0/22
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:18:db:5f:1e:73:06:63:c1:ef:87:cc:21:f1:1c:ad:9d:b4:
6f:d3:e5:7e:35:97:d2:2d:ee:b0:29:bc:fe:61:86:b3:6e:b3:
95:90:75:0a:96:19:9e:36:53:32:73:69:77:14:05:fe:03:c5:
9b:09:e1:4b:7a:82:bd:06:23:67:b7:c8:e0:3c:b5:20:17:f4:
f7:54:34:9e:c0:88:6c:49:12:c1:d6:4d:a6:67:89:49:ec:bf:
c4:fa:7f:01:d6:74:0f:1a:d9:d1:e5:b3:20:3c:5b:6a:f1:7b:
b6:d0:8c:a7:3c:9d:0c:db:69:02:29:d5:c9:d5:94:3f:5c:81:
2f:ec:37:de:aa:98:eb:f1:3b:c7:4b:ef:0f:30:00:89:16:78:
ce:00:a3:fc:f4:07:21:72:4d:37:62:5a:03:df:f2:f5:08:6c:
04:2f:08:fd:8b:18:6f:75:e9:b2:da:21:b1:c1:fe:eb:be:0b:
39:3e:a9:89:48:ba:e8:93:11:64:47:bb:b8:8d:09:1d:a6:7e:
b0:a4:7c:8f:c9:37:9a:4c:dc:44:71:b8:8d:af:3e:87:25:ab:
b7:24:71:7c:96:8e:bd:69:52:7f:ea:ee:40:e4:11:bd:2e:a6:
92:dc:f8:3f:7b:fe:f9:44:0d:81:a3:e6:fa:85:71:a4:1f:13:
d2:36:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:00:04 2025 by rpki-client