Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/CCB61826F94C11EC8D7E6B42C4F9AE02.roa
File: CCB61826F94C11EC8D7E6B42C4F9AE02.roa (raw, json)
Hash identifier: 8guZurldv9jem9sSZHAK3eO5DsTxK6m0rDUsOY0/4x8=
Subject key identifier: 51:75:99:07:68:96:84:88:EF:28:48:91:1D:41:B0:9B:30:E7:21:BC
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 07C0
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/CCB61826F94C11EC8D7E6B42C4F9AE02.roa
Signing time: Fri 01 Jul 2022 14:47:59 +0000
ROA not before: Fri 01 Jul 2022 14:47:59 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 210654
IP address blocks: 113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/22 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Jul 1 14:47:59 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62bf091f-e739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:61:89:1c:13:a2:fe:b2:22:49:19:d2:1b:
37:d9:b7:db:57:35:36:45:73:65:94:65:83:af:d9:
6e:2c:50:c5:1a:c2:f7:90:eb:e8:2e:58:96:87:54:
ef:06:b8:75:fd:7c:7d:ca:ca:1a:7e:9a:67:5d:78:
f5:77:b1:71:4e:0b:31:a2:3d:ee:68:8d:92:87:ac:
d5:b4:b8:5b:fb:68:73:39:21:ee:c3:60:03:43:6d:
67:7d:5e:6d:e8:b6:85:55:55:06:e2:4e:33:b0:04:
26:db:e8:05:ca:01:0f:4d:3f:e8:10:9c:03:47:8f:
1d:ee:3c:2c:68:45:a5:eb:6c:15:0b:d0:23:7e:df:
48:1e:1e:17:de:bc:b9:fd:b8:58:d4:cf:f3:a3:c3:
01:33:87:68:90:ae:82:54:55:96:06:16:f4:99:38:
9a:4e:c0:54:e9:cf:9d:2c:23:f2:0a:3c:e6:ba:c3:
f7:2d:5c:ea:f1:7c:90:f4:65:4e:dd:6c:a2:0a:f3:
48:9c:92:45:81:cf:65:51:3d:dd:52:76:cd:bb:1e:
49:e4:0f:11:09:35:fd:f7:a1:67:35:b7:b7:42:ef:
7a:d2:e2:e4:13:73:b1:77:e5:ef:97:b5:0d:e7:9f:
aa:43:41:25:3d:75:10:f4:35:ac:41:98:0b:99:30:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:99:07:68:96:84:88:EF:28:48:91:1D:41:B0:9B:30:E7:21:BC
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/CCB61826F94C11EC8D7E6B42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.220.0/24
113.203.222.0-113.203.227.255
180.178.148.0/23
180.178.158.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8c:d6:95:1d:9f:92:c4:75:d8:3a:02:4e:e9:c3:79:1b:5a:
73:be:ea:11:37:34:00:1d:73:c8:c5:c0:27:a6:4b:c1:fb:97:
9f:cf:c2:1b:2d:e9:dd:b9:c1:55:06:b6:8c:d5:14:1e:48:2c:
2c:fa:55:3c:f5:65:ee:ad:fb:90:8e:16:5c:c1:2a:1d:10:bb:
a3:06:44:09:cd:2e:75:60:b9:f9:42:00:c7:35:47:86:b9:f5:
e2:32:0d:b5:d3:fb:93:3f:a1:bc:57:bd:d7:43:e2:a0:93:8c:
09:eb:6e:c6:67:03:05:da:c4:80:42:16:24:d2:8b:b5:4e:52:
08:01:34:86:38:4c:d8:26:86:2c:52:8c:e3:8e:4f:2d:18:7d:
ad:eb:8a:bc:72:dc:7f:c6:3d:a5:ec:06:ce:e6:ec:fb:13:88:
b6:fe:9f:7f:cb:00:80:0c:28:b7:d3:9f:28:8c:70:90:39:77:
ce:4a:9a:c6:bf:68:34:3b:73:03:59:49:b3:71:8e:74:c2:0e:
8f:db:6b:04:ba:db:e2:d2:8e:d4:d5:1c:22:7f:29:ef:8e:19:
18:3c:78:1d:8f:61:80:ae:4b:10:39:b9:c3:42:1a:7a:6f:0d:
1b:d5:d3:37:46:01:e2:81:52:3d:ca:88:ec:6a:63:ac:d6:ee:
14:b5:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:49:35 2025 by rpki-client