Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/E9C98952B12A11EDA0A33462C4F9AE02.roa
File: E9C98952B12A11EDA0A33462C4F9AE02.roa (raw, json)
Hash identifier: PDlA3KJXvrwF+KbjZylhHpbzh4w7L4n/h4UnVpT97QI=
Subject key identifier: 87:A9:27:76:BA:0F:BC:CD:FF:29:2F:4E:D6:72:46:12:2C:82:D7:B1
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 09B6
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/E9C98952B12A11EDA0A33462C4F9AE02.roa
Signing time: Tue 14 Mar 2023 09:50:01 +0000
ROA not before: Tue 14 Mar 2023 09:50:01 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 996
IP address blocks: 113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/22 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.176.0/23 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Mar 14 09:50:01 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64104349-2775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:f8:02:82:6f:6a:53:1b:b0:5c:4f:9a:3f:
4a:fc:52:3c:16:0a:26:ae:b3:87:8b:d4:9d:3c:e3:
94:79:66:ce:20:5f:77:14:8d:e8:ea:ab:7c:c5:88:
a6:7a:ff:4e:89:53:75:0f:16:2c:79:25:0d:5a:b3:
81:76:48:a0:7c:a1:a0:4c:35:3c:fd:3e:af:2b:08:
a5:50:69:a2:b6:c6:c7:a4:e4:0b:2f:0d:6f:12:a3:
ef:49:b2:93:25:64:2d:f6:3b:d2:c9:29:95:30:0e:
4e:f1:a6:6e:7b:2d:0b:d9:08:dd:1a:05:02:4c:fd:
9d:4e:1e:15:3f:66:90:82:aa:7e:7b:8c:7a:93:82:
ba:7e:a7:3a:5d:ed:10:da:60:0d:a7:9c:69:02:2c:
13:f3:94:0e:95:95:f4:7d:6e:b5:3e:fd:eb:db:d7:
8b:4c:86:39:87:d2:f7:88:30:ce:5e:74:e6:dd:ec:
e5:c1:d9:38:6b:18:a0:17:d9:74:dd:9a:50:72:b4:
1d:f6:b2:e3:a5:eb:ba:f5:8b:0a:41:2b:16:67:89:
b0:db:e0:3b:0b:2a:1a:ec:51:f6:ce:da:4b:bc:0f:
66:55:e6:a9:47:2c:33:de:44:c4:af:ef:e8:e7:58:
7d:ac:46:85:ee:66:73:a2:78:6b:e3:7c:e2:8c:a0:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:27:76:BA:0F:BC:CD:FF:29:2F:4E:D6:72:46:12:2C:82:D7:B1
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/E9C98952B12A11EDA0A33462C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.223.0-113.203.225.255
113.203.227.0-113.203.231.255
113.203.233.0/24
113.203.245.0/24
180.178.148.0/24
180.178.151.0/24
180.178.162.0/24
180.178.176.0/23
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
55:1b:bd:a9:65:c7:f2:5d:e0:38:ef:68:e5:7f:7c:e8:3c:66:
f3:9f:70:ea:29:34:5d:d8:81:d4:fc:7e:9e:54:28:37:2c:9e:
3c:7e:a8:06:f8:aa:80:8e:60:b1:fd:c3:1a:ea:07:90:c4:a8:
c3:4e:69:c8:b3:bd:38:0e:ac:3a:d8:73:42:3b:dd:90:07:8d:
60:28:d2:07:5b:0d:c7:83:3f:bf:51:a7:88:8a:f8:30:95:a9:
8f:4b:39:53:aa:cd:22:33:d3:44:8d:2c:b3:9c:80:2f:36:4a:
d4:19:18:51:ae:91:d6:49:28:66:17:a9:e8:2e:f2:80:33:a7:
04:ba:51:a4:19:75:76:ae:dc:22:fe:8e:08:60:e8:1f:9c:fe:
4d:88:06:40:3a:5c:20:4d:b7:67:29:5a:99:d6:d2:79:d0:08:
ff:74:65:b7:59:35:b9:6f:76:46:98:89:97:97:9b:80:1f:92:
e5:c1:8b:50:a0:9e:70:09:10:9e:0d:2a:c9:09:8a:2c:30:b6:
d1:41:4d:91:5f:c1:95:b8:b3:cb:63:83:9b:bc:2e:03:e3:e4:
c2:82:9e:c0:a1:68:85:c9:13:b5:15:f2:61:96:21:69:1f:0e:
4e:d6:9b:63:cb:6e:4a:d0:6f:41:01:dd:75:2e:b0:3f:4b:ff:
8d:da:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:05:14 2025 by rpki-client