Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F259AF78614711EBBC6FC96DC4F9AE02.roa
File: F259AF78614711EBBC6FC96DC4F9AE02.roa (raw, json)
Hash identifier: c/Cj6j5x1X80Av91UASA+8Wk9afMGnNX6qZdZdgLxZM=
Subject key identifier: 3E:80:33:C3:FA:2F:16:80:DB:60:C4:2D:74:10:FB:F8:D8:42:0C:8D
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0510
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F259AF78614711EBBC6FC96DC4F9AE02.roa
Signing time: Thu 23 Sep 2021 10:48:12 +0000
ROA not before: Thu 23 Sep 2021 10:48:12 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 136969
IP address blocks: 180.178.163.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.188.0/22 maxlen: 22
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.228.0/22 maxlen: 22
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Sep 23 10:48:12 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=614c5b6c-1a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:13:e2:89:e8:3b:d3:dd:87:f5:65:63:53:
a7:f7:92:e7:de:f8:3f:a5:ac:1e:a3:08:cb:14:63:
53:88:bc:c6:2b:01:f1:9a:2e:09:8a:a5:43:7d:66:
0f:87:3f:bc:2a:4c:22:2d:71:b8:91:b0:18:f1:10:
44:63:7f:6a:bd:22:f2:da:dc:b1:0d:39:d1:d1:ef:
be:a4:df:fa:fa:c2:02:71:d7:b5:4c:a9:e5:21:e9:
63:0a:5a:9e:c0:ce:fe:f4:6b:54:36:a6:35:50:21:
81:34:ef:10:fe:a6:9b:02:f2:42:5d:77:df:7b:e3:
79:cd:a4:88:fc:0c:15:e4:89:32:c7:f4:38:e1:27:
39:51:14:1d:10:53:b3:3a:4f:f4:60:57:8b:33:d7:
d9:ce:49:6e:1c:e9:05:51:65:53:c2:b7:da:0f:64:
6e:27:29:ab:21:43:5a:42:ee:57:c7:40:85:3e:a3:
34:87:94:80:e6:64:8b:01:28:58:6b:1c:b3:ea:f1:
c7:ed:64:20:43:0c:92:cf:f5:a5:8a:d4:12:8a:61:
fa:17:ce:31:eb:69:20:0b:fc:1e:2c:d1:99:c2:5e:
60:ff:12:5f:33:0e:df:e3:c5:a7:5e:6a:47:7f:ea:
f6:56:c8:6b:26:85:12:d2:52:8f:c7:d3:02:98:94:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:33:C3:FA:2F:16:80:DB:60:C4:2D:74:10:FB:F8:D8:42:0C:8D
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F259AF78614711EBBC6FC96DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.163.0/24
180.178.170.0/23
180.178.188.0/22
223.29.228.0/22
Signature Algorithm: sha256WithRSAEncryption
54:94:51:a6:26:20:7c:40:00:89:cc:ae:0b:e1:c9:f5:9b:80:
a6:73:8c:47:67:98:11:d8:47:c9:56:b8:59:09:b5:d8:1a:c4:
27:56:2f:ae:5f:17:87:1c:73:56:b6:07:0d:ed:52:a2:c5:8e:
ae:6c:76:16:e7:24:d7:9e:56:80:b0:3a:6b:69:6e:1f:15:e0:
b8:fc:98:07:bb:b6:d4:dc:6c:8f:ee:bb:c4:50:93:e8:3a:19:
1d:7f:b2:ed:0c:3a:0a:c2:05:74:fb:ba:76:f9:40:52:f8:68:
46:3c:e8:b7:30:72:0f:8a:7f:53:71:b0:9f:a7:6a:b0:14:83:
18:22:3e:e2:95:5c:44:bc:3b:32:3d:e3:a9:a5:d0:8e:10:7b:
56:bd:c3:02:fe:4a:a3:5c:c6:78:55:15:b4:ad:16:63:3e:12:
7f:46:3e:28:72:f7:c8:ef:db:8c:e6:22:10:1a:88:1d:4a:95:
15:c3:f9:fc:3f:23:ad:b5:6b:f7:f2:b2:06:44:9c:e2:80:4f:
94:99:4d:72:96:38:63:eb:bc:b9:60:01:8c:d8:a6:fb:c9:5d:
0d:62:c6:9d:7b:9e:24:da:57:ed:c3:4d:4b:a0:96:79:19:fb:
15:58:b3:ee:a1:e6:cb:37:ea:8a:23:a4:0b:2e:08:38:82:32:
30:2c:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:55:21 2025 by rpki-client