Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/658C8A6E62BA11ECA932066BC4F9AE02.roa
File: 658C8A6E62BA11ECA932066BC4F9AE02.roa (raw, json)
Hash identifier: kGY3bpH1bI/ppMBwX2aiZz0K7dsw1rNjZP+Xi2BfJ3g=
Subject key identifier: DD:A2:60:B5:B4:AD:EA:CA:DA:27:B4:CC:9D:22:19:64:2B:C1:17:CE
Certificate issuer: /CN=A9113F6F/serialNumber=0EA19AAE6900E0863F61EDF82A5BE5D0256EEB88
Certificate serial: 025C
Authority key identifier: 0E:A1:9A:AE:69:00:E0:86:3F:61:ED:F8:2A:5B:E5:D0:25:6E:EB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqGarmkA4IY_Ye34Klvl0CVu64g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/658C8A6E62BA11ECA932066BC4F9AE02.roa
Signing time: Sat 19 Nov 2022 03:52:37 +0000
ROA not before: Sat 19 Nov 2022 03:52:37 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 133014
IP address blocks: 161.139.0.0/20 maxlen: 20
161.139.12.0/22 maxlen: 22
161.139.152.0/22 maxlen: 22
161.139.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113F6F
Validity
Not Before: Nov 19 03:52:37 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63785305-4f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:69:e3:77:09:bb:91:3e:4e:fd:e3:0c:33:
c4:a8:07:44:d0:21:d9:1c:f3:6e:ee:64:0d:53:34:
47:64:ce:05:9f:c0:50:cf:66:c8:2a:d6:bf:fd:41:
46:cc:09:03:61:b6:89:ea:da:bb:63:c0:4a:5f:7d:
bd:6e:95:d6:d0:bd:90:e7:09:96:bc:73:d9:bb:13:
9b:b0:ce:53:ab:e2:bb:81:21:8d:8f:de:86:98:4f:
eb:cd:93:e1:3d:54:2d:22:33:fd:bd:6a:78:ed:ce:
f2:b4:0c:69:0a:17:bb:74:79:14:6b:1d:b8:65:ba:
dc:5b:57:0f:d5:d5:f0:a3:02:45:10:7a:10:91:10:
8f:d5:b8:d0:39:d9:78:af:27:d1:fe:40:6c:86:8e:
f1:cc:cf:3e:a5:11:14:4d:78:41:b6:5d:0d:70:22:
11:d5:a4:8d:15:17:e7:4c:32:13:d7:9c:6e:47:62:
52:6a:e4:6b:66:9d:29:14:07:56:f6:8a:ff:1a:67:
5e:e7:6d:3b:56:be:c3:5e:05:c1:0c:7a:4c:24:4f:
d8:8c:2e:5d:19:9a:5d:06:a9:5a:c4:30:2b:38:8e:
f9:92:2b:c0:60:b0:00:c1:79:09:e1:b3:ff:6e:83:
1e:d9:dd:fc:00:b4:f4:3c:d8:4e:d6:86:f9:c3:0a:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:60:B5:B4:AD:EA:CA:DA:27:B4:CC:9D:22:19:64:2B:C1:17:CE
X509v3 Authority Key Identifier:
keyid:0E:A1:9A:AE:69:00:E0:86:3F:61:ED:F8:2A:5B:E5:D0:25:6E:EB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/DqGarmkA4IY_Ye34Klvl0CVu64g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqGarmkA4IY_Ye34Klvl0CVu64g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/658C8A6E62BA11ECA932066BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.139.0.0/20
161.139.152.0/21
Signature Algorithm: sha256WithRSAEncryption
23:a5:36:e9:22:17:56:29:3f:ff:80:6c:e4:72:14:e3:a1:39:
0f:5a:4d:3c:83:42:e1:47:e0:0c:29:71:cc:46:1c:09:00:8e:
7b:13:c7:a3:3e:16:38:d2:1e:77:1d:9e:a6:0b:6d:5d:05:fd:
31:29:09:2c:dd:53:80:15:ec:d0:5e:3f:70:01:4f:50:63:5c:
a0:3a:03:77:c7:39:2d:9e:86:9a:90:d7:8f:a6:a4:bd:e1:ad:
e7:19:30:38:15:49:14:ce:f9:c7:69:a7:84:4a:a6:cd:67:4d:
53:87:50:9f:d1:ae:0f:6c:c2:e9:c2:62:00:24:ac:f4:24:87:
a9:04:fe:2d:12:2b:c1:e6:7b:b8:74:af:bb:ab:af:72:dd:10:
4b:9d:9b:6a:ad:50:12:c4:c5:75:bd:80:4c:1d:57:d4:7d:a5:
8b:d8:e2:c4:e9:1b:b6:02:8d:8c:8d:e9:82:d3:7f:ec:f5:6f:
d9:3d:e7:d4:1d:7c:8b:10:f8:02:73:ad:4c:d2:21:9d:80:02:
c1:b6:0f:10:98:4e:d6:c1:cb:d8:b8:7f:a1:16:ab:58:34:f3:
07:8d:be:6c:56:45:6a:6a:b8:71:c2:25:a6:7f:d5:34:3f:77:
be:9a:33:18:85:4f:bc:d8:80:3b:e1:b3:6e:f0:71:64:57:51:
ae:22:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:41 2025 by rpki-client