Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa
File: 0BB29428314511EF9B1F4B46C4F9AE02.roa (raw, json)
Hash identifier: zTFd6R54T3NlCmkGgnrlEJM5la1RNIWxE66Q49nYSZ0=
Subject key identifier: 8B:C0:94:58:BA:55:53:02:48:E8:ED:0C:9A:25:94:20:13:E7:D1:B1
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 96
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa
Signing time: Thu 04 Jul 2024 08:05:41 +0000
ROA not before: Thu 04 Jul 2024 08:05:41 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 134823
IP address blocks: 123.253.110.0/23 maxlen: 23
123.253.110.0/24 maxlen: 24
123.253.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5
Validity
Not Before: Jul 4 08:05:41 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=668657d5-362f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:7c:5d:3b:09:55:36:5c:f5:64:9e:c9:80:
eb:0d:5b:76:91:a9:d3:33:71:fb:63:35:31:09:8c:
58:ba:de:9d:76:bc:31:4e:a1:fc:ca:f8:d6:0c:69:
90:f9:b9:41:1f:70:eb:d7:9e:33:d8:7a:0a:06:cf:
5e:8d:f3:2c:67:70:e5:69:15:db:dc:5b:27:f9:46:
7e:ec:66:8b:15:57:a1:73:c3:1d:5f:d8:1a:be:28:
12:b8:97:a6:45:17:b0:77:32:53:ee:a2:5a:2e:ad:
49:36:ab:ea:1c:7e:56:28:dc:d9:0e:d2:ea:3f:00:
9c:2c:2f:66:e6:1a:e6:2a:e0:8a:c0:68:f1:28:ca:
a0:bb:dd:8d:d9:2d:a0:d6:6d:1a:45:5f:68:4a:90:
6c:82:4b:2f:0a:29:e4:24:06:4e:70:25:1b:de:27:
c8:41:f6:b8:6a:e9:f8:c5:cc:56:57:8a:40:5a:fe:
de:0f:8a:9a:01:2e:3c:58:0e:7f:b7:e8:d2:1a:df:
47:c1:26:54:e7:19:2f:5b:b2:9f:b3:df:10:12:5c:
2c:b6:ab:51:93:7e:28:27:f4:b4:df:e3:69:ba:9f:
cb:77:99:ed:02:6e:97:61:d8:57:d2:c3:9b:fb:97:
94:b3:d0:d0:2c:28:9e:05:48:1b:76:bd:ef:26:45:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:94:58:BA:55:53:02:48:E8:ED:0C:9A:25:94:20:13:E7:D1:B1
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.253.110.0/23
Signature Algorithm: sha256WithRSAEncryption
47:cd:bb:a7:a6:af:a2:61:df:e6:4f:a9:4c:6b:fc:b1:2f:05:
2b:27:d0:a3:35:ea:c3:1c:8d:98:54:fe:03:99:11:b6:e1:b1:
c7:56:41:39:e4:3c:00:4b:96:2f:46:d4:bd:10:ea:00:6d:44:
0d:53:da:37:73:bc:57:35:42:4d:25:5e:ca:6d:b1:4a:36:60:
21:97:cc:3d:ef:3d:f6:9a:c9:f6:40:86:d5:ae:a0:ac:cd:53:
81:a4:a5:79:e8:54:b2:6a:50:4f:6f:56:05:c0:d5:6d:4f:b4:
4d:f2:d3:d7:fc:cc:98:21:39:19:ec:31:dc:4e:af:c9:b0:3a:
ad:21:29:77:6b:35:b8:1e:7d:08:6b:40:cd:6a:da:09:68:84:
8e:84:c3:f2:7a:39:60:a9:64:23:30:5c:bc:1e:af:fb:1e:4c:
b6:74:d5:3e:b0:99:0e:c0:e8:14:75:82:92:11:20:7a:22:07:
bd:f0:36:5d:c5:45:d3:0b:52:bb:b3:97:70:96:3b:4b:71:67:
df:31:0d:d3:eb:2d:2c:83:43:b0:ad:21:60:36:42:c6:87:4e:
44:5a:54:b3:5f:24:e8:16:93:59:b7:e2:87:9a:ce:cd:47:2a:
ed:e8:bf:96:49:b2:39:d4:4d:47:57:ac:21:6a:51:24:10:8f:
89:b8:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:26 2025 by rpki-client