Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D050B87ECD5E11EDBB5F326AC4F9AE02.roa
File: D050B87ECD5E11EDBB5F326AC4F9AE02.roa (raw, json)
Hash identifier: mZjeTP00gd0NQKVYZsbnaTYcCv9vPbgpVn/M6ibFE+U=
Subject key identifier: 75:18:38:1E:EE:D8:DA:0F:05:76:81:6F:3A:CD:D8:1A:6A:73:C6:25
Certificate issuer: /CN=A9155A58/serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Certificate serial: 0730
Authority key identifier: A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D050B87ECD5E11EDBB5F326AC4F9AE02.roa
Signing time: Tue 28 Mar 2023 11:51:03 +0000
ROA not before: Tue 28 Mar 2023 11:51:02 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 10143
IP address blocks: 115.70.0.0/16 maxlen: 24
220.233.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A58, serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Validity
Not Before: Mar 28 11:51:02 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6422d4a6-cbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bd:ac:df:36:8d:9c:80:5c:ac:14:de:69:d6:
94:d4:fd:de:fd:46:1f:69:2c:30:ea:4b:06:92:78:
0f:3b:51:ef:26:3a:93:63:16:9a:b0:18:8d:46:5e:
3e:59:43:93:13:7d:9b:5a:8a:e5:9b:86:ae:05:e5:
86:fc:18:48:54:31:21:35:8c:82:db:ed:3c:56:7e:
30:ac:36:dc:43:e8:0b:90:34:ca:ed:5a:b3:ef:e1:
ee:35:9d:9a:8d:a7:ea:8c:df:16:13:8a:0d:48:fd:
1f:04:ad:e2:cb:51:af:e5:8a:cb:37:a9:69:1d:47:
e1:c7:6c:8f:74:4b:27:f9:7c:95:de:5a:14:4f:96:
b5:8b:67:7f:30:4a:52:40:a7:45:3c:a1:a0:f8:73:
ca:be:0a:35:19:dd:08:df:2d:82:62:87:27:e4:60:
63:fb:69:69:e0:ff:56:4a:e1:8d:11:50:80:de:ac:
6b:60:35:d9:4a:1a:de:1e:cb:f1:12:84:4c:ff:b0:
44:fd:27:0a:e0:3a:26:18:e4:29:ad:dd:91:06:72:
f4:5c:ac:6b:7c:f5:a5:69:51:e7:f0:3a:cd:c7:09:
89:65:c5:62:ad:a3:aa:c0:96:85:52:84:e1:9a:99:
c6:47:0a:0b:f7:ed:01:a3:34:36:f0:0a:f8:40:9b:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:18:38:1E:EE:D8:DA:0F:05:76:81:6F:3A:CD:D8:1A:6A:73:C6:25
X509v3 Authority Key Identifier:
keyid:A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/p__qGOCaOaCqbzdaCoO1cI7CLYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D050B87ECD5E11EDBB5F326AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.70.0.0/16
220.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:11:1d:ec:02:4b:8d:2f:13:03:52:9e:7f:19:db:1e:9c:5c:
7e:9e:78:d0:7b:1b:3f:e2:0f:21:72:90:47:d4:20:e2:79:b4:
c8:d0:0d:54:ee:94:58:1f:4a:75:fa:6c:9a:37:9a:0a:0e:0e:
b1:08:64:14:49:54:3c:d2:38:01:b7:db:c4:8c:c2:5e:3e:7c:
03:e9:6f:b5:d1:e3:c5:b0:77:76:34:8e:b4:d3:1b:63:62:15:
af:ec:33:35:27:08:b1:0d:02:39:63:4e:88:57:ea:75:81:2c:
3f:87:17:4d:2c:57:57:17:fe:27:d6:ba:9d:62:10:c2:c6:e9:
48:74:16:5a:7f:15:aa:84:8b:7f:ef:f7:6b:31:f5:e2:0c:2e:
d6:ac:18:e0:1c:4a:9b:0f:f3:55:bf:48:da:12:c4:0d:b5:34:
1e:32:a0:d2:8c:59:3a:ee:dc:e6:a7:f2:21:f6:4d:55:2b:28:
36:94:23:5d:6d:a7:8f:53:78:70:10:30:2e:c5:0f:93:f7:b1:
40:19:bf:eb:11:18:57:f1:68:aa:d0:52:fa:a5:fb:97:51:63:
41:bf:97:6c:15:34:fc:a9:0c:1d:7f:ff:d8:44:be:71:9a:b2:
7f:42:3d:2a:4d:86:ad:88:98:10:c8:6f:d9:84:f3:74:86:22:
f7:d2:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:09:20 2025 by rpki-client