Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91856F6/879F388E869E11EB9A049627C4F9AE02/C5ED08DCBB6111EEB0602482C4F9AE02.roa
File: C5ED08DCBB6111EEB0602482C4F9AE02.roa (raw, json)
Hash identifier: P27VQcoU1rKVTcwagST1z8ElUa88keGsRvYWvl8JY0c=
Subject key identifier: 28:4A:C5:80:D4:02:00:9F:62:DA:4E:50:A9:AA:D9:8B:91:23:76:A4
Certificate issuer: /CN=A91856F6/serialNumber=3A084422257FF5F179A50ECBFC02EBF725BB9343
Certificate serial: 05B5
Authority key identifier: 3A:08:44:22:25:7F:F5:F1:79:A5:0E:CB:FC:02:EB:F7:25:BB:93:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OghEIiV_9fF5pQ7L_ALr9yW7k0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91856F6/879F388E869E11EB9A049627C4F9AE02/C5ED08DCBB6111EEB0602482C4F9AE02.roa
Signing time: Thu 25 Jan 2024 09:11:50 +0000
ROA not before: Thu 25 Jan 2024 09:11:50 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 45459
IP address blocks: 112.109.64.0/21 maxlen: 24
112.109.72.0/23 maxlen: 24
112.109.75.0/24 maxlen: 24
112.109.76.0/22 maxlen: 24
112.109.80.0/24 maxlen: 24
112.109.85.0/24 maxlen: 24
112.109.86.0/23 maxlen: 24
119.47.116.0/24 maxlen: 24
119.47.120.0/23 maxlen: 24
119.47.125.0/24 maxlen: 24
119.47.126.0/23 maxlen: 24
202.174.116.0/24 maxlen: 24
210.79.48.0/22 maxlen: 22
210.79.48.0/23 maxlen: 23
210.79.49.0/24 maxlen: 24
210.79.50.0/23 maxlen: 23
210.79.50.0/24 maxlen: 24
210.79.51.0/24 maxlen: 24
210.79.52.0/24 maxlen: 24
210.79.53.0/24 maxlen: 24
210.79.54.0/24 maxlen: 24
210.79.55.0/24 maxlen: 24
2404:3800::/48 maxlen: 48
2404:3800:1::/48 maxlen: 48
2404:3800:2::/47 maxlen: 47
2404:3800:4::/46 maxlen: 46
2404:3800:8::/46 maxlen: 46
2404:3800:c::/47 maxlen: 47
2404:3800:e::/48 maxlen: 48
2404:3800:10::/44 maxlen: 44
2404:3800:20::/43 maxlen: 43
2404:3800:40::/42 maxlen: 42
2404:3800:80::/41 maxlen: 41
2404:3800:100::/40 maxlen: 40
2404:3800:200::/39 maxlen: 39
2404:3800:400::/38 maxlen: 38
2404:3800:800::/37 maxlen: 37
2404:3800:1000::/36 maxlen: 36
2404:3800:2000::/35 maxlen: 35
2404:3800:4000::/34 maxlen: 34
2404:3800:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91856F6, serialNumber=3A084422257FF5F179A50ECBFC02EBF725BB9343
Validity
Not Before: Jan 25 09:11:50 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65b225d6-7f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:d4:a0:50:a5:12:87:b5:1e:b3:1f:76:d2:
f5:b7:50:5b:b8:37:21:aa:c2:70:a2:49:2e:7c:2f:
93:4d:ce:6e:08:27:c4:63:56:a8:9d:a6:7d:a9:9e:
98:e5:10:8d:7c:1c:4f:12:b0:f3:6f:44:4d:5d:de:
8b:83:97:75:18:1e:71:3f:0f:5a:b8:65:c2:a5:f5:
67:fd:a1:83:81:a8:83:10:4c:f6:4f:23:fc:59:a8:
81:71:b4:a3:e5:75:b4:69:43:94:d3:65:dd:19:b6:
7a:c1:49:b6:7c:52:da:12:0a:a5:fa:dd:be:1f:01:
d1:f9:10:53:89:ed:5d:ca:6a:3b:0e:d0:ac:c1:73:
1e:27:25:eb:43:23:07:bb:e7:99:9e:f4:65:90:d2:
f6:a4:7b:7d:4c:e6:c0:27:a2:66:2c:49:07:f5:18:
8b:cb:e7:62:35:ed:e2:88:8b:35:01:8e:5d:96:60:
47:59:d8:0e:ee:65:6c:e5:3a:06:fe:7a:d1:bb:6d:
35:c2:2b:a8:29:94:e6:c4:0f:1c:00:53:ae:24:46:
6f:5f:73:c7:fc:dc:4c:8b:51:e3:5e:e8:96:6b:34:
db:c4:8d:6a:e9:e5:27:77:31:31:37:a6:c9:93:1e:
14:c3:b4:0e:0f:ba:f0:35:5e:d5:a2:bc:67:62:e4:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:C5:80:D4:02:00:9F:62:DA:4E:50:A9:AA:D9:8B:91:23:76:A4
X509v3 Authority Key Identifier:
keyid:3A:08:44:22:25:7F:F5:F1:79:A5:0E:CB:FC:02:EB:F7:25:BB:93:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91856F6/879F388E869E11EB9A049627C4F9AE02/OghEIiV_9fF5pQ7L_ALr9yW7k0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OghEIiV_9fF5pQ7L_ALr9yW7k0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856F6/879F388E869E11EB9A049627C4F9AE02/C5ED08DCBB6111EEB0602482C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.109.64.0-112.109.73.255
112.109.75.0-112.109.80.255
112.109.85.0-112.109.87.255
119.47.116.0/24
119.47.120.0/23
119.47.125.0-119.47.127.255
202.174.116.0/24
210.79.48.0/21
IPv6:
2404:3800::-2404:3800:e:ffff:ffff:ffff:ffff:ffff
2404:3800:10::-2404:3800:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6f:49:65:57:06:0b:30:e5:60:87:0e:5c:0f:7d:c6:89:0c:e5:
f8:54:6b:ad:e0:0a:b5:fc:d7:29:f1:5f:68:34:88:ed:26:43:
74:c7:2a:10:b4:2d:00:bd:9f:c1:86:5e:da:96:5f:75:f9:03:
54:2e:cb:66:6f:56:8b:15:de:09:be:e4:ac:1a:27:96:11:f6:
ee:93:f8:42:ac:2f:1e:f4:cd:66:85:2a:16:4d:f2:53:ea:bd:
96:7e:16:dd:25:76:61:a8:8f:8b:93:18:59:3a:86:59:c6:95:
e1:20:8c:c5:87:31:52:93:b7:c0:9c:b5:a9:ed:90:b0:9e:e2:
e2:a1:89:3e:f9:bc:f7:7c:f0:5c:e5:29:bf:08:44:f1:2c:fa:
9d:7a:b6:30:1c:e6:48:65:f2:e9:bd:5d:1d:53:cc:1d:1d:34:
66:2d:20:85:ed:ac:1f:20:f7:47:17:e6:f6:df:27:9c:e1:52:
12:c1:24:39:e0:9f:a2:4a:50:ec:48:f0:5d:94:9e:e0:54:7d:
de:f2:56:89:7b:58:d3:c7:98:d8:8f:19:08:25:13:94:be:41:
92:71:7b:0a:90:b8:ef:fa:a5:c5:41:6c:cb:fa:3c:3a:cd:2c:
78:3c:ab:dc:cf:87:19:c0:75:84:5e:cc:64:8f:80:56:f0:cf:
ce:0b:35:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:38:46 2025 by rpki-client