Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/90F73AF40E2511EBBB7F993CC4F9AE02.roa
File: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (raw, json)
Hash identifier: xfrnwW4CE8rEb6G9IL8uJB1Hv4mR3WOgjrI080cSfHc=
Subject key identifier: C8:C5:0E:8C:33:EB:94:2E:A7:3A:4D:1F:55:26:EB:58:7A:5C:62:15
Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial: 34F2
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/90F73AF40E2511EBBB7F993CC4F9AE02.roa
Signing time: Tue 26 Nov 2024 14:40:10 +0000
ROA not before: Tue 26 Nov 2024 14:40:10 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 19905
IP address blocks: 14.1.194.0/24 maxlen: 24
14.1.195.0/24 maxlen: 24
14.1.196.0/23 maxlen: 23
14.1.200.0/24 maxlen: 24
14.1.201.0/24 maxlen: 24
14.1.202.0/24 maxlen: 24
14.1.203.0/24 maxlen: 24
14.1.204.0/24 maxlen: 24
14.1.205.0/24 maxlen: 24
14.1.206.0/24 maxlen: 24
14.1.207.0/24 maxlen: 24
14.1.208.0/24 maxlen: 24
14.1.209.0/24 maxlen: 24
14.1.210.0/24 maxlen: 24
14.1.211.0/24 maxlen: 24
14.1.212.0/24 maxlen: 24
14.1.213.0/24 maxlen: 24
14.1.214.0/24 maxlen: 24
14.1.215.0/24 maxlen: 24
14.1.216.0/24 maxlen: 24
14.1.217.0/24 maxlen: 24
14.1.218.0/24 maxlen: 24
14.1.219.0/24 maxlen: 24
14.1.220.0/24 maxlen: 24
14.1.221.0/24 maxlen: 24
14.1.222.0/24 maxlen: 24
14.1.223.0/24 maxlen: 24
14.1.224.0/24 maxlen: 24
14.1.225.0/24 maxlen: 24
14.1.226.0/24 maxlen: 24
14.1.227.0/24 maxlen: 24
183.78.0.0/24 maxlen: 24
183.78.1.0/24 maxlen: 24
183.78.2.0/24 maxlen: 24
183.78.3.0/24 maxlen: 24
183.78.4.0/24 maxlen: 24
183.78.10.0/24 maxlen: 24
183.78.12.0/24 maxlen: 24
183.78.44.0/24 maxlen: 24
183.78.45.0/24 maxlen: 24
183.78.46.0/24 maxlen: 24
183.78.47.0/24 maxlen: 24
183.78.51.0/24 maxlen: 24
183.78.52.0/24 maxlen: 24
183.78.53.0/24 maxlen: 24
183.78.54.0/24 maxlen: 24
183.78.55.0/24 maxlen: 24
183.78.56.0/24 maxlen: 24
183.78.57.0/24 maxlen: 24
183.78.58.0/24 maxlen: 24
183.78.59.0/24 maxlen: 24
183.78.60.0/24 maxlen: 24
183.78.61.0/24 maxlen: 24
183.78.62.0/24 maxlen: 24
183.78.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13554 (0x34f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117394
Validity
Not Before: Nov 26 14:40:10 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6745ddca-66c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:18:4b:cc:b8:56:68:50:a8:52:cd:1c:5c:
12:1d:a3:f8:2d:42:53:56:11:44:b7:50:99:8c:92:
e4:7a:f0:c3:21:71:da:a9:29:0c:d6:4e:c6:95:76:
5b:f0:0f:1c:14:7a:04:6d:3e:8a:70:dd:b3:4f:36:
cb:ce:9b:9b:52:05:60:11:19:a5:4a:0e:9c:65:ae:
89:6b:d9:b1:fe:61:e8:c5:21:9f:43:45:36:85:72:
28:9e:71:4a:10:55:63:72:93:91:39:79:ed:d5:9d:
aa:84:d8:69:02:96:f3:84:b8:3d:86:f9:57:58:63:
fd:d5:cd:c7:7e:bf:49:cf:90:03:ba:d1:cc:5b:77:
1c:7e:79:73:c8:83:21:76:94:c7:e5:bf:71:73:16:
42:f4:51:92:5c:91:f8:20:d0:33:08:b4:e2:72:2e:
32:82:ad:3b:62:ec:bc:0c:cf:90:d0:a1:8b:0a:41:
f1:fe:bc:38:02:63:7d:6c:d3:73:29:3e:fe:28:6f:
4d:7d:40:c4:65:5e:2b:93:22:f9:cc:28:78:b5:75:
00:56:50:29:c2:a4:66:e0:42:cc:95:81:8d:59:a2:
22:c7:06:c9:cc:83:eb:a2:35:6e:ef:89:82:98:17:
65:7e:68:18:80:47:f2:be:3f:97:ba:d1:da:c7:6e:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C5:0E:8C:33:EB:94:2E:A7:3A:4D:1F:55:26:EB:58:7A:5C:62:15
X509v3 Authority Key Identifier:
keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/90F73AF40E2511EBBB7F993CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.194.0-14.1.197.255
14.1.200.0-14.1.227.255
183.78.0.0-183.78.4.255
183.78.10.0/24
183.78.12.0/24
183.78.44.0/22
183.78.51.0-183.78.63.255
Signature Algorithm: sha256WithRSAEncryption
3f:23:4b:a1:fd:5a:b3:82:9e:12:3a:d6:8f:39:c0:84:cc:c5:
5b:13:d8:eb:5c:59:f7:c8:69:4b:6f:7b:34:cd:e3:a9:36:19:
77:ef:8c:58:a5:73:6b:93:9b:fa:d5:90:f7:0b:0a:0e:d0:85:
a8:0b:ec:e2:83:6a:01:c0:7b:3b:d4:8d:8e:39:e0:7b:92:73:
36:b9:33:79:f3:42:b9:9b:29:4c:5b:e0:bb:2f:91:9c:84:70:
4a:8f:ca:9f:86:f1:5e:57:69:82:fa:ec:cd:67:57:5c:fb:0d:
da:06:74:e2:69:12:bf:c4:b4:f8:8b:04:22:bc:07:be:f8:86:
dd:a4:6a:2b:87:b7:74:ab:fc:db:12:9d:4d:0a:d4:52:b2:25:
54:ee:13:14:0d:82:d9:d5:e9:da:15:97:ee:40:e3:33:b7:51:
0a:00:58:6e:14:91:7d:d0:09:6e:b8:eb:04:c5:c1:a7:79:e2:
5c:8d:e7:19:85:5e:af:ce:98:66:f4:9a:31:78:5f:5a:fd:11:
5c:e8:a4:91:95:40:91:86:de:19:d3:4e:0e:dd:68:e0:06:68:
2a:ac:35:86:b1:43:0e:88:bf:48:5a:c1:c7:bf:e3:4c:ff:a2:
9b:2d:e7:69:79:57:fe:00:43:59:8b:e3:ee:7f:75:0f:b5:59:
04:56:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:44:57 2025 by rpki-client