Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa
File: D52009B06A6311EFA96F023DC4F9AE02.roa (raw, json)
Hash identifier: F5aTMcUYsmdixUm9yQzG1VwvhsqYUF6nPzXXk9qwa44=
Subject key identifier: 93:9E:D8:59:9C:B8:E6:B2:A1:D8:FB:E8:C7:FA:1D:9E:DC:14:8A:B0
Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial: 34F3
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa
Signing time: Tue 26 Nov 2024 14:40:11 +0000
ROA not before: Tue 26 Nov 2024 14:40:11 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 37997
IP address blocks: 124.195.128.0/20 maxlen: 20
124.195.128.0/22 maxlen: 22
124.195.128.0/24 maxlen: 24
124.195.129.0/24 maxlen: 24
124.195.130.0/24 maxlen: 24
124.195.131.0/24 maxlen: 24
124.195.132.0/22 maxlen: 22
124.195.132.0/24 maxlen: 24
124.195.133.0/24 maxlen: 24
124.195.134.0/24 maxlen: 24
124.195.135.0/24 maxlen: 24
124.195.136.0/22 maxlen: 22
124.195.136.0/24 maxlen: 24
124.195.137.0/24 maxlen: 24
124.195.138.0/24 maxlen: 24
124.195.139.0/24 maxlen: 24
124.195.140.0/22 maxlen: 22
124.195.140.0/24 maxlen: 24
124.195.141.0/24 maxlen: 24
124.195.142.0/24 maxlen: 24
124.195.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13555 (0x34f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117394
Validity
Not Before: Nov 26 14:40:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6745ddcb-051c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:eb:4d:a9:44:40:be:79:e4:83:e0:75:cc:
b1:13:93:64:e6:49:a6:fd:52:81:1f:22:76:19:30:
d5:d1:11:42:45:94:c6:f0:0e:d7:ed:60:6d:8d:14:
0f:8f:f1:76:d0:09:3b:ad:a9:bd:5d:6d:16:84:e9:
e7:ae:06:0a:cb:02:25:75:f8:41:e4:87:20:66:f2:
70:ac:32:12:72:0f:94:db:05:86:4c:1d:bb:a2:ff:
3c:58:78:e2:b3:57:34:01:17:a1:16:f6:53:ff:92:
c7:ba:64:3f:e3:ec:87:97:8c:29:97:02:83:17:cc:
a2:b3:43:dc:7a:39:d5:69:2a:94:13:17:97:bf:2e:
75:25:4d:3f:46:8e:04:24:52:33:db:c8:10:eb:73:
7a:60:0f:67:63:9b:05:68:40:d1:22:fc:da:6c:6d:
9a:72:28:c0:15:d3:95:2a:b8:b7:7a:b0:c2:ee:b3:
0d:6f:3c:e3:3e:5b:14:81:fd:25:77:90:49:d2:c9:
4d:5c:69:50:48:9e:fe:18:e2:14:20:ea:00:6f:f8:
af:35:5b:4a:df:8a:d6:6a:64:35:49:0e:d2:75:3a:
2a:66:ff:a7:5c:60:e1:53:ff:ae:56:c8:2f:e9:7a:
a3:a1:4a:68:3d:20:a6:25:e9:d3:71:1f:8c:a7:fd:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:D8:59:9C:B8:E6:B2:A1:D8:FB:E8:C7:FA:1D:9E:DC:14:8A:B0
X509v3 Authority Key Identifier:
keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.195.128.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:56:3d:19:fa:06:8b:fb:5b:ef:07:72:3c:8b:3d:de:ba:64:
b9:5f:fe:52:bc:49:b5:6a:c5:4b:ae:3a:40:e0:fb:ab:2e:8c:
3b:bc:b5:25:24:41:51:32:ee:b8:b6:42:72:e3:6a:bc:e8:73:
2a:fc:bd:81:69:e3:1a:c8:aa:ab:db:a4:b4:be:23:28:2b:e3:
41:1c:17:31:40:0d:6d:5b:5f:5e:62:b1:05:da:34:8c:0b:f8:
98:e4:7b:dc:89:ce:22:5b:61:11:9d:92:d6:ac:b9:db:28:a3:
83:9a:fd:31:44:b6:e5:66:47:c3:59:23:d9:b9:43:83:f7:b3:
5f:bb:72:c7:c9:0d:34:8c:83:ca:e5:5d:48:f9:22:36:46:6f:
cd:2e:a4:17:7d:d1:fe:35:af:54:38:b7:f2:59:6e:0d:73:2e:
7f:cd:26:ca:74:36:42:74:c5:91:15:08:88:1c:6f:16:bc:26:
d1:21:22:a2:84:53:61:08:3b:23:41:1c:0f:06:81:e2:ac:ee:
bf:15:2f:40:fd:d3:77:10:82:2c:c0:e9:2a:b0:29:a7:2e:59:
8f:78:c8:ed:77:d2:ae:fb:5e:60:3d:ed:77:fb:9b:20:a2:10:
f9:6e:e3:fa:28:32:87:b2:70:0d:1c:37:d3:07:f1:da:05:40:
46:14:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:37:37 2025 by rpki-client