Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/7C8D74D43CC011EFAD90AC3AC4F9AE02.roa
File: 7C8D74D43CC011EFAD90AC3AC4F9AE02.roa (raw, json)
Hash identifier: FLuUDUZLzFBpjgjpzZS1FAy/kyT3R1jD8dtHJ+DGsc8=
Subject key identifier: 82:CE:58:25:47:C7:1C:2F:DB:F0:B4:34:CA:3C:A3:9D:FA:34:A6:28
Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial: 0755
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/7C8D74D43CC011EFAD90AC3AC4F9AE02.roa
Signing time: Mon 02 Dec 2024 21:40:30 +0000
ROA not before: Mon 02 Dec 2024 21:40:30 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 55720
IP address blocks: 45.116.164.0/24 maxlen: 24
45.116.165.0/24 maxlen: 24
45.116.166.0/24 maxlen: 24
45.116.167.0/24 maxlen: 24
59.153.148.0/24 maxlen: 24
59.153.149.0/24 maxlen: 24
59.153.150.0/24 maxlen: 24
59.153.151.0/24 maxlen: 24
61.4.112.0/24 maxlen: 24
61.4.113.0/24 maxlen: 24
61.4.114.0/24 maxlen: 24
61.4.115.0/24 maxlen: 24
61.4.116.0/24 maxlen: 24
61.4.117.0/24 maxlen: 24
61.4.118.0/24 maxlen: 24
61.4.119.0/24 maxlen: 24
61.4.120.0/24 maxlen: 24
61.4.121.0/24 maxlen: 24
61.4.122.0/24 maxlen: 24
61.4.123.0/24 maxlen: 24
61.4.124.0/24 maxlen: 24
61.4.125.0/24 maxlen: 24
61.4.126.0/24 maxlen: 24
61.4.127.0/24 maxlen: 24
103.198.192.0/24 maxlen: 24
103.198.193.0/24 maxlen: 24
103.198.194.0/24 maxlen: 24
103.198.195.0/24 maxlen: 24
103.229.64.0/24 maxlen: 24
103.229.65.0/24 maxlen: 24
103.229.66.0/24 maxlen: 24
103.229.67.0/24 maxlen: 24
103.229.224.0/24 maxlen: 24
103.229.225.0/24 maxlen: 24
103.229.226.0/24 maxlen: 24
103.229.227.0/24 maxlen: 24
103.230.144.0/24 maxlen: 24
103.230.145.0/24 maxlen: 24
103.230.146.0/24 maxlen: 24
103.230.147.0/24 maxlen: 24
103.232.136.0/24 maxlen: 24
103.232.137.0/24 maxlen: 24
103.232.138.0/24 maxlen: 24
103.232.139.0/24 maxlen: 24
114.29.252.0/24 maxlen: 24
114.29.253.0/24 maxlen: 24
114.29.254.0/24 maxlen: 24
114.29.255.0/24 maxlen: 24
185.189.160.0/24 maxlen: 24
185.189.161.0/24 maxlen: 24
185.189.162.0/24 maxlen: 24
185.189.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072
Validity
Not Before: Dec 2 21:40:30 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e294e-0957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:7f:4f:31:b6:4f:d4:04:ad:3c:bc:20:ee:
b3:81:18:49:48:a0:6d:c4:d2:b2:74:fb:c4:e5:7b:
a1:fe:7d:26:14:03:25:ea:5f:e9:1a:4c:9a:04:8a:
cf:12:f9:db:ff:66:76:2b:c2:a1:35:a3:30:b1:e7:
39:50:74:10:ea:6d:06:9e:7f:57:51:36:5c:bc:cc:
23:25:ff:e1:9b:d2:d9:d3:ac:da:8c:aa:62:a2:df:
77:85:53:34:75:11:89:71:5c:0c:1b:dd:15:01:93:
b6:63:97:7a:26:1d:6a:bd:1e:e2:aa:b7:1c:f6:74:
d2:21:8a:f7:bd:37:10:cb:26:3d:c7:3d:2c:3b:10:
ce:ce:2e:52:65:36:e3:9f:84:a3:51:83:f8:ba:76:
6d:03:ce:5a:dd:3b:59:bd:45:6a:06:3b:94:c4:29:
19:d0:18:5f:84:07:f5:30:70:b0:95:bf:de:7d:cc:
a3:83:00:1d:36:d6:87:94:b7:c7:52:65:dd:43:c2:
e4:9b:23:56:37:95:23:3a:4a:9c:b8:15:68:24:fe:
8e:16:0a:8b:36:a7:c0:94:cc:49:2d:8b:4a:50:41:
56:12:2a:94:bd:2f:16:51:b8:bd:c5:7a:af:38:ce:
3e:1d:15:41:1c:93:70:ba:5b:0f:d1:0e:06:21:36:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:58:25:47:C7:1C:2F:DB:F0:B4:34:CA:3C:A3:9D:FA:34:A6:28
X509v3 Authority Key Identifier:
keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/7C8D74D43CC011EFAD90AC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.164.0/22
59.153.148.0/22
61.4.112.0/20
103.198.192.0/22
103.229.64.0/22
103.229.224.0/22
103.230.144.0/22
103.232.136.0/22
114.29.252.0/22
185.189.160.0/22
Signature Algorithm: sha256WithRSAEncryption
38:c4:dc:e0:14:65:cf:b6:f0:31:36:15:6c:4d:d4:fc:00:35:
d0:89:1f:77:3c:ed:52:45:b5:ba:91:19:39:8e:48:81:5e:28:
26:be:fa:ce:6e:e5:75:49:8e:80:ca:42:8d:d8:3d:a8:84:3e:
b5:63:a1:62:e6:30:c0:76:9e:dc:e3:97:3c:40:7f:86:b6:dd:
09:05:a2:ee:06:25:9d:64:73:f8:fd:49:6a:29:67:96:26:a5:
bf:15:e8:74:59:fb:36:be:40:b1:55:22:75:4c:e9:77:70:bb:
16:5e:0e:c6:c9:c6:a0:30:22:40:e8:2e:27:90:e8:d2:a2:70:
19:7e:ce:aa:77:8c:a5:38:44:c9:fb:71:4a:d7:aa:d6:57:fa:
7d:87:48:ce:9c:fc:82:ab:f9:33:e3:02:25:f3:23:a6:ff:23:
cf:b5:61:28:a1:0a:46:ba:e9:86:ab:ce:e2:d3:85:71:c4:d6:
db:f4:8a:e7:91:13:f3:33:21:a1:94:45:89:d4:36:df:35:86:
da:ef:77:1f:c9:c7:a3:27:4b:ea:cd:8e:0e:a8:ab:fc:b0:c0:
53:ca:1c:c4:1e:e2:df:31:8d:5a:e2:16:40:67:dc:94:6f:f3:
11:02:2e:72:c4:32:52:0f:63:24:63:78:ae:f5:be:fd:0a:07:
3e:31:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:50 2025 by rpki-client