Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa
File: 384962A2709511EFB3C2992DC4F9AE02.roa (raw, json)
Hash identifier: 2qRtl+2vbaSdK6Wey0VbloBnqojKQ9B99jR5Bas2V80=
Subject key identifier: E4:DA:08:1D:0C:91:0A:2C:99:03:16:B4:91:F1:C6:C1:87:32:46:5E
Certificate issuer: /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial: 22C3
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa
Signing time: Wed 11 Sep 2024 23:36:09 +0000
ROA not before: Wed 11 Sep 2024 23:36:09 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45282
IP address blocks: 123.176.56.0/24 maxlen: 24
123.176.57.0/24 maxlen: 24
123.176.59.0/24 maxlen: 24
202.129.192.0/22 maxlen: 22
202.129.192.0/24 maxlen: 24
202.129.193.0/24 maxlen: 24
202.129.194.0/24 maxlen: 24
202.129.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8899 (0x22c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128992
Validity
Not Before: Sep 11 23:36:09 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66e22969-2e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:3d:cd:c7:6e:22:21:c7:a9:6f:15:20:00:
2d:34:98:60:a0:9f:f8:96:3b:25:09:1a:86:f2:e9:
f4:10:a0:2b:5d:d8:d4:88:27:d9:84:6f:7f:62:10:
f5:9a:f0:b8:c2:09:11:b8:4f:65:57:79:4f:ff:61:
b9:b0:88:71:46:4c:f6:1b:05:00:57:e5:88:d6:40:
73:51:1a:23:4e:a5:2f:2c:e7:33:56:3c:e3:2d:3a:
e9:c7:e6:1c:fb:b6:fe:92:43:d4:29:43:76:c1:b8:
b0:62:7c:2d:1c:0a:23:81:05:77:7d:cc:80:c5:bf:
4b:f5:01:03:10:68:02:3e:23:d7:c8:a3:00:11:ae:
da:25:7f:68:98:94:9b:88:fa:19:08:ed:c8:af:7d:
3c:38:4d:26:77:bf:9b:98:3a:a0:37:00:ee:9e:63:
d5:24:dc:46:f9:7a:71:a9:de:31:cb:0b:59:d4:fc:
5b:58:98:04:7a:76:f2:aa:ad:a2:63:ee:93:05:4f:
62:7e:a2:96:12:91:8f:9a:52:37:3e:56:fa:1c:4d:
5f:43:89:96:8d:f8:08:5d:e0:20:25:a9:57:27:c5:
55:44:43:e8:73:e5:49:c6:68:81:64:9b:b1:92:28:
33:e4:58:21:19:ae:7b:88:8c:87:67:1c:d8:d8:2b:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DA:08:1D:0C:91:0A:2C:99:03:16:B4:91:F1:C6:C1:87:32:46:5E
X509v3 Authority Key Identifier:
keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.176.56.0/23
123.176.59.0/24
202.129.192.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:1e:c4:90:c4:6f:2d:a4:ac:c2:84:ea:12:d1:b4:42:dd:c4:
4c:73:1d:9e:21:5f:f7:ac:04:d5:e3:10:36:13:9b:f3:12:09:
6b:d7:d6:9c:5d:82:b4:23:57:38:0f:43:71:f0:fc:dd:8f:ef:
c5:f7:33:22:41:81:df:a4:69:5d:d0:fa:05:bb:28:75:ca:06:
18:36:c7:dc:7b:d7:7d:e5:8d:9a:d9:47:a7:ca:7d:c8:e5:d4:
b7:bb:92:90:ca:f4:9b:37:11:18:b4:3d:a4:87:af:ff:28:c7:
3b:6c:4e:b8:08:87:ae:12:af:e5:7f:72:e8:8c:49:03:98:44:
b3:62:1a:0e:dd:5d:cf:f4:d2:42:b9:d3:f1:95:76:3f:2a:05:
8d:52:94:a7:c2:cf:63:5f:5e:ea:ec:1e:ed:49:0c:d0:9b:2d:
33:e8:58:b5:72:a7:72:7f:a3:d1:e2:17:81:93:90:86:c0:ed:
a1:cf:e4:03:23:14:cb:03:50:86:b1:d6:dd:83:7c:2f:fc:36:
48:9f:b4:23:4c:9a:ae:07:dd:7c:b6:b5:b4:93:34:7e:4b:ab:
77:6f:e2:00:e2:48:49:ea:ce:ca:93:8f:df:ed:71:89:1c:99:
ef:2d:7c:ae:10:3e:21:7c:5e:a1:e3:5c:2f:b7:b4:e2:39:95:
4a:87:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:06 2025 by rpki-client