Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/191B6DA2E41811EF8E3F233AC4F9AE02.roa
File: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (raw, json)
Hash identifier: vcq+JOCdxjFG1D5wGuVH3+pI9poPc4zyyjKKMXsqhWE=
Subject key identifier: FE:67:96:1F:0F:0F:EC:DB:AE:7E:C6:2A:0F:54:84:62:0D:4D:41:59
Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial: 02
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/191B6DA2E41811EF8E3F233AC4F9AE02.roa
Signing time: Wed 05 Feb 2025 23:22:42 +0000
ROA not before: Wed 05 Feb 2025 23:22:42 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 45158
IP address blocks: 203.14.54.0/24 maxlen: 24
203.14.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142037
Validity
Not Before: Feb 5 23:22:42 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67a3f2c2-8882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:63:7d:08:ee:8d:3c:18:a0:f4:ac:81:a9:
12:3c:57:ca:53:e3:f2:8e:03:26:26:84:8b:1e:45:
a0:99:86:31:d9:7a:f0:2d:ea:e1:1a:47:38:a1:42:
38:90:ea:67:5a:22:dd:31:76:ec:0a:e7:af:a4:61:
5e:10:e4:34:be:73:f3:8c:c5:28:88:dc:64:a5:3f:
ae:87:36:ad:97:bf:cc:a6:bd:9e:b6:54:b7:70:18:
d4:8b:52:ae:aa:2b:18:62:f7:06:9e:9d:dc:41:6d:
3f:c5:0f:c0:1c:7b:a9:14:a2:7a:5c:20:96:7f:b3:
b9:cd:45:02:06:c0:3c:61:d1:0f:db:94:15:bb:ba:
da:fb:d7:1d:c8:f4:0d:0e:98:19:5d:b2:28:0d:bb:
b5:f4:aa:a3:cc:a9:ad:f6:c0:83:f5:6b:a7:54:74:
d1:1a:33:16:00:b6:9c:f5:78:61:ac:c9:d7:ad:5b:
72:fe:c4:38:db:90:a1:d6:9e:b9:ee:de:7e:c6:18:
2b:c3:47:92:56:a7:d2:9e:d0:55:ee:5f:6e:13:03:
9f:0e:c0:48:3d:44:d5:86:ab:4d:b9:6c:53:57:4a:
25:3d:75:ba:7c:8d:e2:80:39:cc:1e:71:6d:56:5e:
80:2c:bc:8b:42:94:76:08:b5:10:a2:9f:b8:50:4c:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:96:1F:0F:0F:EC:DB:AE:7E:C6:2A:0F:54:84:62:0D:4D:41:59
X509v3 Authority Key Identifier:
keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/191B6DA2E41811EF8E3F233AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.54.0/24
203.14.213.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0e:7d:55:20:95:05:2d:1b:73:e0:25:8d:89:a7:f0:11:9d:
d9:d1:39:9b:bc:37:b1:7b:af:3c:3f:43:09:f0:a9:37:cf:ba:
91:a0:6a:2c:6c:29:2b:76:78:84:2c:fa:01:65:25:ba:31:cb:
05:ea:b8:ed:43:4f:3f:c2:38:cc:32:b2:53:17:93:c9:4d:2a:
6f:fd:29:c7:11:23:aa:ff:57:7c:14:42:a1:e6:a6:fc:24:a4:
f6:95:8a:7c:2b:67:3c:10:81:a7:16:70:b0:7e:94:19:50:9e:
85:74:78:e3:6a:cb:d8:7b:54:29:9d:45:d8:9c:83:a5:e5:f5:
d5:28:9a:59:9d:e0:c2:16:3a:90:7f:87:d9:be:99:f6:40:46:
27:a2:2e:81:e7:4e:47:7c:d6:cc:36:5f:4e:8f:93:10:6f:5b:
69:65:f9:ea:82:01:3c:eb:dc:9e:93:93:cd:f1:12:18:97:da:
8b:a1:b3:44:21:44:98:5b:f8:5f:68:8d:78:26:8a:86:aa:7b:
1d:24:fa:61:ba:e8:fe:ba:16:8f:4f:35:ba:61:94:82:16:98:
ec:a7:32:99:3f:a8:5e:5b:94:2e:1b:21:2e:b9:3e:70:cf:b8:
e8:e1:30:83:c9:2c:b4:db:44:30:9c:01:6b:a5:6d:3d:34:a0:
b0:a8:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:11 2025 by rpki-client