Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/FAEA8E38E41911EFA96DA35FC4F9AE02.roa
File: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (raw, json)
Hash identifier: RxRZ1dH5JkRHUJw1N/ksvTcKPSxp60O8KTnJFH3sluU=
Subject key identifier: 82:7A:E8:35:61:DF:30:74:7D:56:9A:24:3B:87:64:8E:79:2C:20:C8
Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial: 04
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/FAEA8E38E41911EFA96DA35FC4F9AE02.roa
Signing time: Wed 05 Feb 2025 23:36:11 +0000
ROA not before: Wed 05 Feb 2025 23:36:11 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 132584
IP address blocks: 203.14.54.0/24 maxlen: 24
203.14.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142037
Validity
Not Before: Feb 5 23:36:11 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67a3f5ea-98dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:87:e6:5a:32:b9:ec:8a:44:7f:53:dd:ce:
a6:b9:cf:35:b6:4f:2f:36:67:b1:9b:e2:a9:c3:28:
03:1e:cb:0d:26:a3:4c:c5:a4:b1:e3:1b:ea:13:53:
03:37:41:7b:17:9e:aa:20:74:6c:78:2f:1e:e2:8b:
ef:1e:c0:5e:1a:09:ba:41:a0:21:50:1e:9e:82:58:
a6:e7:b0:db:9e:49:31:cb:ab:79:cf:d2:39:f8:cc:
f8:5e:90:a7:20:fb:c0:e2:b1:58:87:c3:f2:05:20:
1a:3d:4c:73:43:ce:a5:27:d0:47:c9:9b:db:c7:f5:
a8:07:21:c4:ee:76:74:39:ee:a5:27:6a:49:e5:77:
6d:4a:4a:34:77:b4:46:5a:1a:22:29:47:34:04:44:
50:4d:71:3d:b8:2a:14:5b:6a:76:9a:94:6b:80:2b:
02:10:45:d5:44:a2:a4:30:09:0f:50:f7:7c:ad:22:
09:97:07:22:c4:0a:b2:f9:2b:7e:1a:06:a0:a7:8d:
46:76:d8:af:0c:4c:3b:75:ca:7d:34:82:cb:ac:0c:
b0:44:3e:23:e2:32:12:30:15:b0:3d:79:d2:89:10:
2d:d3:99:a8:12:05:50:88:f0:f8:a2:00:ab:c7:97:
d4:83:b2:45:01:1e:10:cf:83:db:77:80:b3:87:15:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:E8:35:61:DF:30:74:7D:56:9A:24:3B:87:64:8E:79:2C:20:C8
X509v3 Authority Key Identifier:
keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/FAEA8E38E41911EFA96DA35FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.54.0/24
203.14.213.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:a5:95:93:53:65:ea:07:0a:f7:d9:af:20:cb:cf:a3:30:88:
ec:56:b5:8e:5b:58:70:63:33:a3:d5:34:ce:f7:58:35:cb:e7:
6c:69:13:41:60:51:e8:39:86:08:30:7c:25:bd:49:b5:fd:49:
4c:34:33:8d:90:3c:26:86:62:99:7e:bc:c3:b9:12:7f:9a:51:
8d:de:51:47:94:34:ff:18:5b:48:ed:85:0b:46:45:cf:fc:77:
1f:f2:15:51:fd:18:81:1e:69:fb:3f:02:15:d0:3f:31:97:ad:
cf:64:2d:5c:db:11:80:c0:8a:e0:2a:06:a2:f2:b9:c1:6b:66:
9d:7e:2d:f8:80:df:86:cc:63:f1:1e:cd:17:b1:4a:a6:ac:20:
b8:01:a6:32:b2:f8:d9:4b:ef:dc:41:57:de:ae:8c:de:db:83:
9c:49:58:75:29:a6:56:93:28:12:65:a2:b6:86:00:50:2b:21:
72:bf:2f:2a:f1:a2:20:da:ec:b5:51:cd:7b:62:f9:8c:e1:1c:
1d:a1:32:07:2c:ac:7b:75:b3:1c:50:08:c7:31:48:44:bd:05:
52:9d:5d:0a:39:c8:e6:1c:fc:66:6a:f4:e9:63:53:31:0d:43:
d0:bb:9b:6b:ea:ae:e6:78:b4:a1:c2:0a:0a:f7:9d:e6:29:b2:
38:e9:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:02 2025 by rpki-client