Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa
File: BA007060162D11EEB79F703CC4F9AE02.roa (raw, json)
Hash identifier: i9EBn86mLgOFoT0s7Sga+CIh82Sy/UwirM5LdXIelBE=
Subject key identifier: 6C:D4:FF:85:90:E7:65:4A:AC:5D:A3:7D:07:9A:02:10:48:A1:E0:57
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 24CF
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa
Signing time: Wed 22 Jan 2025 01:08:23 +0000
ROA not before: Wed 22 Jan 2025 01:08:23 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 142424
IP address blocks: 120.28.32.0/24 maxlen: 24
222.127.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9423 (0x24cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207
Validity
Not Before: Jan 22 01:08:23 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67904506-4824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:be:a2:11:ce:e7:38:60:86:ee:4f:00:c1:
eb:23:5a:04:04:6f:02:22:9f:b6:93:12:9a:a5:e9:
43:f6:ec:fa:5b:02:f4:6e:b9:08:47:a2:52:58:bb:
0f:c1:cb:5a:95:6a:bf:e1:dc:fe:7d:07:b8:8e:50:
9d:dd:4c:4c:90:3c:f6:e1:e0:56:91:54:2e:34:2c:
77:16:3c:9a:b9:34:c4:0f:76:3a:37:8e:c1:ca:5c:
9c:cf:7b:47:55:89:00:8e:76:05:41:44:6d:5f:dc:
61:0b:7e:dc:e8:eb:1b:63:41:bc:0d:92:da:39:9f:
09:40:cc:91:25:3c:e7:27:32:f4:49:af:b4:32:91:
40:6f:32:fe:c5:f8:85:97:79:1e:1d:68:90:3a:7b:
d2:4f:b8:0e:51:ba:b6:33:62:27:7a:56:48:25:39:
d9:55:f5:92:0a:3b:98:5d:bf:3d:fc:b2:ef:5f:46:
ac:93:56:76:f9:76:97:74:9e:bf:a6:d5:1d:9a:3c:
b8:37:b8:95:a7:e7:1f:1e:91:58:46:f9:d0:6d:1d:
7d:ba:d1:80:74:b3:ea:0a:ad:98:f6:39:69:4d:82:
31:df:2b:7b:a2:50:a4:09:9a:98:cc:b9:25:01:9d:
d9:42:72:53:87:93:07:fa:a2:db:41:9d:5a:f8:06:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:FF:85:90:E7:65:4A:AC:5D:A3:7D:07:9A:02:10:48:A1:E0:57
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.28.32.0/24
222.127.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:42:11:4b:43:0a:53:39:97:20:98:a4:36:72:f1:51:2b:bc:
b9:90:c3:24:71:fd:05:93:85:92:84:42:31:20:9d:04:b0:d6:
52:14:03:ee:17:2e:28:20:6f:41:09:cf:0d:64:cc:7e:b2:1a:
cb:10:01:56:ce:14:7b:cb:32:d9:ce:25:36:0b:2c:fc:f1:a3:
ff:43:8e:d1:99:ed:42:2d:7c:54:7d:8a:2a:42:02:8d:9e:cf:
a7:25:3d:24:90:89:92:99:a5:13:8e:cb:48:42:9c:a1:a5:d8:
59:be:65:33:57:a5:91:39:1d:0f:ed:bf:ff:7c:df:23:43:e2:
35:b6:2c:93:24:98:17:05:f9:f6:26:38:e0:96:09:7e:0c:1b:
ec:23:ae:9a:77:ab:98:89:e0:b3:32:4e:9c:1f:79:36:47:d0:
7c:26:b6:4c:24:01:64:f3:56:f9:b1:7f:1a:9b:8d:2c:9e:02:
d4:84:f4:03:1c:f5:44:91:6a:26:7b:70:9e:67:69:40:52:6c:
15:9d:12:73:98:f6:0a:2b:5b:96:04:85:53:c9:ac:e4:ca:dd:
7c:a1:a6:f3:8f:6e:86:93:6b:fc:d2:f9:db:cd:bb:d0:3c:f0:
37:48:af:18:d0:aa:bf:57:f7:83:cd:f9:72:72:e2:7e:4c:d9:
bb:72:7c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:07:30 2025 by rpki-client