Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa
File: EF4B2E301CE411EB95E5A216C4F9AE02.roa (raw, json)
Hash identifier: hl/3X6BX11WafllMiNd1LQR2jHaTy4LdnM1ilVWB8H4=
Subject key identifier: 9E:6A:28:F0:6F:78:57:58:64:97:00:B5:9A:2E:50:E0:1E:16:03:7D
Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial: 0A19
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa
Signing time: Sat 22 Jun 2024 20:32:49 +0000
ROA not before: Sat 22 Jun 2024 20:32:49 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 134974
IP address blocks: 110.92.25.0/24 maxlen: 24
110.92.26.0/24 maxlen: 24
110.92.27.0/24 maxlen: 24
110.92.31.0/24 maxlen: 24
202.61.64.0/24 maxlen: 24
202.61.65.0/24 maxlen: 24
202.61.66.0/24 maxlen: 24
202.61.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2585 (0xa19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CD2D
Validity
Not Before: Jun 22 20:32:49 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667734f1-1876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:26:8f:75:f7:ac:51:8e:6f:39:da:08:9c:
00:0c:17:46:78:7b:6c:0a:45:bd:02:45:bc:34:bd:
f5:60:80:d9:d5:ba:31:db:90:fc:5a:4c:32:6c:65:
73:d9:51:77:0c:8a:4c:3d:22:83:1b:83:3d:29:2d:
9a:60:2e:a9:24:99:9d:d1:c3:1a:19:f1:6d:34:07:
aa:8e:e2:81:09:4a:01:52:ea:6a:4d:1a:ad:70:3e:
e2:67:59:87:bb:94:2a:dc:70:53:68:f5:af:68:b4:
83:ed:20:cc:fe:07:51:81:ba:c5:92:27:f3:f7:e8:
c5:ba:57:26:08:cf:a0:1d:2d:33:c3:ae:25:bf:0c:
26:5e:a5:a3:0e:75:aa:7c:e6:f3:59:6d:04:57:fb:
d1:5f:75:42:36:b3:e5:15:d9:f8:b2:6b:62:53:c1:
54:04:44:6f:38:f9:6c:98:9a:07:11:5f:6b:c4:88:
c4:51:14:67:c9:ec:8c:81:91:2f:07:a9:35:2b:24:
b1:f9:b1:ac:28:1d:6c:02:77:07:a7:32:71:45:82:
be:8f:1f:cb:c8:72:ef:6b:08:ea:e5:5d:38:ad:40:
af:43:21:6d:bc:54:4e:1b:3b:c5:98:8a:1b:b9:ea:
37:6c:cf:ba:30:3c:f8:e2:d4:1c:4d:39:4a:9b:26:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6A:28:F0:6F:78:57:58:64:97:00:B5:9A:2E:50:E0:1E:16:03:7D
X509v3 Authority Key Identifier:
keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.92.25.0-110.92.27.255
110.92.31.0/24
202.61.64.0/22
Signature Algorithm: sha256WithRSAEncryption
77:82:32:cb:66:ac:07:e2:be:41:5b:64:83:03:7d:86:20:5b:
b7:65:5e:e4:74:cf:80:3b:56:18:da:a5:ef:1b:54:83:f4:d0:
60:b1:34:fb:90:97:b8:f9:33:63:74:7e:69:8c:6a:f3:9e:99:
36:48:a7:39:77:62:3b:81:a4:a4:78:4c:a3:b2:98:b1:63:71:
6a:24:5e:48:03:c2:b2:97:db:09:c6:76:d5:de:85:b1:f7:ad:
15:02:74:3f:ad:3c:44:8d:19:47:0c:c1:bd:08:08:15:a7:a1:
3d:94:b7:6c:91:3c:96:44:bf:7f:02:aa:f6:a9:41:35:08:1e:
6a:96:93:b0:d8:97:f2:40:e5:75:a3:7b:a0:24:a2:2b:9b:c8:
61:79:ab:b3:10:8c:e3:ec:19:08:e2:ed:34:a7:73:9f:88:02:
3f:3b:f0:bd:86:3a:4e:6b:f5:d7:48:fe:8a:79:0d:2b:f7:2c:
2b:04:03:8d:14:ef:c0:5a:0d:e1:f8:1c:0d:5b:f3:3d:e9:4a:
f7:89:68:61:c4:30:9a:4d:0f:9a:ec:82:ad:20:8e:a5:c0:d2:
2c:f2:70:a8:e6:7d:f8:73:f6:46:93:98:f2:19:9f:b2:20:61:
3c:6c:5a:a9:60:71:4d:7d:c6:d6:35:8e:cf:cc:5a:e5:d3:a6:
1d:29:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:03 2025 by rpki-client