Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/EA5A9A32BDAA11ED92995562C4F9AE02.roa
File: EA5A9A32BDAA11ED92995562C4F9AE02.roa (raw, json)
Hash identifier: la16kPDMZ0PGNGFfbiOJE4nU4r91VONeRM7xfP7lGe4=
Subject key identifier: A8:AE:2C:5B:6E:14:F4:E3:C0:9C:2F:ED:AF:F5:DB:EC:80:68:4D:01
Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B
Certificate serial: 0128
Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/EA5A9A32BDAA11ED92995562C4F9AE02.roa
Signing time: Mon 23 Sep 2024 03:17:09 +0000
ROA not before: Mon 23 Sep 2024 03:17:09 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 45748
IP address blocks: 202.14.70.0/23 maxlen: 24
202.43.118.0/24 maxlen: 24
202.43.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158650
Validity
Not Before: Sep 23 03:17:09 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=66f0ddb4-1130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c9:09:1f:8b:59:06:92:e1:fd:b3:2e:1e:0c:
45:93:8f:19:f0:5c:28:ca:3d:a9:5f:e3:fb:7b:dc:
16:b5:a7:3c:9d:af:30:f9:99:6c:30:1e:7a:c7:44:
4a:e9:c0:e2:27:e1:e1:af:2f:0e:a1:96:d5:cf:c4:
27:07:51:97:48:b7:ea:67:ba:c5:07:f4:54:20:d8:
3a:9e:62:81:e9:4d:28:d8:01:32:78:e9:41:9c:47:
4f:da:9c:e2:91:bd:24:e7:6e:f2:64:f7:2a:4b:0b:
75:75:33:ad:35:05:17:ff:d4:d2:f2:d1:1f:a4:d6:
cd:b9:9c:0b:ed:3a:51:5a:28:b9:80:75:b5:d6:36:
ec:31:a9:63:ef:35:0c:a0:0d:1c:68:99:0f:06:bf:
b0:3b:27:01:9e:6a:e4:35:87:fd:04:5b:26:46:4a:
e2:e9:7e:e0:8d:12:b6:75:4e:15:21:80:02:d1:51:
db:3e:b9:77:85:15:be:d1:cc:52:2a:ec:a1:d3:d1:
03:a0:96:b0:5c:fd:4a:ae:34:89:2c:2f:81:28:3b:
79:ad:58:e4:09:dc:28:8b:b1:05:50:b3:89:9e:22:
15:27:05:6a:c1:3c:d0:9c:46:ec:15:d9:5c:6d:5a:
53:12:3b:36:bd:13:3c:36:41:ff:65:5c:d5:d4:8e:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:2C:5B:6E:14:F4:E3:C0:9C:2F:ED:AF:F5:DB:EC:80:68:4D:01
X509v3 Authority Key Identifier:
keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/EA5A9A32BDAA11ED92995562C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.14.70.0/23
202.43.118.0/23
Signature Algorithm: sha256WithRSAEncryption
16:f9:e8:da:f1:97:7a:c3:6e:e3:7c:dd:bc:f5:b5:32:48:2f:
dc:db:b0:0a:a7:2a:b3:08:86:4d:10:62:6a:d1:bd:cf:64:c9:
0c:51:e7:3b:1e:9e:0f:1a:b7:02:01:7b:87:f3:b2:af:29:11:
86:54:6f:bc:a6:ce:71:78:57:cb:05:c9:32:13:e6:43:68:82:
40:14:f2:39:36:1e:6c:62:07:ba:e9:df:46:43:5d:7e:41:af:
81:7d:d6:80:8d:bd:96:f4:e1:08:90:8a:cf:9b:d6:8d:fe:b0:
29:41:fa:73:39:14:d9:da:f0:f3:de:ef:2c:cb:28:30:02:b3:
89:33:07:be:4d:8d:df:a0:12:8d:ff:df:7e:e0:1f:f6:91:d5:
92:f4:7c:75:3b:c3:48:3f:89:cc:88:b3:72:5c:a4:e5:b7:fc:
69:d7:0a:4e:0b:59:28:9e:ae:9c:cf:3f:bd:6b:5e:a0:23:6a:
c6:66:a6:43:df:87:7d:0e:38:d8:e6:64:f0:cf:af:ca:be:3b:
f8:98:ae:59:33:44:b0:2c:fb:ed:fe:24:9a:d3:c1:d9:14:db:
4c:aa:63:7f:69:bf:dd:04:12:40:a7:79:4f:f9:80:ef:6a:a9:
af:10:a9:0b:ee:25:b1:61:09:8d:84:5a:e0:82:8c:56:a2:86:
32:19:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:49:22 2025 by rpki-client