Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa
File: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (raw, json)
Hash identifier: VJmNEduqkZiEGi1xGAFyFFiL246WcTWspaksMGhusvM=
Subject key identifier: C9:B2:A9:1F:11:EA:3F:67:3F:CF:E7:F8:C1:AE:14:2B:7E:1D:75:C9
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 0205
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa
Signing time: Thu 11 Jul 2024 03:35:08 +0000
ROA not before: Thu 11 Jul 2024 03:35:08 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 137831
IP address blocks: 143.92.64.0/19 maxlen: 19
143.92.71.0/24 maxlen: 24
143.92.92.0/24 maxlen: 24
143.92.93.0/24 maxlen: 24
143.92.96.0/24 maxlen: 24
143.92.97.0/24 maxlen: 24
143.92.98.0/24 maxlen: 24
143.92.100.0/23 maxlen: 23
143.92.108.0/23 maxlen: 23
143.92.108.0/24 maxlen: 24
147.136.132.0/24 maxlen: 24
147.136.134.0/24 maxlen: 24
147.136.135.0/24 maxlen: 24
147.136.184.0/22 maxlen: 22
147.136.184.0/24 maxlen: 24
147.136.185.0/24 maxlen: 24
147.136.186.0/24 maxlen: 24
147.136.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998
Validity
Not Before: Jul 11 03:35:08 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=668f52eb-405b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:d9:f2:31:dc:9d:ed:56:ac:53:08:a0:f3:
ad:57:7e:1f:9f:83:15:7f:1f:1d:03:de:cb:7f:95:
c3:20:35:60:ce:a4:c1:60:dd:93:f1:b8:ea:08:65:
35:26:70:98:5b:0c:1c:dc:e5:1e:22:13:88:73:bd:
7c:44:a3:59:48:d9:cd:0d:f8:30:4d:f4:e8:d4:37:
1f:a4:ab:d4:2c:63:11:9a:84:a9:7a:8a:47:e3:9c:
7e:f2:11:94:07:a5:f8:b2:d7:f6:e3:00:c3:5e:5c:
64:18:ae:d1:c6:51:e2:bb:35:b2:cc:af:10:a4:79:
56:ab:70:6c:15:b6:56:3a:5a:bf:84:4a:b9:24:3d:
ed:65:c5:3c:48:9f:c0:6d:45:b0:0c:1d:b9:34:59:
88:2d:3e:7c:e2:98:a2:29:dd:a5:47:01:fc:81:5b:
e2:09:d0:b8:bb:70:92:ee:c7:ee:09:2c:14:38:9a:
c2:24:12:99:64:d3:05:7e:c6:18:2f:e9:b5:58:b1:
87:7a:c1:f8:65:48:8e:8e:15:39:73:62:9b:5a:bd:
e6:bc:5b:12:59:72:4f:66:46:45:d8:ef:6a:af:2e:
7d:b2:d2:5e:c2:1a:bc:bf:a2:24:21:1d:2e:35:be:
80:c5:f9:33:87:6c:3c:b9:c6:8b:03:7e:10:70:69:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B2:A9:1F:11:EA:3F:67:3F:CF:E7:F8:C1:AE:14:2B:7E:1D:75:C9
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.92.64.0-143.92.98.255
143.92.100.0/23
143.92.108.0/23
147.136.132.0/24
147.136.134.0/23
147.136.184.0/22
Signature Algorithm: sha256WithRSAEncryption
83:ff:c6:4d:31:8d:6c:5e:b0:dc:8e:c2:36:da:c8:e0:7e:f0:
84:a5:ac:64:df:63:9f:a5:6c:b6:4e:07:39:7b:28:bd:9e:f5:
84:f5:be:e6:eb:bc:93:78:b3:65:af:40:65:42:cb:70:50:a9:
9f:c9:28:3b:1c:1b:d9:80:c6:2e:75:b6:4a:13:5e:6a:fe:50:
3b:97:d3:91:91:d7:d5:8c:0d:9a:74:79:42:e4:ce:ba:c0:5d:
08:a6:85:d0:6d:2a:fa:99:e4:21:8a:50:a0:f3:f3:99:fe:54:
82:b1:20:69:2b:a5:73:35:56:c0:aa:87:e2:ab:63:51:2d:16:
9f:55:fb:fe:85:ce:a9:5b:f4:a1:29:bb:ff:08:7d:14:65:10:
55:ab:27:ee:20:4d:04:9d:bc:06:2c:b7:23:ad:c3:a7:87:a2:
5a:f3:1b:88:7f:d0:aa:f8:28:13:aa:05:64:ae:53:d7:38:cb:
ed:02:50:91:dc:ed:ad:07:11:16:c1:a3:4c:22:e0:0e:3f:ec:
ae:78:54:6f:7e:7f:7e:5e:7e:a0:e0:f4:9a:70:0d:b7:09:8c:
35:9a:65:b5:9f:c9:ab:a1:57:04:cb:80:a8:15:84:71:fa:e9:
95:57:6f:81:8c:63:68:6d:6e:bd:10:2a:47:40:ed:98:ba:5a:
ee:c0:6b:bf
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw
MjM4MzZCQTAwHhcNMjQwNzExMDMzNTA4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjhmNTJlYi00MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEbZ8jHcne1WrFMIoPOtV34fn4MVfx8dA97Lf5XDIDVgzqTBYN2T8bjqCGU1
JnCYWwwc3OUeIhOIc718RKNZSNnNDfgwTfTo1DcfpKvULGMRmoSpeopH45x+8hGU
B6X4stf24wDDXlxkGK7RxlHiuzWyzK8QpHlWq3BsFbZWOlq/hEq5JD3tZcU8SJ/A
bUWwDB25NFmILT584piiKd2lRwH8gVviCdC4u3CS7sfuCSwUOJrCJBKZZNMFfsYY
L+m1WLGHesH4ZUiOjhU5c2KbWr3mvFsSWXJPZkZF2O9qry59stJewhq8v6IkIR0u
Nb6Axfkzh2w8ucaLA34QcGn8EwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMmyqR8R
6j9nP8/n+MGuFCt+HXXJMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvMUVBNTk4NEEw
QkUxMTFFRDlFM0FBMTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E
NjA0MDIEAgABMCwwDAMEBo9cQAMEAI9cYgMEAY9cZAMEAY9cbAMEAJOIhAMEAZOI
hgMEApOIuDANBgkqhkiG9w0BAQsFAAOCAQEAg//GTTGNbF6w3I7CNtrI4H7whKWs
ZN9jn6Vstk4HOXsovZ71hPW+5uu8k3izZa9AZULLcFCpn8koOxwb2YDGLnW2ShNe
av5QO5fTkZHX1YwNmnR5QuTOusBdCKaF0G0q+pnkIYpQoPPzmf5UgrEgaSulczVW
wKqH4qtjUS0Wn1X7/oXOqVv0oSm7/wh9FGUQVasn7iBNBJ28Biy3I63Dp4eiWvMb
iH/QqvgoE6oFZK5T1zjL7QJQkdztrQcRFsGjTCLgDj/srnhUb35/fl5+oOD0mnAN
twmMNZpltZ/Jq6FXBMuAqBWEcfrplVdvgYxjaG1uvRAqR0DtmLpa7sBrvw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:02:42 2025 by rpki-client