Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/9FC3DC92883311EDB7271C62C4F9AE02.roa
File: 9FC3DC92883311EDB7271C62C4F9AE02.roa (raw, json)
Hash identifier: Cf8bqRacvTWl+UzpH6e1kxekXSzzSxIQ9wSazOTj5Ck=
Subject key identifier: 02:92:0B:37:AD:31:55:DB:F1:04:45:4D:54:16:51:45:E5:EC:45:8A
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 09A9
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/9FC3DC92883311EDB7271C62C4F9AE02.roa
Signing time: Sun 02 Mar 2025 21:08:54 +0000
ROA not before: Sun 02 Mar 2025 21:08:54 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 45280
IP address blocks: 114.134.160.0/20 maxlen: 20
114.134.160.0/24 maxlen: 24
114.134.161.0/24 maxlen: 24
114.134.162.0/24 maxlen: 24
114.134.163.0/24 maxlen: 24
114.134.164.0/24 maxlen: 24
114.134.165.0/24 maxlen: 24
114.134.166.0/24 maxlen: 24
114.134.167.0/24 maxlen: 24
114.134.168.0/24 maxlen: 24
114.134.169.0/24 maxlen: 24
114.134.170.0/24 maxlen: 24
114.134.171.0/24 maxlen: 24
114.134.172.0/24 maxlen: 24
114.134.173.0/24 maxlen: 24
114.134.174.0/24 maxlen: 24
114.134.175.0/24 maxlen: 24
114.134.176.0/21 maxlen: 21
114.134.176.0/24 maxlen: 24
114.134.177.0/24 maxlen: 24
114.134.178.0/24 maxlen: 24
114.134.179.0/24 maxlen: 24
114.134.180.0/24 maxlen: 24
114.134.181.0/24 maxlen: 24
114.134.182.0/24 maxlen: 24
114.134.183.0/24 maxlen: 24
203.80.60.0/22 maxlen: 22
203.80.60.0/23 maxlen: 24
203.80.62.0/24 maxlen: 24
203.80.63.0/24 maxlen: 24
2402:7e00::/32 maxlen: 32
2407:ca00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2473 (0x9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE
Validity
Not Before: Mar 2 21:08:54 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c4c8e6-128b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:2e:ea:2b:fe:0d:0a:26:ca:f4:02:fc:55:
3c:7b:a8:2d:c3:19:41:87:c4:ef:92:7c:ef:35:b0:
d5:f2:11:e5:ac:06:82:00:27:a7:a4:d9:6b:36:2c:
cf:81:12:5c:80:30:dd:fc:4c:98:c1:41:89:7a:9c:
44:73:29:77:cb:b9:a4:9a:58:92:8e:76:26:8b:33:
f2:bc:43:fc:4e:4f:16:74:6b:d7:e0:97:38:37:28:
26:60:a4:8e:ae:ab:a9:02:d0:35:d8:86:73:ba:06:
d9:25:83:fc:83:e7:8c:7c:88:ac:c0:c0:2d:c3:b1:
b3:d8:14:20:52:db:d1:10:1d:c4:ed:0f:8e:02:03:
c9:b8:13:13:5d:2f:ad:f5:80:c3:35:4f:7e:48:26:
b3:2b:f9:06:55:6c:ae:05:f3:3a:99:76:c0:58:5a:
18:e1:f3:2f:b2:79:89:bd:d4:e9:2b:25:59:3c:24:
cd:67:d0:f0:5e:70:6d:92:2a:cc:6e:4f:bd:93:93:
90:93:00:34:10:fa:d1:f9:08:52:29:da:ee:4b:bc:
e2:de:65:1b:44:9c:05:0e:bc:21:00:33:f2:60:a6:
a8:50:e8:31:a5:5c:29:b1:eb:6e:2b:e7:38:8a:e4:
1b:c5:dd:b3:ac:bf:c7:04:b3:ec:2d:0c:05:bc:8e:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:0B:37:AD:31:55:DB:F1:04:45:4D:54:16:51:45:E5:EC:45:8A
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/9FC3DC92883311EDB7271C62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.134.160.0-114.134.183.255
203.80.60.0/22
IPv6:
2402:7e00::/32
2407:ca00::/32
Signature Algorithm: sha256WithRSAEncryption
a8:a4:c5:ff:66:fd:55:3f:bc:c3:49:e5:05:77:97:15:60:28:
b1:2c:6e:c6:b0:a3:f8:2d:92:d4:fc:a2:16:bd:34:d2:09:ce:
6a:4c:12:24:c9:f5:04:7d:aa:e2:2c:a1:03:ab:2e:c3:da:dc:
88:16:60:6d:4b:25:d8:99:53:44:89:5e:98:dd:98:9c:43:34:
8b:6b:75:69:4b:ea:bf:49:0f:4a:67:57:1a:2c:03:24:bd:0e:
63:44:38:e1:0e:dc:cd:6a:e5:2c:52:6e:6a:80:3e:ad:eb:49:
a3:d2:7f:2c:00:bd:82:29:5a:04:5f:b7:de:0d:18:a5:41:19:
1f:db:80:c5:8a:45:24:95:fe:8a:82:d4:12:91:50:d0:40:6c:
94:d6:e1:69:51:4e:9f:82:57:34:03:a6:d8:5f:5f:c0:e3:9e:
21:f3:99:d3:97:11:fa:41:41:fe:a5:be:44:18:df:d8:9b:78:
cd:e6:91:f2:9e:49:72:28:ae:9e:df:36:05:ba:30:e9:61:d1:
cf:07:42:ad:17:26:e9:1e:a7:04:06:fb:3e:d9:a5:3f:31:19:
0a:10:05:d1:9c:f8:9b:65:79:30:b9:d9:25:7e:34:49:0b:a7:
59:ed:00:52:d4:7e:40:37:0f:81:22:e5:b9:27:93:eb:9f:be:
78:1a:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:49:02 2025 by rpki-client