Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa
File: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (raw, json)
Hash identifier: ySE2YBsbAXt0k1PEdiGam1s5GhhHLonIBlG28ashrzw=
Subject key identifier: 20:AF:AC:7B:38:0E:8D:23:7A:03:A4:46:27:D0:A1:6B:63:DC:EE:5D
Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Certificate serial: 0C74
Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa
Signing time: Wed 12 Feb 2025 19:27:08 +0000
ROA not before: Wed 12 Feb 2025 19:27:08 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 394881
IP address blocks: 45.119.4.0/24 maxlen: 24
103.133.94.0/24 maxlen: 24
203.23.176.0/24 maxlen: 24
203.23.177.0/24 maxlen: 24
203.34.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3188 (0xc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EB5
Validity
Not Before: Feb 12 19:27:08 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67acf60c-d404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:00:be:24:d0:c2:99:8b:d5:76:7f:49:35:
82:4c:a1:32:3d:20:1c:b9:02:b0:34:25:cb:17:be:
75:49:78:fb:ff:69:65:b9:4a:6e:68:48:d6:0c:ba:
76:93:31:d8:cb:b9:fa:59:34:46:f5:c9:74:ba:8b:
ea:c6:eb:17:70:6e:9b:cb:7e:ad:07:76:65:38:f3:
94:bb:7b:60:a7:3a:a6:36:78:09:a1:65:d9:e7:d5:
cf:88:58:40:f2:6a:e0:de:36:ac:c7:62:99:e3:90:
0f:6e:f3:67:bc:1a:0a:2d:8f:19:02:b3:94:fa:6f:
97:4b:d0:ae:ac:36:36:4f:4d:05:0b:2d:73:67:18:
bc:5d:ad:f8:06:c4:ae:fe:6b:19:e7:82:23:ce:0c:
68:db:5d:4e:12:7e:9c:c8:d8:a5:5a:60:14:74:5c:
56:62:b6:b4:2e:af:8f:0b:e0:12:7c:40:8f:27:55:
55:e5:14:04:57:3a:e6:7b:2a:da:9f:fb:a7:c0:c1:
b7:f6:a0:ba:8e:b8:c0:9a:f2:5d:7c:94:85:8c:bb:
c0:af:f6:b2:0f:05:03:ee:1e:9e:d3:26:b6:7e:26:
39:3a:3d:16:9b:88:58:65:1a:3b:1e:f5:f4:a5:ff:
9c:e0:af:86:82:57:f9:27:4d:e3:a6:41:69:23:b0:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:AC:7B:38:0E:8D:23:7A:03:A4:46:27:D0:A1:6B:63:DC:EE:5D
X509v3 Authority Key Identifier:
keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.4.0/24
103.133.94.0/24
203.23.176.0/23
203.34.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:95:97:7c:4d:90:c5:ec:1a:23:e0:53:7e:29:ee:b3:e3:2d:
17:a3:d0:10:89:eb:91:47:f2:0b:d4:4d:48:68:6b:3f:a0:5b:
0b:7f:f9:d9:e3:0b:1a:b3:40:73:3c:1a:c1:ff:40:c7:ce:ba:
34:12:d4:d1:13:87:7c:d4:31:e0:55:c6:a4:ec:47:d3:f7:1a:
8e:3e:8b:f0:11:45:f4:1e:8f:b1:46:03:a1:eb:5f:6e:b0:9a:
0c:80:13:ab:6d:69:e8:f3:bf:80:cf:70:c3:22:d0:fe:b7:bb:
16:c9:fa:8f:e6:2f:fa:82:5d:b1:5a:98:1b:d5:64:42:ce:c1:
01:93:51:38:39:c4:a5:f7:02:0e:73:10:5d:0a:66:8e:e9:a8:
4d:a8:dc:9e:e7:fc:7c:c1:8c:ec:f2:e0:74:07:8e:f3:89:42:
2e:c4:83:ce:bc:74:bc:f3:76:53:f6:81:45:58:5d:70:59:b8:
9d:19:ec:ae:2f:86:06:55:07:ad:37:c4:fb:45:da:f7:7f:6c:
8c:95:97:9d:c1:7b:d0:6f:bd:ae:c1:ed:5d:a1:5e:21:a5:8a:
7f:2d:a9:ce:98:70:b7:bf:37:3a:e2:0d:66:54:da:5c:0d:e4:
45:14:1d:c6:ab:9c:84:a7:22:9e:1f:ac:13:f5:0d:08:de:6c:
6b:31:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:14 2025 by rpki-client