Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/976F7E467B0811EBA9191185C4F9AE02.roa
File: 976F7E467B0811EBA9191185C4F9AE02.roa (raw, json)
Hash identifier: WOVkhVTfhtR7d3654mZiq/l+THdybCzGhP5bpJcvMQc=
Subject key identifier: A9:A9:D4:76:38:27:9D:4F:BD:36:A5:F9:3A:5E:C5:8C:96:34:24:48
Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial: 050F
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/976F7E467B0811EBA9191185C4F9AE02.roa
Signing time: Thu 15 Jun 2023 00:27:17 +0000
ROA not before: Thu 15 Jun 2023 00:27:17 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 17635
IP address blocks: 203.14.105.0/24 maxlen: 24
203.57.128.0/24 maxlen: 24
203.57.129.0/24 maxlen: 24
203.57.130.0/24 maxlen: 24
203.57.131.0/24 maxlen: 24
203.57.132.0/24 maxlen: 24
203.57.133.0/24 maxlen: 24
203.57.134.0/24 maxlen: 24
203.57.135.0/24 maxlen: 24
203.57.136.0/24 maxlen: 24
203.57.137.0/24 maxlen: 24
203.57.138.0/24 maxlen: 24
203.57.139.0/24 maxlen: 24
203.57.140.0/24 maxlen: 24
203.57.141.0/24 maxlen: 24
203.57.142.0/24 maxlen: 24
203.57.143.0/24 maxlen: 24
2406:9680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1295 (0x50f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197227
Validity
Not Before: Jun 15 00:27:17 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=648a5ae5-3c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:6e:bd:6f:84:1b:21:c1:ff:6c:fd:1e:d8:
af:dc:df:e7:15:fd:a8:16:8b:72:65:fd:c4:4c:9e:
50:2f:e5:b7:fd:85:de:27:2d:39:76:f7:f4:a1:a8:
d5:8a:6d:cf:27:b4:18:b1:7e:f3:24:d0:c7:d8:43:
aa:16:4d:73:9f:89:22:57:37:e3:a4:bd:71:01:9d:
9f:99:7c:5f:aa:7a:7f:b6:35:89:24:bf:16:b2:bf:
98:a1:8e:bd:c3:65:44:ae:77:55:d9:58:a0:58:16:
fc:de:a9:96:29:61:da:df:3a:09:24:50:95:cf:ab:
1b:f5:7e:a2:06:0b:5d:6a:11:bc:a8:d7:af:55:cb:
71:2c:b7:5e:c5:d7:4c:0f:a9:06:ce:7d:ba:b4:f8:
d2:63:a6:5a:63:5c:76:13:b8:86:e0:82:ad:05:b9:
c1:f5:bf:8d:95:d5:70:7d:7d:0a:d2:44:5e:de:55:
4b:5e:a0:e1:6e:f5:73:15:35:b3:79:2f:b1:ce:a7:
ec:ff:e5:7d:ee:a1:fe:86:69:e8:e3:aa:19:22:5b:
9d:bf:06:fa:17:6e:ed:cf:81:51:cf:04:86:5b:91:
1c:74:fc:fb:7c:6a:03:7d:65:e9:62:f7:94:a2:2f:
02:a6:a9:b9:45:f2:13:c3:e6:bc:05:6d:84:78:a7:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:D4:76:38:27:9D:4F:BD:36:A5:F9:3A:5E:C5:8C:96:34:24:48
X509v3 Authority Key Identifier:
keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/976F7E467B0811EBA9191185C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.105.0/24
203.57.128.0/20
IPv6:
2406:9680::/32
Signature Algorithm: sha256WithRSAEncryption
dd:39:0f:7b:20:fd:5f:b9:53:6b:7e:99:ea:e6:cc:10:3b:77:
e4:e2:0c:81:7d:f3:3b:81:af:bf:08:9c:48:70:65:f6:c9:60:
b2:f2:fd:a3:0d:f4:ac:6a:c6:c2:90:4a:64:99:80:82:75:d2:
25:a4:ac:30:58:fb:93:c9:b7:67:9c:07:d3:a5:3a:4b:88:42:
8e:51:f8:18:2b:21:a5:b1:85:a8:bf:61:6e:01:a9:dd:d2:d0:
71:75:25:a1:f0:8b:88:b9:a4:f1:00:09:9b:f6:62:5c:7d:a7:
bd:c9:bf:92:69:73:3e:c2:94:68:d7:67:5c:a9:c2:a8:a1:e7:
6d:03:9d:95:01:53:06:21:a4:93:47:b0:9d:bd:b6:78:34:2b:
93:9e:d3:50:1e:70:4f:27:8d:cf:55:b4:e2:9b:30:14:6b:1e:
6b:3f:20:66:85:82:51:33:ad:8d:cf:23:2d:7b:39:7b:69:16:
5b:d5:0c:a0:7e:3a:0f:97:1a:9d:41:ea:3d:0f:5e:31:69:73:
7c:a9:6f:f2:5e:5d:be:51:ba:61:65:cc:04:f1:78:66:43:49:
48:a2:d7:4a:c5:e3:c1:d7:51:48:a0:8f:95:cb:4e:5f:af:41:
9c:e8:65:67:33:f0:65:cc:a8:7c:3c:96:73:dc:60:d7:2d:f8:
3e:63:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:35:48 2025 by rpki-client