Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/77C9E89A3CDC11EEBFA0475EC4F9AE02.roa
File: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (raw, json)
Hash identifier: As2LymjqIDH0cOS124NvImUruw0ZeoIg/jht9yiAhvI=
Subject key identifier: 5B:6D:16:9A:80:9E:58:8E:2B:76:5F:C6:3A:1D:7F:FB:E8:57:FA:96
Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Certificate serial: 33A6
Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/77C9E89A3CDC11EEBFA0475EC4F9AE02.roa
Signing time: Thu 14 Mar 2024 15:00:51 +0000
ROA not before: Thu 14 Mar 2024 15:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45246
IP address blocks: 114.198.232.0/24 maxlen: 24
114.198.233.0/24 maxlen: 24
114.198.234.0/24 maxlen: 24
114.198.235.0/24 maxlen: 24
114.198.236.0/24 maxlen: 24
114.198.237.0/24 maxlen: 24
114.198.238.0/24 maxlen: 24
114.198.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13222 (0x33a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0267
Validity
Not Before: Mar 14 15:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65f31123-cc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:bd:f7:0e:53:aa:da:f2:09:aa:4e:24:35:
3c:7c:1f:d2:c9:b2:3c:85:26:5c:11:9f:b6:4b:92:
49:06:bd:9e:a3:df:14:64:f0:ac:2c:11:8f:d7:18:
ce:46:40:9f:a8:40:77:8e:a6:1c:fa:48:c1:b3:e3:
3b:ba:a3:f2:f4:1e:3d:b0:9d:30:9b:ce:6f:d1:f1:
88:53:e0:49:2c:61:8c:ee:3e:f9:48:7b:b8:e2:f8:
02:ed:d5:bb:3b:c2:7f:be:bd:68:53:ec:07:e2:eb:
f5:90:49:80:8b:50:e7:79:3e:f4:1e:ca:8d:cd:f9:
6e:3d:e9:b1:66:49:56:e6:1a:be:a7:9d:27:d8:fc:
aa:60:fc:33:1e:60:1f:88:f9:23:67:7e:5d:31:6a:
51:6f:9c:9e:23:26:f6:b2:09:b6:f0:18:5a:e5:57:
33:47:f0:1f:f7:76:0c:7d:f2:e5:5d:93:8e:25:98:
a3:d0:3c:a3:fc:d3:73:e3:a6:5d:89:fd:c4:de:ce:
50:50:04:2c:de:6a:68:08:ee:ec:7a:ba:27:a4:5d:
a9:94:d9:ea:15:d3:6f:72:0b:b4:14:83:40:c5:4b:
6c:b2:74:8a:ae:53:1b:1c:2d:bc:3c:f4:27:aa:a2:
3c:4c:24:2b:c4:2f:ca:00:3b:a4:d5:26:54:21:27:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6D:16:9A:80:9E:58:8E:2B:76:5F:C6:3A:1D:7F:FB:E8:57:FA:96
X509v3 Authority Key Identifier:
keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/77C9E89A3CDC11EEBFA0475EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.232.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:b7:2f:ba:03:0d:8e:da:6a:44:ef:84:4e:d7:bc:63:9e:5d:
fb:cc:57:ad:32:9d:2f:e4:5d:2e:d3:96:b0:8b:2a:74:e2:cb:
6e:0c:16:79:6c:a4:28:14:bf:65:04:ba:e7:f4:5a:b1:56:62:
29:fc:c0:b0:97:8e:95:a2:ed:74:6a:f1:29:b4:da:8b:d2:48:
54:54:75:99:7e:36:d5:f7:db:d3:bb:86:d3:0b:c7:c9:0c:52:
64:61:35:84:14:3b:07:f7:8d:f5:6a:70:d7:6f:27:d3:15:6e:
a3:16:fa:a2:72:54:1b:22:43:52:86:f5:78:f3:07:bd:0e:9e:
48:e8:df:d0:0b:76:5f:38:84:53:ad:b1:50:68:e6:82:a7:0e:
cd:62:1f:a8:c6:79:a9:f9:0c:5a:fd:83:e9:a2:7b:62:5a:68:
73:60:b7:c9:6a:7b:ae:f1:8e:c3:ca:5a:be:c9:74:04:f9:d0:
70:95:aa:71:9d:f5:4f:ee:4f:b4:2c:72:62:99:13:bd:45:e9:
a6:19:50:72:49:43:3b:79:c8:33:86:17:59:56:8c:c3:02:74:
34:bf:33:f7:e3:f1:f9:1c:de:4c:4d:7b:46:d0:6b:cd:d7:19:
e6:5a:ce:a0:00:07:ad:da:2b:d0:13:70:83:f5:7a:48:cb:3f:
0c:86:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:36:47 2025 by rpki-client