Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa
File: 101569A41D3111EB9ED04852C4F9AE02.roa (raw, json)
Hash identifier: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=
Subject key identifier: 5F:26:6B:34:3C:E5:15:C2:D0:DD:25:FF:48:9E:21:14:72:F1:DF:7B
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 364E
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa
Signing time: Mon 02 Dec 2024 14:30:47 +0000
ROA not before: Mon 02 Dec 2024 14:30:47 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9835
IP address blocks: 202.139.202.0/24 maxlen: 24
202.139.203.0/24 maxlen: 24
2001:c38:90a1::/48 maxlen: 48
2001:c38:90a3::/48 maxlen: 48
2001:c38:90a4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13902 (0x364e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475
Validity
Not Before: Dec 2 14:30:47 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674dc497-b095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:13:eb:1c:9c:16:24:dc:f3:d5:88:4e:6d:e1:
36:a5:35:82:49:f0:53:96:80:dd:e9:34:d6:96:ac:
cb:cd:ec:cc:7a:9b:9a:5f:71:49:bf:dc:34:a2:43:
67:09:61:c3:75:3d:ec:28:d2:33:72:f6:10:98:5a:
3a:da:c3:fe:5d:09:5a:79:2d:97:8f:e2:8c:ea:87:
58:0d:4c:64:05:5c:5c:24:0f:17:0e:1b:9f:e2:7f:
3e:67:25:16:2b:72:9b:7e:7b:c5:29:6c:c9:e2:c1:
6d:47:af:6a:0c:4d:84:ad:06:00:be:33:77:de:fe:
60:c9:a9:dc:0e:92:3b:6b:1d:2f:c8:bd:70:c3:55:
84:50:ce:ba:6f:93:0c:37:81:88:3f:a6:b1:be:fe:
58:7a:4e:60:09:ae:05:7e:8c:74:77:1c:60:b5:88:
a9:4c:67:1b:a0:45:77:8d:0a:e8:49:37:fa:73:70:
69:0a:a0:96:16:02:9b:3a:c5:65:fd:83:3b:96:ea:
eb:c6:e9:75:07:f8:5a:b7:8f:d1:50:da:e7:e4:87:
30:61:45:18:39:ab:89:ed:c5:ff:5e:01:9c:8b:20:
99:bf:7c:3b:30:3b:cb:39:bd:4e:72:a1:e6:38:4e:
14:c6:de:5a:95:12:b5:15:5e:94:af:93:86:8a:b7:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:6B:34:3C:E5:15:C2:D0:DD:25:FF:48:9E:21:14:72:F1:DF:7B
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.202.0/23
IPv6:
2001:c38:90a1::/48
2001:c38:90a3::-2001:c38:90a4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:dc:4f:a2:a3:e5:87:0b:41:29:f7:12:2f:f3:7e:df:f6:b3:
22:33:b1:22:f7:70:5d:8f:3e:cb:08:d3:eb:f0:7e:68:3a:a1:
74:b1:66:d8:15:98:58:a4:ff:37:da:d6:27:25:93:04:39:61:
ec:a1:c9:f2:50:4a:53:c1:54:bd:64:cc:b2:e1:31:ac:cb:06:
87:eb:e1:00:39:16:b9:4a:34:f3:bf:97:ce:4b:82:47:94:f8:
55:82:82:73:b7:6b:07:f0:4b:c3:11:c4:cc:60:05:cf:68:2f:
6d:66:c7:ba:cd:91:66:40:5d:ef:4a:2c:99:62:b8:56:bc:05:
c0:8e:46:23:66:58:0a:0e:b2:b8:66:47:f2:ae:1f:f5:45:80:
74:58:1e:2b:f6:35:c6:f4:90:92:7f:84:1f:dc:ab:5d:1b:48:
b5:1e:e9:82:e8:a9:87:bb:9e:c6:43:e7:94:49:b8:db:36:5d:
ca:f7:04:b5:d6:c2:da:a2:3e:a9:bd:78:3d:ed:e6:d7:c0:68:
10:42:9c:3f:09:0a:3a:43:9f:ff:66:3d:5a:9c:79:81:bb:3f:
c2:54:8b:27:89:a1:e7:7e:93:8b:67:02:04:49:28:dc:50:e7:
d1:dc:7b:e4:cf:d5:6e:2c:bf:cb:d4:7b:8d:53:c7:73:07:04:
4d:0d:27:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:37:24 2025 by rpki-client