Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa
File: 94C16496222811EF99153155C4F9AE02.roa (raw, json)
Hash identifier: Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=
Subject key identifier: 7D:B2:23:F2:99:15:20:BB:FA:34:07:AB:2E:02:E6:75:5C:AE:B8:D9
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2401
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa
Signing time: Fri 26 Jul 2024 16:33:35 +0000
ROA not before: Fri 26 Jul 2024 16:33:35 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 18392
IP address blocks: 45.114.20.0/24 maxlen: 24
45.114.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9217 (0x2401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Jul 26 16:33:35 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a3cfdf-238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:5e:90:aa:b3:e1:ee:03:76:e7:40:c0:04:
8e:8e:00:ee:b4:1d:ba:b1:48:01:7e:71:f9:c8:1b:
e0:07:e0:2e:e0:e0:36:cb:49:6d:c4:ac:a6:1c:22:
5f:f8:03:a4:ff:88:69:2d:fd:9c:33:58:6a:a8:4a:
60:be:7e:0a:4c:86:db:2e:1f:69:d4:0a:0f:36:1b:
cb:ab:21:44:e9:ff:ba:1d:3c:41:16:f5:dc:d8:52:
3f:40:a6:6b:a6:1d:8a:df:db:bf:c6:9f:71:7e:49:
07:18:e3:0a:a5:1a:73:1e:df:d4:28:33:20:62:f3:
96:19:d0:05:13:79:9b:52:a6:0b:a7:a8:43:ec:e0:
fd:87:c5:4a:be:6b:b8:0a:45:a1:8d:2d:01:48:c6:
ed:08:c6:04:12:61:cf:20:ad:cf:e0:c3:93:19:8b:
08:1a:cd:3f:e9:4f:50:17:38:68:e2:7b:37:00:12:
e9:6d:e6:11:33:5a:c3:81:11:49:e0:17:ab:39:de:
d7:a4:7a:4d:4f:b6:24:39:73:ed:45:d7:c2:e6:e1:
bc:59:ca:40:cb:b5:3f:83:0e:c8:54:0b:a8:46:b1:
47:2a:5e:e9:99:8d:db:ae:d9:ab:a3:8e:df:0d:cd:
0c:ac:99:ba:5a:ea:e1:e4:1a:05:76:52:e6:47:f1:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B2:23:F2:99:15:20:BB:FA:34:07:AB:2E:02:E6:75:5C:AE:B8:D9
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.20.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:3b:42:05:3d:2d:1e:ae:53:73:71:98:67:45:bb:bb:4b:bf:
93:7a:79:1c:1e:13:0e:44:b1:7d:27:42:d9:58:7f:bc:ad:ed:
b6:22:e2:ae:60:f8:1d:71:ff:51:31:d2:22:16:93:45:69:ae:
5b:f0:12:7e:9e:3f:61:15:b2:cf:c5:46:d4:99:18:4c:dc:a9:
31:02:2b:02:6a:c9:2f:5c:3b:6d:c6:8f:e3:e3:b8:27:e4:79:
79:9f:7b:af:59:cf:48:30:29:4f:a8:f7:8e:af:74:37:b9:d8:
a9:52:55:15:2f:46:72:29:56:a0:67:13:f5:a4:b8:aa:fd:9c:
f2:d5:a6:29:cb:a5:a1:67:ad:85:a9:93:34:50:da:9d:4a:29:
e5:13:09:18:62:8b:8f:fd:9b:27:6a:b2:47:45:23:c2:15:a4:
4a:16:8c:68:c8:9a:ec:17:a6:d0:29:56:73:75:3d:87:2d:27:
61:13:7f:5b:ae:c2:a2:2b:7f:7d:a9:a7:7f:47:8f:3d:a2:84:
41:26:64:12:b0:c3:4a:51:9c:2a:42:eb:74:15:bb:95:5f:f4:
72:1a:54:de:3c:ae:5e:9a:8c:8e:77:ec:dd:d1:55:f2:57:03:
59:09:84:3f:f9:a7:0b:c0:4e:cb:e3:18:61:db:52:4f:c1:83:
27:21:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:10:56 2025 by rpki-client