Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa
File: B059C44831AB11ECAB908E42C4F9AE02.roa (raw, json)
Hash identifier: jpqfykEtXXmj6Mk5ax89hq50WV+obiHvLv4IGmQnups=
Subject key identifier: 20:66:07:9B:FF:00:19:05:BB:12:17:F6:6D:32:52:19:E6:8A:D3:8E
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 30F8
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa
Signing time: Tue 30 Apr 2024 15:52:40 +0000
ROA not before: Tue 30 Apr 2024 15:52:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6421
IP address blocks: 14.141.246.0/24 maxlen: 24
14.141.247.0/24 maxlen: 24
59.164.76.0/24 maxlen: 24
59.164.77.0/24 maxlen: 24
115.110.74.0/24 maxlen: 24
115.110.75.0/24 maxlen: 24
115.112.20.0/24 maxlen: 24
115.112.21.0/24 maxlen: 24
121.240.218.0/24 maxlen: 24
121.240.219.0/24 maxlen: 24
121.240.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12536 (0x30f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: Apr 30 15:52:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663113c8-fda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:1e:4d:a6:86:dd:6c:c3:dc:80:a9:9c:e5:
74:f3:0b:9d:eb:84:d4:9a:cc:23:9d:74:8f:2b:e7:
0b:0c:3b:43:0a:29:eb:99:48:1d:62:4c:05:28:aa:
7e:6e:56:f3:62:c5:39:3e:4c:6c:cd:e5:a4:13:ef:
2b:d3:8a:e2:97:9b:76:a4:71:01:8d:e1:b3:c8:9d:
f9:04:f1:99:b9:9c:2d:e7:d9:45:41:fa:8b:07:3b:
f6:a0:a6:15:c0:44:f2:b9:b8:95:f8:5c:db:57:b3:
8d:57:8a:08:0c:05:63:30:6b:f3:4b:d5:49:aa:be:
76:a5:bd:5d:d3:de:0b:9b:9e:cc:a8:0a:9c:9f:1f:
27:b4:58:b5:4b:62:3c:e6:e8:ad:8b:d1:98:9d:1a:
c5:34:ac:6f:ef:b5:c2:07:04:7a:d8:c4:0b:e3:f2:
50:06:11:4b:06:7b:91:4f:9d:07:95:3e:6f:89:c2:
4c:53:96:8f:4f:ec:ff:f0:4c:a9:30:09:00:94:98:
c2:15:c0:30:6a:d4:f3:74:0b:a9:fb:c0:58:05:c2:
98:0c:ed:8c:7a:e9:50:c5:23:1f:35:d4:2f:ba:b2:
b0:2c:9c:21:9a:b6:54:1c:7e:9f:19:d9:ea:71:f9:
0e:22:e4:f5:68:8a:c8:5f:f8:00:df:7c:b1:1b:e3:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:07:9B:FF:00:19:05:BB:12:17:F6:6D:32:52:19:E6:8A:D3:8E
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.141.246.0/23
59.164.76.0/23
115.110.74.0/23
115.112.20.0/23
121.240.218.0/23
121.240.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c6:6a:5e:62:6e:71:52:2d:85:d8:88:2a:59:d2:a6:ba:52:
46:a7:c9:35:a5:2b:a2:a3:dc:d2:ac:21:b1:8c:b1:65:e4:83:
eb:af:a8:ef:28:88:a5:c4:6b:02:76:28:47:92:e2:de:25:56:
62:20:3b:37:e9:8f:09:10:99:94:bb:54:d8:af:92:aa:d1:da:
68:9f:0d:fb:5a:2c:6f:c6:e6:2d:f9:5a:3f:6e:ea:dd:e3:96:
84:91:21:b9:b0:34:d9:76:49:74:7f:4f:f9:eb:fd:3f:4f:51:
c0:e4:ca:2c:25:16:62:9c:64:41:e9:1c:9d:86:ca:2b:3f:02:
cb:f2:3d:29:96:25:b1:5f:ba:2f:02:62:58:ac:4e:ec:ed:fe:
7e:8a:41:51:94:2e:a5:d7:95:15:84:7f:ad:38:d2:4b:ce:50:
8b:7f:e5:99:c5:8e:34:29:b5:4b:86:52:ff:d9:12:67:fc:a1:
5e:79:04:e4:61:87:32:90:e3:41:9a:af:d2:0f:77:5a:ff:de:
19:0a:48:8b:5c:6c:6f:59:da:94:c9:00:e8:18:5e:ed:a8:bf:
51:b5:5a:f9:12:43:b6:98:8d:40:36:b2:6b:62:ef:3e:ae:36:
90:13:b1:3c:b4:03:61:d7:cf:81:eb:e2:a8:94:38:bb:bd:38:
5d:55:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:50:31 2025 by rpki-client