Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa
File: 03BA8B36824411EF94479387C4F9AE02.roa (raw, json)
Hash identifier: HE9hhfjLbpoLmdYRqz2hD2rCJCRDbET7MCnv1VGXqgg=
Subject key identifier: 27:13:29:60:C2:AA:42:DA:18:75:C1:F9:0F:2B:09:13:23:10:BF:6E
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 06BF
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa
Signing time: Fri 04 Oct 2024 20:27:47 +0000
ROA not before: Fri 04 Oct 2024 20:27:47 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 55740
IP address blocks: 14.195.78.0/24 maxlen: 24
14.195.79.0/24 maxlen: 24
14.195.91.0/24 maxlen: 24
49.249.1.0/24 maxlen: 24
49.249.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Oct 4 20:27:47 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67004fc2-cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:75:c3:e9:f2:27:47:95:4c:3f:77:7b:fe:
b3:d9:44:e9:b3:a0:16:1f:a3:b5:82:ac:74:99:d8:
d4:e3:fd:23:9f:22:ae:03:b3:fb:1e:f2:1d:99:00:
2a:28:7b:74:03:d1:14:e5:bc:35:d6:61:c7:f6:66:
26:55:cc:6f:84:db:dd:58:5f:76:78:8e:f0:a4:de:
e5:fb:0b:d6:cb:dc:60:7f:f7:fd:c2:22:64:b1:71:
c7:48:ab:8a:fa:3e:c6:e7:0c:0b:37:75:29:5e:6b:
d6:47:ae:0f:04:f9:0a:2e:84:17:2f:25:6f:39:95:
ac:7e:80:aa:bf:72:eb:df:00:6d:67:9b:df:94:e4:
67:49:8a:16:25:ad:93:24:fe:19:98:9f:d0:f9:15:
67:8f:1d:d2:b6:6f:b4:5b:c1:cd:7d:34:55:2b:30:
fd:2f:70:41:34:d1:95:7b:20:ee:f7:7b:34:ef:8f:
8d:27:6e:81:68:29:00:18:21:d5:91:4b:2f:d3:85:
cb:83:64:95:52:a2:04:5c:84:2c:91:49:e2:dc:7b:
2f:c0:71:2c:66:98:b8:40:01:d7:e6:21:88:21:09:
34:27:a9:dd:94:b7:b8:95:33:e7:0e:35:d2:e3:94:
cf:57:db:b5:8a:8c:11:72:79:f3:ff:58:4e:41:9e:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:29:60:C2:AA:42:DA:18:75:C1:F9:0F:2B:09:13:23:10:BF:6E
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.195.78.0/23
14.195.91.0/24
49.249.1.0/24
49.249.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:af:68:ac:35:92:f0:17:28:75:4d:d6:28:23:97:1f:a4:48:
12:9e:22:ed:9d:db:59:71:83:a8:80:a3:ae:94:f2:1e:99:c7:
c2:81:c3:fa:b5:fa:39:dd:94:48:cd:0f:dd:84:74:3a:5f:bc:
29:07:22:5d:1d:79:24:be:38:4b:53:3c:ec:0a:50:91:87:ae:
58:e9:6c:89:6a:c5:2f:e5:46:8d:f5:fc:ef:27:71:cd:f6:0e:
35:91:6b:e0:cb:6b:ce:c3:8a:ff:92:03:68:c0:e7:21:d7:7d:
ee:7f:83:b4:99:06:c0:81:49:3d:0b:08:dd:0f:d4:a2:4c:ee:
3d:47:4c:19:4e:1c:0c:f3:4c:0c:0b:7a:0f:df:53:c3:b8:ee:
7a:50:56:ee:60:0c:8f:38:4b:ec:31:25:25:01:1d:9c:2a:c7:
b2:b6:8e:71:e9:90:1c:25:73:d1:2f:1b:d2:81:86:f3:cf:d6:
de:2c:14:fe:0c:46:e9:56:76:a5:79:ab:8e:d9:5a:05:4b:42:
9c:4b:73:f4:75:1a:8d:a8:01:de:54:49:f5:79:a6:34:e6:fc:
60:2c:db:af:38:e2:57:72:25:d1:bd:b3:03:3f:a3:46:cd:58:
94:27:e7:de:50:3c:f4:04:c3:d5:e9:76:85:a5:f4:9e:fd:31:
b6:48:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:30 2025 by rpki-client