Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/CFAE1776E7C811ECA2BF6554C4F9AE02.roa
File: CFAE1776E7C811ECA2BF6554C4F9AE02.roa (raw, json)
Hash identifier: 9JpncinWj3Mb+SKmefKOyu3Vq6vUzJjJGOGMhY/HT94=
Subject key identifier: 44:E2:47:42:56:10:58:85:80:17:A4:FC:BA:DB:5C:CA:8A:FB:E4:43
Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Certificate serial: 3456
Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/CFAE1776E7C811ECA2BF6554C4F9AE02.roa
Signing time: Sat 23 Nov 2024 23:58:15 +0000
ROA not before: Sat 23 Nov 2024 23:58:15 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9892
IP address blocks: 114.129.32.0/22 maxlen: 22
114.129.33.0/24 maxlen: 24
114.129.36.0/22 maxlen: 22
114.129.36.0/24 maxlen: 24
114.129.38.0/24 maxlen: 24
114.129.40.0/23 maxlen: 23
114.129.41.0/24 maxlen: 24
114.129.45.0/24 maxlen: 24
114.129.46.0/24 maxlen: 24
114.129.47.0/24 maxlen: 24
123.100.235.0/24 maxlen: 24
123.100.236.0/22 maxlen: 22
123.100.236.0/24 maxlen: 24
123.100.237.0/24 maxlen: 24
123.100.238.0/23 maxlen: 23
123.100.240.0/22 maxlen: 22
123.100.241.0/24 maxlen: 24
123.100.244.0/23 maxlen: 23
123.100.244.0/24 maxlen: 24
123.100.245.0/24 maxlen: 24
123.100.248.0/21 maxlen: 21
123.100.251.0/24 maxlen: 24
123.100.252.0/24 maxlen: 24
202.157.128.0/19 maxlen: 19
202.157.128.0/21 maxlen: 21
202.157.136.0/22 maxlen: 22
202.157.142.0/23 maxlen: 23
202.157.148.0/24 maxlen: 24
202.157.152.0/24 maxlen: 24
202.157.160.0/20 maxlen: 20
202.157.160.0/21 maxlen: 21
202.157.168.0/21 maxlen: 21
202.160.120.0/24 maxlen: 24
202.160.121.0/24 maxlen: 24
202.160.122.0/24 maxlen: 24
202.160.123.0/24 maxlen: 24
203.83.250.0/24 maxlen: 24
203.142.16.0/21 maxlen: 21
203.142.24.0/23 maxlen: 23
203.142.27.0/24 maxlen: 24
203.169.6.0/24 maxlen: 24
203.169.7.0/24 maxlen: 24
2404:4800::/48 maxlen: 48
2404:4800:1::/48 maxlen: 48
2404:4800:2::/48 maxlen: 48
2404:4800:3::/48 maxlen: 48
2404:4800:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13398 (0x3456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Validity
Not Before: Nov 23 23:58:15 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67426c17-8fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:84:d8:dd:89:4f:24:9b:5a:d6:48:00:de:58:
d0:24:46:87:20:83:88:63:19:bd:f8:fa:09:aa:41:
4b:ef:95:8d:6f:1f:76:85:45:a3:cb:ae:db:f4:e6:
07:7c:f9:36:1e:61:09:94:97:aa:ac:ed:69:79:d5:
10:00:7a:cf:7e:9a:44:45:fa:3c:ed:a8:2c:a5:9f:
3a:36:10:00:3a:69:bc:d3:99:db:cc:7c:29:5e:a3:
b9:85:c5:a2:57:57:3c:fa:c7:e8:e7:48:40:81:a4:
5e:69:25:d1:3b:04:6f:54:17:66:c4:62:89:90:5a:
9b:aa:7e:52:d6:49:29:24:9e:0b:5c:c7:cf:3b:a5:
90:60:6b:ef:00:c0:c7:c2:44:91:b7:bc:c4:9e:78:
6b:cf:a9:04:99:41:34:32:cd:3f:61:93:fd:4c:ed:
ac:4d:7b:7f:20:59:b0:6a:31:05:64:3d:f6:74:71:
34:28:70:0f:25:4e:e6:dc:ef:42:fe:12:63:dd:33:
9e:ff:31:8b:4a:af:85:d6:65:32:a8:f4:6c:1e:41:
58:23:91:c0:4d:f9:c8:df:32:e5:55:a3:0d:52:35:
2f:3f:41:6d:11:56:cf:b2:cc:b4:da:de:d9:3b:06:
0d:62:41:0c:ea:b2:7c:6d:e8:ff:55:db:a5:28:05:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:47:42:56:10:58:85:80:17:A4:FC:BA:DB:5C:CA:8A:FB:E4:43
X509v3 Authority Key Identifier:
keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/CFAE1776E7C811ECA2BF6554C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.129.32.0-114.129.41.255
114.129.45.0-114.129.47.255
123.100.235.0-123.100.245.255
123.100.248.0/21
202.157.128.0-202.157.175.255
202.160.120.0/22
203.83.250.0/24
203.142.16.0-203.142.25.255
203.142.27.0/24
203.169.6.0/23
IPv6:
2404:4800::/46
2404:4800:20::/48
Signature Algorithm: sha256WithRSAEncryption
64:2b:a1:ec:ad:13:95:50:a9:4f:40:44:53:76:86:c0:d0:05:
4e:6b:ea:c4:ac:1d:40:4a:3c:8a:fe:ff:16:05:cd:12:85:2f:
ea:6a:5b:6a:1e:14:89:52:2f:39:b6:22:a5:56:9a:7b:7e:0a:
1d:5c:ac:4c:3c:0d:fb:5d:3d:e5:f9:35:0f:08:8f:01:87:0d:
9f:f9:98:fb:6d:79:81:d3:3b:7c:3b:a1:16:65:29:82:f5:66:
b0:46:43:25:49:17:da:e1:1d:e1:04:28:cc:a2:99:ae:80:10:
5b:fe:a7:f3:60:9d:dd:97:dd:31:27:7e:64:87:66:d0:28:2e:
1c:82:06:8e:d4:a0:07:97:1a:cc:e6:7b:83:94:b9:bc:68:35:
17:ab:61:3b:75:ec:08:cc:1f:02:69:97:e6:16:c0:d6:c8:ad:
4c:14:27:2a:3e:1a:b4:3e:a8:a4:56:8e:75:a8:35:0a:df:07:
80:ad:aa:b9:de:3c:e7:d9:a6:66:63:f7:69:f4:47:d4:7c:d0:
eb:26:f7:4c:5d:66:cf:ca:6f:c6:79:fb:fc:b4:0a:3f:49:28:
e2:52:d2:36:5c:fb:e3:ec:93:af:9d:1b:e2:09:f7:9b:8c:37:
58:6b:10:41:5f:61:80:83:0f:55:94:d6:df:0f:e1:50:87:b8:
10:f3:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:25 2025 by rpki-client