Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/AE2B714A72E911EEA3EFD34AC4F9AE02.roa
File: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (raw, json)
Hash identifier: qqj7UCGnWQlkIFv4nnOfekkdwebohncfHRfjEEZBUBI=
Subject key identifier: 34:FD:61:25:AA:5E:41:49:5C:33:7E:92:E8:33:D8:1E:50:DF:3B:6E
Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial: 05EC
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/AE2B714A72E911EEA3EFD34AC4F9AE02.roa
Signing time: Fri 07 Jun 2024 00:45:26 +0000
ROA not before: Fri 07 Jun 2024 00:45:26 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 17635
IP address blocks: 203.14.105.0/24 maxlen: 24
203.57.128.0/20 maxlen: 24
2406:9680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Validity
Not Before: Jun 7 00:45:26 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66625826-cb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:6a:e7:92:8d:8a:d8:43:b1:c3:44:ef:45:
02:c9:98:4c:34:df:7b:bc:06:0e:62:af:3c:d2:1b:
d7:3b:b4:3b:da:52:c0:a8:96:ec:f8:bb:d4:16:60:
11:21:3a:0c:1c:a4:5b:6b:98:a9:1e:b3:68:01:74:
fa:44:dd:cb:82:fa:f5:e1:d3:4e:7a:d0:cd:fb:30:
51:b2:30:1b:d5:16:0e:fc:45:d6:ba:a6:6c:9c:c0:
6d:e8:bf:f5:1c:24:3d:aa:d1:bf:89:04:75:f2:c7:
93:71:d7:64:b5:0e:62:b8:3d:e9:9e:99:73:fc:ac:
66:b7:01:96:48:27:c8:3f:ed:99:c1:95:86:b1:cb:
99:86:4b:63:35:2f:ce:6e:30:64:07:8d:29:ff:7d:
c6:24:f3:6e:56:3d:36:ea:89:62:97:63:84:f2:ff:
f8:05:2b:17:4b:d8:dc:c5:1f:66:9a:e1:1c:74:fd:
fa:e7:da:40:26:5b:3d:0f:48:12:87:96:e0:93:67:
ee:a5:0c:23:43:f5:47:be:29:9e:a8:12:c7:59:a0:
dc:5c:d9:3c:e2:12:4c:c7:b6:f6:97:a7:f6:d8:90:
bb:e5:16:7c:08:bc:13:82:0c:49:3a:03:95:43:9a:
78:b1:12:26:41:b4:5e:d7:d1:dc:3b:fa:e6:6c:61:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:61:25:AA:5E:41:49:5C:33:7E:92:E8:33:D8:1E:50:DF:3B:6E
X509v3 Authority Key Identifier:
keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/AE2B714A72E911EEA3EFD34AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.105.0/24
203.57.128.0/20
IPv6:
2406:9680::/32
Signature Algorithm: sha256WithRSAEncryption
ae:af:69:51:72:b2:e7:0b:32:3d:84:8a:c6:2a:ca:b0:6d:33:
55:c6:1b:ef:48:18:77:08:df:08:ad:45:a0:1b:ec:f2:df:8b:
eb:ba:d8:11:f0:79:e0:98:90:2a:e0:18:2d:a0:7b:f9:7f:87:
11:3c:aa:6f:da:df:c7:46:54:55:6a:53:35:0f:7f:ae:48:31:
0b:d4:ea:cf:45:dd:46:42:53:bd:a2:12:83:dc:f7:b6:7d:61:
dd:58:04:36:ec:81:8e:ad:d5:8d:89:d5:13:72:5b:50:74:fc:
42:d1:ab:f3:b6:c7:6e:4c:7a:0c:51:8c:56:a7:15:11:85:5a:
49:46:d3:58:ba:91:88:da:0c:bf:6f:34:44:97:16:f5:86:0f:
45:7a:2b:b7:bf:9a:a7:3d:1d:96:03:e6:53:3f:e3:bd:72:37:
14:10:80:9a:92:46:bf:eb:5c:d7:51:d2:78:9f:b4:db:b2:1e:
95:c0:b9:be:4f:cc:ff:c3:c3:56:b6:1a:99:cb:e9:ed:f3:64:
2f:22:80:5f:5c:f2:4e:5b:dc:6f:85:2b:68:ef:a1:a2:9e:31:
b8:f8:e4:00:93:1d:a6:1f:96:a8:7e:3a:3e:d6:fa:69:3e:72:
71:a2:de:be:62:37:94:3e:1a:ec:50:f4:11:0d:1e:c8:8b:b0:
d1:d5:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:30:14 2025 by rpki-client