Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/B43DA4A87A0511EFBB046B51C4F9AE02.roa
File: B43DA4A87A0511EFBB046B51C4F9AE02.roa (raw, json)
Hash identifier: uyyP5h+kPRaV2Sm/G8u1e0ho1ILi36twOY4MuidYg80=
Subject key identifier: 6C:CD:15:78:2B:A9:81:8F:8E:81:25:80:33:22:62:32:F2:D3:FE:E8
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 06AE
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/B43DA4A87A0511EFBB046B51C4F9AE02.roa
Signing time: Thu 24 Oct 2024 23:42:55 +0000
ROA not before: Thu 24 Oct 2024 23:42:55 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 137451
IP address blocks: 43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.234.54.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 24 23:42:55 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671adb7f-4081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:a0:85:38:9c:87:66:5f:39:a4:82:cf:62:
5c:cc:25:6f:f1:32:61:cd:f5:a2:10:34:56:ac:a0:
e4:da:bb:51:22:69:fa:96:1e:04:12:f6:39:0a:e6:
0f:97:55:af:03:b5:10:7d:6b:82:bd:1a:18:68:06:
92:b9:0b:8b:1f:b5:34:96:a0:31:c9:e4:d5:d7:ca:
0e:8a:66:e8:c7:b4:9d:c3:d9:60:46:7a:05:6e:66:
08:fb:39:08:83:c4:e9:b8:9d:6a:f7:d1:a3:f7:ab:
9b:2a:fa:3e:d2:5c:f1:5a:20:0b:cb:9a:95:e3:46:
8f:45:f7:29:d8:97:dd:ad:62:33:0a:0d:af:80:f6:
ac:48:21:f6:1d:ce:6d:71:8f:c7:59:2b:e2:bd:2c:
66:a2:01:e6:e7:bc:37:31:59:9f:fd:7c:88:67:07:
01:50:f9:a2:71:7c:01:0e:ac:0f:4c:d3:21:93:86:
c6:ac:ad:97:fa:b9:72:e4:58:11:03:e5:95:85:a1:
7b:18:f6:85:9c:f9:00:5f:07:d3:63:26:b5:c0:a3:
47:a8:35:36:c9:56:56:d1:1f:c8:75:a4:0a:da:57:
59:bb:51:81:22:c4:01:5f:e2:33:b5:16:b7:67:df:
60:cc:2b:78:a1:63:34:81:78:80:8f:18:48:88:a7:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CD:15:78:2B:A9:81:8F:8E:81:25:80:33:22:62:32:F2:D3:FE:E8
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/B43DA4A87A0511EFBB046B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.209.0-43.252.210.255
103.228.64.0/24
103.234.54.0/24
150.107.1.0-150.107.3.255
Signature Algorithm: sha256WithRSAEncryption
37:a2:d9:33:55:7b:5a:f3:f5:6d:6a:c6:8b:04:d6:cf:ab:f5:
26:66:21:34:80:f6:6f:9e:59:08:4f:53:dd:78:0e:03:5d:ec:
7d:ba:25:2a:ef:94:bf:21:f6:7c:a3:ad:aa:22:42:47:3f:9f:
2f:42:92:04:03:51:b8:5b:e2:65:36:cd:c8:1e:4c:ab:fd:4d:
a0:18:21:ea:9c:af:08:45:0b:d4:da:61:2a:90:3c:a4:c9:0f:
5a:8a:e5:e5:01:79:8a:79:1b:22:b9:e2:d0:66:18:87:91:b1:
f6:a7:7a:45:42:98:dc:34:fb:d9:2d:c7:73:c6:31:84:2e:83:
18:d6:01:55:b9:0b:54:86:4b:95:91:9d:6f:60:53:fd:53:04:
78:0f:50:c3:6e:1d:cf:aa:2e:9c:15:dc:89:1a:6c:99:2e:90:
43:3f:53:ba:36:70:40:3a:fe:c9:42:33:e9:88:38:dc:bb:d8:
06:09:a1:f7:f8:13:54:5d:b0:c0:28:16:21:e9:5e:de:cc:01:
3a:6c:20:dd:38:29:41:58:bb:9d:af:32:ed:e5:b2:c8:38:57:
27:64:83:42:a8:70:3f:48:b7:ea:40:29:ab:05:85:96:ec:e6:
fa:74:2b:89:c4:14:69:f2:c2:4f:1a:7f:ad:1d:41:e4:80:f0:
77:31:c2:e5
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjQxMDI0MjM0MjU1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFhZGI3Zi00MDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbughTich2ZfOaSCz2JczCVv8TJhzfWiEDRWrKDk2rtRImn6lh4EEvY5CuYP
l1WvA7UQfWuCvRoYaAaSuQuLH7U0lqAxyeTV18oOimbox7Sdw9lgRnoFbmYI+zkI
g8TpuJ1q99Gj96ubKvo+0lzxWiALy5qV40aPRfcp2JfdrWIzCg2vgPasSCH2Hc5t
cY/HWSvivSxmogHm57w3MVmf/XyIZwcBUPmicXwBDqwPTNMhk4bGrK2X+rly5FgR
A+WVhaF7GPaFnPkAXwfTYya1wKNHqDU2yVZW0R/IdaQK2ldZu1GBIsQBX+IztRa3
Z99gzCt4oWM0gXiAjxhIiKe6vQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFGzNFXgr
qYGPjoElgDMiYjLy0/7oMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvQjQzREE0QTg3
QTA1MTFFRkJCMDQ2QjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E
MjAwMC4EAgABMCgwDAMEACv80QMEACv80gMEAGfkQAMEAGfqNjAMAwQAlmsBAwQC
lmsAMA0GCSqGSIb3DQEBCwUAA4IBAQA3otkzVXta8/VtasaLBNbPq/UmZiE0gPZv
nlkIT1PdeA4DXex9uiUq75S/IfZ8o62qIkJHP58vQpIEA1G4W+JlNs3IHkyr/U2g
GCHqnK8IRQvU2mEqkDykyQ9aiuXlAXmKeRsiueLQZhiHkbH2p3pFQpjcNPvZLcdz
xjGELoMY1gFVuQtUhkuVkZ1vYFP9UwR4D1DDbh3Pqi6cFdyJGmyZLpBDP1O6NnBA
Ov7JQjPpiDjcu9gGCaH3+BNUXbDAKBYh6V7ezAE6bCDdOClBWLudrzLt5bLIOFcn
ZINCqHA/SLfqQCmrBYWW7Ob6dCuJxBRp8sJPGn+tHUHkgPB3McLl
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:49:33 2025 by rpki-client