Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DD84920268FA11EFB2CB6E60C4F9AE02.roa
File: DD84920268FA11EFB2CB6E60C4F9AE02.roa (raw, json)
Hash identifier: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=
Subject key identifier: 19:8E:E4:AB:40:B5:1E:EF:1F:D1:65:03:A8:12:8A:59:C4:18:05:F3
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 02DA
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DD84920268FA11EFB2CB6E60C4F9AE02.roa
Signing time: Wed 27 Nov 2024 01:34:50 +0000
ROA not before: Wed 27 Nov 2024 01:34:50 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 134100
IP address blocks: 43.251.205.0/24 maxlen: 24
223.27.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Nov 27 01:34:50 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6746773a-cffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:81:bd:f4:b9:d7:12:1b:82:a4:71:07:4c:
df:5f:76:c0:41:cb:83:ea:3f:af:0d:24:56:71:08:
77:0f:b2:90:4b:83:00:b1:3e:f5:df:fd:77:7f:c5:
8d:c3:a9:fe:ed:1f:fe:7f:c6:cd:d7:f6:31:49:f3:
c5:c7:63:6b:6e:06:44:1a:40:af:15:92:cc:f2:f0:
21:54:6b:4b:85:80:18:0d:69:09:e3:80:1e:0e:f5:
ec:bc:bd:74:69:eb:94:d0:8e:6d:e8:ba:2f:8c:4f:
c7:c2:93:86:4b:17:d5:f0:a8:6e:ec:93:71:76:c2:
75:f8:e0:c5:69:4b:dd:ad:12:1d:64:8e:a6:dc:a7:
68:3a:3e:4c:7f:4b:ab:24:71:06:dd:f9:37:0e:41:
a5:78:05:3b:5f:1e:55:e3:86:1f:ea:d1:3c:91:4b:
5e:a4:30:4f:4c:81:af:2c:3d:a9:d1:22:42:8e:d5:
99:d2:f1:56:53:c6:de:e1:3a:26:4a:09:21:aa:e9:
40:a8:d1:5d:dd:eb:cb:a8:b3:fb:48:77:99:f0:15:
42:34:77:0d:37:1d:6b:b0:bd:cb:7a:61:ad:e7:39:
d6:6e:5a:7b:ba:cf:8e:41:97:4f:f2:32:f0:09:82:
46:3c:3c:da:e5:15:b0:a4:92:e1:80:c5:61:5d:76:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8E:E4:AB:40:B5:1E:EF:1F:D1:65:03:A8:12:8A:59:C4:18:05:F3
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DD84920268FA11EFB2CB6E60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.205.0/24
223.27.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:90:91:ef:9a:5e:c2:ed:d7:dc:6a:c2:82:6d:f0:42:e3:ac:
f1:02:48:f9:be:13:a4:92:4b:17:fb:f3:6c:5c:03:0d:a9:65:
78:a4:b5:6f:ef:3c:4e:69:34:c7:59:9f:6e:ed:8f:2b:26:0d:
53:21:2c:61:81:d2:3b:c6:8a:7d:d8:70:0f:a4:dc:17:9c:17:
d0:03:86:86:fa:6a:da:98:90:25:e9:ab:f5:4d:a0:f8:7a:2e:
09:d6:87:09:c4:ca:0f:3b:98:e7:8a:f8:67:70:d1:39:b6:19:
4b:66:3b:10:83:78:92:2c:25:4a:64:82:3a:de:ad:c2:bd:27:
68:10:c4:cd:7e:63:34:43:b6:0c:4e:c2:95:25:18:ff:3f:6d:
42:d5:88:32:00:e3:e9:bb:8c:73:0b:52:2e:fc:5b:4b:5b:92:
99:da:75:ce:d5:92:4b:98:20:31:87:60:54:64:2c:3b:ab:f1:
59:34:ce:b1:ec:3d:8e:d0:6c:23:eb:99:6a:19:9d:0c:fd:28:
93:db:0e:33:c3:e9:08:20:28:dd:ff:20:57:fa:4a:68:a0:6f:
78:a3:05:f9:5f:a0:61:1e:79:6d:2e:96:75:7b:c7:7b:63:04:
40:d8:ec:80:e1:05:09:3d:33:0c:3b:b1:41:07:76:24:2a:40:
1b:35:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:06 2025 by rpki-client