Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa
File: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (raw, json)
Hash identifier: cKLqzBD3UNEjua94H34t+S8hZV/aOFg8bXhQVhmFTLs=
Subject key identifier: F6:45:30:9D:E8:D4:6D:BF:5A:16:EC:56:F1:22:FC:3F:CF:00:23:23
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0982
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa
Signing time: Thu 05 Sep 2024 08:24:46 +0000
ROA not before: Thu 05 Sep 2024 08:24:46 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 21859
IP address blocks: 43.152.178.0/24 maxlen: 24
101.33.12.0/24 maxlen: 24
101.33.13.0/24 maxlen: 24
101.33.14.0/24 maxlen: 24
101.33.15.0/24 maxlen: 24
240d:c010:14b::/48 maxlen: 48
240d:c010:14c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2434 (0x982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Sep 5 08:24:46 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66d96ace-c330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:59:09:3d:59:a7:09:b1:14:d2:68:cf:9f:01:
35:ba:97:b1:16:6a:48:6b:e2:d1:0b:df:c9:a0:cb:
06:06:7b:82:28:16:0b:f1:db:57:fc:99:95:6d:ca:
3d:df:21:14:67:3a:41:b3:7b:bc:2d:1e:2a:75:04:
cd:c0:f8:36:66:f2:be:e5:07:b4:51:fb:3d:59:b1:
fc:4c:a9:8e:2b:83:94:af:5c:f9:d7:0c:f6:43:7d:
77:1e:b7:59:36:a4:75:69:21:93:a3:8f:50:49:f2:
3b:c0:7f:ba:5a:0d:dd:43:00:f4:ae:a8:70:fa:55:
d4:fa:2f:3c:de:74:14:d9:13:2c:52:59:ab:d9:d6:
88:1f:2d:dc:c4:59:4e:72:65:ec:0a:f1:e2:3f:22:
60:3f:d9:af:70:05:d5:38:65:3b:08:4d:04:57:c6:
9f:23:48:15:aa:75:81:5c:e4:b3:ea:b9:78:cb:99:
d2:33:73:89:39:20:57:e7:9f:d5:ef:8f:d2:7e:b9:
1b:8b:e9:0e:5a:54:1e:9e:7a:52:15:ce:79:ac:9d:
33:76:3f:72:36:97:39:d7:a6:db:a0:27:db:3c:a5:
5f:ac:d2:0f:16:d3:30:d4:67:b8:4c:83:d9:50:cc:
1c:98:32:3a:6b:d7:00:06:e4:cb:65:40:37:1e:9d:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:30:9D:E8:D4:6D:BF:5A:16:EC:56:F1:22:FC:3F:CF:00:23:23
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.152.178.0/24
101.33.12.0/22
IPv6:
240d:c010:14b::-240d:c010:14c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:f1:c8:6c:d7:43:4c:73:20:92:81:4f:21:ef:91:a4:24:6d:
b6:2f:58:b1:82:5b:e7:be:34:2d:65:99:d7:2e:48:7a:c6:86:
43:98:53:6c:d1:72:27:83:00:b8:e3:b2:df:6c:98:7a:ce:66:
83:b7:c9:9c:51:ae:d5:bf:9d:fc:2f:e9:ce:22:ce:0c:0b:9f:
53:45:05:72:6d:ac:9b:f1:dd:d1:cf:63:b3:22:01:38:dc:ae:
bc:83:e2:d7:0b:00:ed:7e:a7:3a:9a:09:2b:86:0e:3b:83:b6:
6d:6b:1b:c0:8d:27:5c:5d:90:0c:6d:f2:a5:04:b8:24:56:a9:
96:bb:0d:16:fb:bb:43:8d:dc:f5:05:0c:f4:44:07:94:4f:33:
5e:f9:01:91:71:88:d8:ad:e0:c5:b5:9f:83:75:c3:66:63:48:
8c:5e:98:79:1a:2e:ec:02:77:2c:9a:ca:28:3f:36:65:5a:b0:
3e:e8:aa:a2:ff:ed:de:65:22:fa:2f:59:0b:e0:0f:a6:4a:76:
9c:ad:0c:ca:16:39:5a:d4:ed:45:7c:4a:c5:c8:60:04:a3:bd:
91:62:2c:98:d7:82:3b:1c:b2:e9:09:fd:35:bd:41:26:19:1e:
e4:c2:50:c1:b3:dd:be:03:47:4a:b9:c8:f6:99:f9:f3:b2:ec:
e7:80:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:29 2025 by rpki-client