Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62C61398C93A11EEA1A4CA4FC4F9AE02.roa
File: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (raw, json)
Hash identifier: ROYJghlVOvaMnbHvL/73QuVNi54B62NVGwKlydNJjfk=
Subject key identifier: 6F:CA:FD:6E:82:F2:AE:88:60:61:A2:A7:9E:64:CE:6E:29:A4:39:2F
Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial: 96
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62C61398C93A11EEA1A4CA4FC4F9AE02.roa
Signing time: Mon 01 Jul 2024 07:07:55 +0000
ROA not before: Mon 01 Jul 2024 07:07:55 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 202595
IP address blocks: 43.245.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Validity
Not Before: Jul 1 07:07:55 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=668255cb-6a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:50:c2:f2:86:c2:04:8c:3f:7e:34:50:e4:
16:85:68:1c:25:02:07:fa:2f:33:f7:a6:ee:25:b3:
4a:6b:28:e2:1f:93:33:29:22:7f:38:d8:42:33:f3:
b2:54:91:11:e0:24:3c:68:df:bb:63:cc:35:9d:b3:
c9:70:e5:47:8a:ff:cb:ee:4d:ea:f4:b2:0f:3d:e0:
d5:47:40:5d:55:8d:71:49:dd:8b:21:6b:99:3b:61:
ba:2f:ef:95:1e:d7:20:a5:2d:f2:33:88:8f:d8:3b:
90:a1:58:d9:c6:0b:30:25:3f:fb:14:6b:e7:7f:f6:
d4:32:24:85:d4:3a:91:d6:0e:88:5b:57:e6:a6:81:
30:b7:e7:ea:04:09:92:98:7d:bb:53:e7:0d:b7:92:
89:cc:3d:12:68:34:b3:4e:26:8d:bc:96:a6:c4:de:
a3:d3:37:87:a6:34:13:c4:e4:cf:40:84:91:0e:a2:
fa:a7:a1:34:f3:4d:41:61:f2:5f:ef:d8:e1:ad:3a:
0a:8f:80:a1:89:02:d8:30:b1:f4:e3:44:19:57:69:
fd:69:5f:6e:aa:ab:a5:59:ec:8b:9e:27:e2:17:f7:
90:38:21:2a:6a:fb:13:ab:65:83:65:fb:da:7d:9a:
51:04:2e:f5:bb:94:39:57:80:aa:42:d8:bc:23:46:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CA:FD:6E:82:F2:AE:88:60:61:A2:A7:9E:64:CE:6E:29:A4:39:2F
X509v3 Authority Key Identifier:
keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62C61398C93A11EEA1A4CA4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.43.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:10:4e:f6:3a:92:1a:7e:3f:b8:61:81:46:7e:1f:ab:1e:26:
3f:89:1a:be:51:21:c7:d6:27:0c:fb:e4:d8:e1:f9:99:4a:8d:
2a:bf:78:3b:58:58:51:95:3f:36:72:cf:1e:9e:ee:3e:39:12:
15:36:d0:62:97:b4:f0:49:df:8b:df:ab:c1:21:49:03:bb:8a:
a8:49:fc:22:fb:c9:c0:c6:dc:e4:14:6d:7d:38:fd:b0:b3:f9:
82:91:dc:3b:28:9c:3d:45:11:8c:08:9a:f1:9e:80:e2:e3:31:
10:40:47:03:56:c7:b3:9b:fb:78:6a:01:08:ff:c3:d1:76:49:
50:ce:d0:91:37:fa:97:fc:91:42:ec:d6:cb:28:22:81:21:75:
92:20:18:ca:5a:6f:03:09:33:93:35:7d:f9:81:fa:8a:6b:98:
8a:07:fd:5b:9d:9e:44:98:51:72:ca:1c:33:a6:8d:e4:20:88:
4b:fe:67:17:f0:fe:bc:7b:68:65:1b:26:f0:20:d2:70:d0:7c:
ec:cf:67:d4:aa:dc:bd:e5:62:9f:ca:2d:c6:7d:ef:92:6c:81:
6b:93:6a:df:bd:e6:c5:a2:fb:52:3d:54:47:9d:d2:61:2a:6f:
2c:1b:6f:f4:d6:e5:e4:70:b8:a9:59:e6:63:89:72:e7:9e:35:
6e:37:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:12 2025 by rpki-client