Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/5C829C92759511EFBA6B975FC4F9AE02.roa
File: 5C829C92759511EFBA6B975FC4F9AE02.roa (raw, json)
Hash identifier: qvBJ8lQ+cmpOce/HK86r4tYALLt98OwzZEZ3ANVqlPA=
Subject key identifier: CF:1A:8C:72:C6:23:C3:A9:7F:EE:24:2B:02:D1:CF:D8:7A:21:10:3B
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 0388
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/5C829C92759511EFBA6B975FC4F9AE02.roa
Signing time: Thu 05 Dec 2024 01:15:08 +0000
ROA not before: Thu 05 Dec 2024 01:15:07 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 137451
IP address blocks: 43.255.117.0/24 maxlen: 24
103.235.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Dec 5 01:15:07 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6750fe9b-0627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:d4:cf:a2:e9:d1:fa:ab:b7:33:16:5c:50:
31:51:82:ae:cf:26:63:18:3f:c4:af:be:9e:e0:c6:
57:2b:bd:f5:0b:12:9c:d5:9c:d0:72:fd:18:da:70:
4b:da:49:8f:79:88:6e:04:36:63:7b:b1:e7:37:f6:
0b:05:aa:6d:9b:5d:e5:e2:8b:e6:79:1b:29:cc:c3:
68:f0:b1:88:53:88:7c:2c:fc:0f:d8:55:b6:f8:9c:
39:27:44:b9:45:fe:d6:36:8b:8e:66:8c:8d:0d:05:
5f:da:42:37:f1:6d:58:39:ae:f6:1f:4b:a3:b0:68:
e3:60:3c:d3:06:cc:7e:b2:42:10:fb:5c:6b:a3:26:
32:3c:5a:7b:4d:02:0c:03:a3:62:e6:ea:92:91:b8:
51:01:00:d9:55:22:4d:ef:01:58:6a:db:9e:40:3f:
14:a5:08:26:75:93:d5:f0:95:3f:91:ea:4c:f3:8a:
2b:61:d4:86:9d:4a:ff:7b:7c:47:eb:3d:4e:a3:24:
cf:c5:4f:50:ac:bf:ef:c0:f5:0e:ce:89:83:28:18:
0b:d9:0b:03:28:5e:54:d7:3a:9e:b9:99:c6:29:46:
5f:29:2d:d4:31:50:1a:7f:88:8b:79:e9:78:3c:3d:
6f:40:c8:e3:b2:0d:48:cc:94:90:dc:05:43:0f:c7:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:8C:72:C6:23:C3:A9:7F:EE:24:2B:02:D1:CF:D8:7A:21:10:3B
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/5C829C92759511EFBA6B975FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.117.0/24
103.235.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7b:40:b0:c3:f3:f5:e1:a5:5c:e0:06:bf:7f:0a:67:93:87:
d2:e5:6a:79:48:5b:96:21:52:d7:ce:6a:6c:60:82:c6:f7:a1:
56:59:40:3c:7a:3b:f2:56:cf:a0:a5:9e:2e:c1:af:93:ca:f0:
73:c7:c2:c0:66:64:80:24:fb:40:84:7e:48:bb:84:69:09:70:
13:f0:b3:1b:b0:f5:4e:77:1e:fd:48:54:77:b8:8b:00:00:f2:
af:21:d5:c7:c1:b3:39:f5:1c:28:ef:96:bd:07:34:75:de:01:
3d:0d:35:4b:e1:c7:8d:b9:39:c0:16:f9:03:13:18:90:59:38:
61:9a:70:6f:14:a9:56:09:91:b8:97:5c:c6:1e:9b:94:1a:c5:
98:6f:bc:ef:02:62:f9:d7:5f:ee:c2:35:2e:fd:ed:6e:ba:c8:
cd:c2:c5:be:62:dd:2c:ee:a3:99:ba:4d:23:4f:e6:0e:69:d3:
5c:cd:87:27:53:f4:65:3c:0b:27:05:df:1d:24:c0:8d:dd:78:
71:04:bd:37:74:44:de:65:20:f1:e5:ff:9d:ec:8b:0c:26:91:
d8:03:3e:b5:1d:4c:7d:ae:c4:11:07:22:f0:a8:63:48:bd:42:
5e:e8:9c:c6:ec:9e:5f:1d:1b:86:fe:24:5d:67:ab:fc:aa:10:
cc:d6:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:34 2025 by rpki-client