Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa
File: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (raw, json)
Hash identifier: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=
Subject key identifier: C9:B6:CE:78:8A:C6:B5:7D:D6:E7:95:E2:79:BA:AB:5A:1C:BA:F0:61
Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial: 075A
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa
Signing time: Thu 28 Nov 2024 21:41:00 +0000
ROA not before: Thu 28 Nov 2024 21:40:59 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 134428
IP address blocks: 43.225.56.0/24 maxlen: 24
43.225.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Validity
Not Before: Nov 28 21:40:59 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748e36b-46c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:94:b0:fe:53:b4:80:63:6b:67:be:1a:c5:
1f:2e:c8:ec:6b:ab:85:87:e7:39:18:c2:7c:74:93:
b3:9c:c4:49:76:7b:7e:09:33:63:43:ee:ef:77:d2:
36:f6:bd:52:94:a7:3c:12:a2:47:ba:3f:25:4b:81:
91:62:9b:c8:91:f0:3c:96:cc:2f:56:9a:d1:d5:9b:
06:54:9c:e6:c6:ae:16:13:a6:50:b5:ea:ad:82:0f:
06:cc:8e:d6:14:1c:d4:d6:39:8c:ca:d0:e4:6a:1b:
b4:f0:6b:85:12:d6:6e:58:fe:d8:d5:02:fb:51:68:
e4:01:2a:d4:f0:c1:77:2c:86:90:81:b9:15:50:04:
b2:93:62:0a:ee:e0:e5:53:84:3d:39:e3:37:63:9e:
17:e4:a0:92:85:49:39:7d:5c:90:8b:d1:4b:f2:67:
34:b1:f5:b4:8c:d2:03:f7:a9:af:ea:7a:ea:c6:1f:
5d:db:45:3e:44:a7:e3:02:3f:c4:e9:94:fd:1f:9e:
69:28:aa:28:55:b5:b3:0b:f3:45:b5:94:f2:e1:bc:
05:c7:8f:f6:93:2d:a9:b4:bc:5f:a6:97:10:6f:5a:
9f:7d:be:09:d4:da:61:7e:44:a0:49:f0:36:e7:f1:
33:e6:02:92:58:5c:ee:6f:8a:74:cf:19:07:d8:af:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B6:CE:78:8A:C6:B5:7D:D6:E7:95:E2:79:BA:AB:5A:1C:BA:F0:61
X509v3 Authority Key Identifier:
keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.56.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:61:c1:de:df:d7:c0:6a:89:33:e4:e6:c7:1b:d9:12:f1:f3:
66:3e:36:d3:ef:c8:f3:81:32:05:6b:31:6a:00:c3:48:ef:8a:
87:61:2a:0e:af:4c:93:de:78:fb:88:6a:b8:14:17:e2:0f:01:
d7:ab:a7:79:ce:b7:2f:16:c1:84:28:d7:ee:2a:92:c2:e3:ae:
d9:44:ad:1c:26:cd:3c:e0:99:8d:44:a3:15:09:83:a0:22:55:
b5:d0:50:80:33:99:86:c3:c2:85:d1:c8:64:93:69:70:d9:1e:
77:09:c0:b2:a8:37:6c:2f:10:a6:77:7e:36:2e:aa:55:16:ca:
5f:d4:53:5a:58:2a:2b:61:9b:4a:61:63:11:cd:10:3b:93:6a:
9f:50:fa:76:9f:b0:8b:8a:db:d0:cd:f2:6d:bd:e4:5f:d8:ca:
a9:a7:2e:6a:44:d2:af:70:b5:e9:0a:f3:84:a0:1c:19:e5:cb:
62:ab:d9:76:a2:bb:f1:0e:81:7b:55:2c:6e:1b:1c:81:43:c5:
ce:25:a2:ed:fa:d6:06:f5:d6:cb:4b:88:1f:f6:8f:a5:53:b8:
81:db:3b:d7:c2:7f:bb:dd:d2:af:a2:26:cd:fb:9b:a7:2f:23:
ff:a1:ce:68:19:e7:a3:27:bf:77:a7:07:11:72:bc:45:9d:04:
4f:4c:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:41:51 2025 by rpki-client