Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa
File: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (raw, json)
Hash identifier: MnBCnb88Lb1soYhMr2JBZDZOHnyxIxINjkfdJ2fBlW0=
Subject key identifier: E5:86:FF:F9:A5:42:20:C0:18:E8:64:8B:58:81:FB:05:76:76:5C:A0
Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial: 0331
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa
Signing time: Thu 03 Oct 2024 01:34:42 +0000
ROA not before: Thu 03 Oct 2024 01:34:42 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 133794
IP address blocks: 43.251.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Validity
Not Before: Oct 3 01:34:42 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fdf4b2-6d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:15:05:f0:fa:94:58:46:83:49:ae:06:7e:
ed:f5:4a:fd:3f:ad:0d:75:b0:44:a5:08:27:53:97:
fc:95:38:55:a8:ea:99:6b:95:5b:76:c3:74:4e:18:
36:45:8a:cc:69:77:11:00:b7:df:01:e3:f9:47:4a:
7c:bd:1f:8d:0b:22:90:01:17:e9:a4:89:4d:09:0a:
f8:a1:ce:d2:07:ff:ff:aa:03:25:65:5a:41:ae:6d:
38:ea:19:10:bc:e0:c5:3d:e7:12:65:af:87:df:fe:
f8:bf:22:fe:d8:e0:0f:24:28:6f:75:22:80:3a:61:
c6:be:e4:2e:d1:d8:32:13:79:68:81:35:3f:8a:86:
35:1b:24:06:50:74:2a:a7:b1:ee:82:80:81:15:e1:
ba:6f:d2:44:23:b1:dd:ae:33:e0:e5:8a:d1:28:06:
39:67:c9:da:b5:ca:06:ec:96:f6:1c:e6:40:a0:9e:
8a:1d:51:0f:c2:b0:ee:68:ae:28:d9:f7:1d:ed:16:
04:9d:0e:e6:c9:9f:5f:1a:3c:45:e8:81:a1:18:69:
41:11:23:5a:c2:c7:9c:f4:79:f6:65:3a:0d:91:5a:
fd:06:83:74:8c:ba:5e:13:d1:19:39:33:58:e1:28:
94:93:62:39:c4:c2:23:4e:c7:eb:92:eb:3f:66:00:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:86:FF:F9:A5:42:20:C0:18:E8:64:8B:58:81:FB:05:76:76:5C:A0
X509v3 Authority Key Identifier:
keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.240.0/22
Signature Algorithm: sha256WithRSAEncryption
35:3c:29:3b:16:b5:ad:9b:5d:24:85:5b:26:84:50:03:fa:73:
60:87:5c:53:2b:ea:9f:94:f0:d0:8e:56:62:11:af:eb:03:17:
01:73:e2:08:a5:89:6b:3d:49:fd:80:a5:59:8b:95:91:2a:28:
2d:f6:8c:be:fc:bd:5d:b6:40:df:cb:1d:50:97:df:3a:31:9b:
5a:1a:9a:f9:31:b3:b0:52:6f:a0:9f:cc:ce:0a:c1:69:43:8f:
ca:70:ab:b7:d8:11:79:19:15:85:2e:10:83:1a:5f:6e:f9:28:
c8:9d:53:7b:f5:e9:eb:56:4c:4f:f7:4d:c0:c4:88:11:ec:87:
cd:10:7d:3a:f2:22:62:77:2b:88:e5:d2:37:23:f5:f0:69:7f:
0b:46:ca:f5:1f:53:fa:3d:f6:ec:42:24:57:fc:62:0b:fe:2d:
69:64:46:d9:8b:6c:8b:9f:18:3d:68:5e:06:63:ef:63:63:fa:
c5:92:53:c4:5a:6e:d0:4a:64:b3:55:8e:f2:5f:09:1a:7f:c0:
3e:65:aa:5d:2a:95:d5:59:e5:a7:61:60:d0:46:b3:99:6d:f5:
10:43:58:d7:73:80:46:e0:7d:87:2a:35:be:1a:bc:79:13:bd:
95:b2:ca:2e:b2:9a:2c:ef:38:3b:b7:9c:94:02:dd:90:33:93:
47:07:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:56 2025 by rpki-client