Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa
File: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (raw, json)
Hash identifier: jsmEuKgoeYiJY/PhkO97a7NHRngriTFFOmRBgoLfjbw=
Subject key identifier: D6:26:B3:54:8D:3D:94:66:03:50:26:97:E4:F9:87:2E:DB:52:08:F5
Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Certificate serial: DB
Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa
Signing time: Wed 03 Jul 2024 05:26:19 +0000
ROA not before: Wed 03 Jul 2024 05:26:19 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 56309
IP address blocks: 43.229.76.0/22 maxlen: 24
103.22.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Validity
Not Before: Jul 3 05:26:19 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6684e0fb-dd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:55:88:be:55:d3:b1:72:16:51:29:a7:53:
6a:1b:5d:e9:be:b3:0b:9b:e8:c3:1c:60:7b:78:a4:
10:af:93:a3:a8:aa:2b:70:e9:d5:81:b8:67:23:41:
7c:9c:ab:01:c7:b4:c6:9e:11:bb:f7:a8:32:b3:7b:
72:02:e1:71:cf:cf:4d:79:88:56:3f:84:d2:f7:15:
97:5b:98:29:1a:c2:67:cc:d4:b2:cb:ae:4d:45:ca:
4a:01:9a:64:b0:71:ce:6f:b5:1d:cd:4f:9a:57:25:
8d:85:29:de:3b:1e:88:a8:03:a0:24:84:6d:b8:d0:
55:82:24:c9:66:b0:d8:15:61:ae:59:a5:75:0c:89:
f6:ef:98:a6:12:16:1b:e5:e1:3d:e0:99:b8:cd:41:
82:da:02:94:6d:ae:9a:92:ec:39:f3:cf:16:6d:26:
2b:9b:ab:d7:70:b2:40:94:dd:0f:e5:6d:27:e7:e1:
9a:4a:d5:26:47:25:58:4e:a0:b5:7f:ac:68:fc:55:
d9:15:e3:ce:e7:10:45:84:d4:49:b1:da:fe:e4:37:
f4:22:88:94:02:c2:87:98:13:e1:94:b3:30:75:03:
ad:28:46:cb:0e:42:c6:c7:c9:a5:31:c2:71:75:c9:
b0:8c:96:de:58:c5:20:28:ea:ce:1d:f6:9d:fc:c2:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:26:B3:54:8D:3D:94:66:03:50:26:97:E4:F9:87:2E:DB:52:08:F5
X509v3 Authority Key Identifier:
keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.76.0/22
103.22.180.0/22
Signature Algorithm: sha256WithRSAEncryption
58:7b:b0:fc:a7:25:65:84:19:d0:8b:76:5f:2b:32:41:17:d4:
5c:d2:01:04:82:2e:fb:ab:a1:ee:b1:b3:2c:35:7a:4e:bc:0b:
07:0e:91:c4:9a:0f:c3:cc:f1:6a:6a:5c:b8:0e:4e:09:f9:fb:
28:f2:e3:d8:78:d2:a4:ce:17:b4:1f:ad:e6:2d:6e:94:9d:79:
39:6f:58:b7:06:18:73:3b:13:8e:2e:18:fa:60:72:5c:f1:ab:
37:39:8e:ac:74:b6:b3:fb:9a:57:ab:7d:1b:a9:39:f9:84:f2:
0f:83:56:55:d1:e5:8d:7d:98:c5:92:b3:a9:d5:b9:98:7f:a2:
e2:32:90:78:ee:64:d0:13:8a:cf:31:7e:6e:9f:c8:3d:4d:01:
15:18:cc:8b:8c:81:68:dd:ee:78:14:52:b3:02:60:35:cd:aa:
62:ef:bb:fa:fd:51:b8:df:7f:bd:63:17:2e:0e:dc:b4:c3:d4:
de:4b:13:b0:6a:ff:5a:98:40:be:cd:8a:a2:d5:30:4a:ae:b0:
ba:fe:77:62:71:fe:64:01:d4:d6:4c:ec:5c:8c:b2:21:be:15:
53:3f:78:0f:e6:e4:b9:e2:76:96:12:f2:75:fb:5b:15:ed:0a:
3f:fe:23:97:66:be:b5:0b:ef:ed:a3:28:e9:ee:85:16:23:f6:
b3:b1:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:12:05 2025 by rpki-client