Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa
File: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (raw, json)
Hash identifier: jb+NbLPJbNRFrpXKly3k3uaY8m7AD5q86vW7O0jvGcA=
Subject key identifier: 7F:AD:F1:86:40:86:57:E8:E5:A6:A4:56:84:A1:2B:C3:B6:53:77:2B
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0AC8
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa
Signing time: Mon 02 Dec 2024 19:38:00 +0000
ROA not before: Mon 02 Dec 2024 19:38:00 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132827
IP address blocks: 43.249.92.0/24 maxlen: 24
43.249.93.0/24 maxlen: 24
43.249.94.0/23 maxlen: 23
43.249.95.0/24 maxlen: 24
103.246.254.0/24 maxlen: 24
103.246.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2760 (0xac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Dec 2 19:38:00 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674e0c98-20ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:09:22:57:a1:e5:5e:55:2a:10:ee:7b:ca:
9d:07:79:45:30:ae:4d:2f:11:d2:90:59:5f:e8:af:
fb:de:fd:f6:e8:33:e4:9a:1d:27:cb:c9:bc:cd:82:
a0:f5:e6:44:a8:f0:27:5f:90:bf:f3:90:6f:55:22:
f7:92:75:28:49:81:78:a4:16:55:77:14:ec:a1:0c:
cf:d2:d4:05:98:c4:d4:91:b8:00:93:99:1e:25:ac:
97:24:ce:60:7a:76:a3:e0:c2:70:31:81:0d:23:3e:
d3:a4:87:8b:5e:56:b7:f1:71:26:b3:15:81:e6:6b:
90:12:ed:e4:75:18:7b:e3:5a:d3:e7:08:48:3c:91:
6b:9e:0c:41:a9:ab:f9:59:be:9c:79:ca:b3:7a:b3:
78:6a:40:af:1b:c3:67:c4:42:a5:e6:64:f1:12:90:
50:4f:7f:00:58:0c:96:95:d3:3c:31:0f:26:cd:e7:
6d:ce:ed:0d:0b:7b:61:f4:47:5a:66:ed:b5:a7:7c:
22:65:ff:90:9e:d2:02:c5:3a:8b:c7:5b:a7:0a:2c:
a7:0b:58:62:26:1c:9e:e8:cf:eb:40:dd:40:20:30:
39:83:77:d4:f6:cc:24:e6:9f:9c:b0:30:ea:7c:04:
b8:5f:fd:2d:28:05:0a:8d:d0:e7:88:06:4e:1c:4d:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AD:F1:86:40:86:57:E8:E5:A6:A4:56:84:A1:2B:C3:B6:53:77:2B
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.92.0/22
103.246.254.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:10:7e:6f:a3:4f:0c:08:00:75:5c:d3:33:7c:fc:26:90:06:
d1:bc:04:0a:40:de:6e:ca:56:81:a7:c8:4e:da:cf:be:f5:3d:
33:f0:9d:ce:04:68:58:18:9a:7d:b7:0d:3d:f7:8e:bc:85:0d:
f8:e0:ea:93:54:a0:80:85:4b:d2:ca:33:92:d8:44:b2:e3:52:
7e:52:0c:40:b2:4c:3a:e2:f1:88:61:e0:01:f8:39:65:39:c9:
e7:eb:aa:46:53:f9:f6:a9:75:e9:25:91:cb:3d:b2:70:ec:3c:
9e:f1:bd:ba:e7:e1:1c:9e:4f:fd:67:2e:21:44:e9:5c:8b:66:
e9:4e:63:2a:ee:b9:f1:b8:b0:0d:dd:e9:22:bb:26:86:b1:04:
bd:f5:70:43:5e:9c:bb:f5:e8:ce:dc:f7:a2:db:50:22:df:28:
e5:7b:62:86:22:d5:e1:6a:e6:17:e8:31:31:55:d8:f6:ec:e1:
84:4c:03:47:5b:90:59:ee:b9:1a:fa:1a:16:a8:a0:38:6f:15:
3a:5d:e6:d3:66:bd:43:f7:33:96:84:6b:b3:b9:69:3b:17:13:
33:9c:2c:a2:52:19:0c:80:84:2c:13:a0:76:94:3b:46:18:6d:
07:e8:75:48:72:84:e6:84:c0:f1:5a:4b:44:80:a6:19:fe:d5:
82:b4:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:44 2025 by rpki-client