Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/C40CFBDED7E011EFBC9A924AC4F9AE02.roa
File: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (raw, json)
Hash identifier: hbYou/cdOIqH7w4GIQPKVZCPXpdDpr+Qe4IMIENvDGs=
Subject key identifier: F1:28:05:E6:73:BA:41:DE:92:2F:3B:32:39:0F:E1:D1:FB:29:E0:DF
Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial: 0D42
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/C40CFBDED7E011EFBC9A924AC4F9AE02.roa
Signing time: Tue 21 Jan 2025 10:16:23 +0000
ROA not before: Tue 21 Jan 2025 10:16:23 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 137449
IP address blocks: 43.246.202.0/23 maxlen: 24
103.111.12.0/24 maxlen: 24
2402:76c0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Validity
Not Before: Jan 21 10:16:23 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=678f73f7-d0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:78:cf:89:19:7a:de:f4:4a:bf:0a:62:f7:
f7:e2:0f:58:06:dc:87:45:5b:29:13:38:c4:9b:c0:
b4:65:4d:7c:41:d8:70:55:4a:d8:65:e5:56:0e:56:
30:b6:12:a8:d1:e2:cc:27:c1:5a:06:39:64:76:8c:
dd:43:ea:87:f4:7e:10:4a:d2:d2:3f:ae:34:63:15:
0b:1c:f3:01:3e:81:aa:52:f1:7b:19:90:30:db:4c:
30:b6:9a:40:97:f7:3b:9b:35:4c:0b:c6:35:69:86:
fa:2c:ce:78:99:d1:92:0d:71:68:50:13:4f:c8:c2:
dc:15:a5:f6:a7:cb:dd:d7:6c:45:96:fc:02:b5:6f:
30:78:9a:a4:66:42:c6:32:b1:dc:6c:96:83:af:da:
19:df:d5:d5:31:99:22:c2:e3:be:98:fe:07:5c:f5:
bc:77:b7:29:1e:cc:a3:1f:5b:93:cd:49:9a:2d:0c:
35:ea:7a:f2:c3:5c:76:ab:64:83:a9:fc:82:4e:42:
30:b2:a6:71:57:4e:6b:f9:c6:b5:ca:a2:ba:72:53:
2d:1e:5a:fb:57:15:af:fb:76:0e:76:d7:70:d1:24:
2a:1d:6f:3d:64:e4:6a:6b:85:3e:da:d9:4a:3c:35:
15:cb:58:b1:f0:e3:f2:24:90:a1:c8:a2:9f:ad:e1:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:05:E6:73:BA:41:DE:92:2F:3B:32:39:0F:E1:D1:FB:29:E0:DF
X509v3 Authority Key Identifier:
keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/C40CFBDED7E011EFBC9A924AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.202.0/23
103.111.12.0/24
IPv6:
2402:76c0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:1e:8f:fd:25:5e:a0:d0:59:cf:ac:36:d6:46:ca:bd:01:b9:
9f:db:27:a0:64:0c:ca:c8:56:f3:14:6f:da:0a:67:51:af:79:
fa:d4:fc:64:3a:88:9e:eb:88:14:f8:5d:23:a1:8d:c6:22:82:
99:42:57:b3:74:04:ae:88:d3:fa:ba:ea:08:de:49:ff:9a:be:
ca:c7:5a:43:b4:15:a1:6d:11:39:b1:22:b0:08:60:30:ec:0f:
19:cb:95:50:57:0b:0e:9a:18:f8:7c:bd:18:35:a4:1b:ab:52:
a2:40:e1:06:e4:f6:08:de:31:7f:a0:35:1a:fa:ac:e1:b5:70:
bc:ba:2d:5a:bb:65:ac:99:52:f8:e7:d9:79:85:1e:12:e7:1f:
19:e6:d4:fe:bf:45:21:ab:09:b0:e0:5d:95:be:99:9c:b7:79:
96:d0:08:ba:09:ee:d9:aa:d7:7f:4f:c4:af:ce:60:83:1d:6e:
a8:8b:9a:4f:b4:d7:b0:36:09:58:2a:f4:74:ae:51:c3:66:3c:
37:e3:1b:00:b1:ca:bc:e8:af:62:35:d5:f4:f0:d0:36:3b:ee:
88:da:2f:31:5e:ff:94:89:6a:c1:dd:92:2b:47:96:14:f7:f2:
cf:ff:fe:60:8c:1f:77:58:d8:39:0a:7f:c2:a8:fd:cd:b8:df:
86:cf:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:04:47 2025 by rpki-client