Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa
File: 4664F7042B7411EF9E28ED19C4F9AE02.roa (raw, json)
Hash identifier: Aa7zYmJq6heh8Y7nRX8mflbiKrA5BuJIy7DgV5gkvRc=
Subject key identifier: 81:29:0C:A4:5D:79:81:51:3E:BD:F8:9B:6E:26:57:95:26:0B:D5:35
Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial: 1DC9
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa
Signing time: Sun 16 Jun 2024 00:06:27 +0000
ROA not before: Sun 16 Jun 2024 00:06:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9297
IP address blocks: 43.248.44.0/22 maxlen: 22
119.252.0.0/19 maxlen: 19
2401:1400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7625 (0x1dc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Validity
Not Before: Jun 16 00:06:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=666e2c83-cd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:1d:d4:b2:6d:c5:b7:bb:5b:94:19:25:5c:
ff:94:8b:4d:d3:51:1f:22:ee:8e:3e:f8:06:1b:bb:
ee:d5:60:3c:4a:c6:be:ab:38:1e:1a:fc:ee:9d:64:
a1:73:ee:78:0a:fb:b2:1d:4a:9e:6e:44:49:39:e3:
c8:d9:aa:ca:50:22:cd:bb:d6:65:93:fd:cf:08:a1:
05:a2:c5:37:25:0b:0c:39:b6:da:8c:f0:1d:92:07:
72:36:38:0d:23:fc:c3:f5:35:ce:6f:fe:48:a6:80:
6d:a2:d1:87:1d:a2:2d:2c:32:8c:7b:73:74:b4:18:
a2:a2:25:fc:c5:eb:cf:68:9f:2b:e0:4f:bc:e6:c0:
4d:e1:9f:c0:8b:79:1e:44:ee:b9:5f:22:7f:75:47:
66:25:eb:2b:f6:dd:af:d4:0f:c6:90:8c:80:7b:f1:
f6:e0:2a:6a:0e:7a:a3:b3:3d:7a:0a:fd:28:70:8a:
8c:f7:79:af:a5:80:b1:1e:96:98:42:38:f4:6e:29:
b9:d5:6d:64:8f:99:04:f3:d0:4a:1a:97:65:f3:b3:
05:ee:de:88:bb:8e:70:b7:84:3f:51:e4:a4:4c:d9:
3b:4f:59:70:ca:00:64:ea:df:ca:1a:92:c4:7e:76:
9a:93:53:e6:23:f9:b6:b2:c3:a5:89:84:b2:1d:93:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:0C:A4:5D:79:81:51:3E:BD:F8:9B:6E:26:57:95:26:0B:D5:35
X509v3 Authority Key Identifier:
keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.44.0/22
119.252.0.0/19
IPv6:
2401:1400::/32
Signature Algorithm: sha256WithRSAEncryption
0b:e0:64:c5:2a:60:af:1f:25:88:3c:b1:a7:f7:af:ad:6e:01:
6f:d9:8d:b4:a1:83:d8:60:4a:18:70:83:5b:2f:29:44:e4:97:
87:fe:a9:b3:84:ad:72:b1:63:e2:36:07:33:5d:74:9d:f9:52:
5f:c7:71:5e:02:d2:a5:5b:3a:db:d5:d6:4f:28:f9:e4:25:9a:
4b:d1:cf:69:3d:38:c0:16:03:f1:5c:fb:7b:ed:26:59:b8:60:
41:a1:34:aa:86:de:9c:c4:5b:f9:94:ae:fe:66:ed:bc:08:b9:
5f:26:0c:87:80:f8:cd:a2:ff:ab:12:40:c4:9e:f7:69:68:67:
9a:30:5a:02:fd:df:74:40:26:66:d7:c1:c0:74:1e:75:4a:33:
b6:de:0f:50:6f:17:6e:ee:26:9a:15:3e:42:f3:fa:e5:44:2b:
e9:97:bd:35:b0:d2:b1:6c:e9:17:99:70:31:1b:ad:d3:cd:93:
9a:7f:d6:68:74:72:1f:21:c3:d4:ec:0d:0d:4e:f5:b9:a9:e4:
62:f5:52:a0:04:2c:0e:e9:ae:73:25:d4:1c:02:3f:ab:21:d2:
76:7d:01:f7:1b:bb:cf:d3:ea:dd:56:88:15:56:04:dd:b0:41:
4e:6b:47:e9:0c:39:09:58:21:11:6e:9b:7f:5a:3e:ce:21:ba:
bc:78:a4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:25 2025 by rpki-client