Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/CA9C08E07C7E11EFBDC93555C4F9AE02.roa
File: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (raw, json)
Hash identifier: B9gXP8wVYa4nzRdqoTryX/TqkLwtBQMA1wTvqei6JOM=
Subject key identifier: 4D:85:54:4C:AE:5F:A7:FE:2C:1B:6A:1D:3C:C7:EA:CD:61:01:BC:13
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 06BC
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/CA9C08E07C7E11EFBDC93555C4F9AE02.roa
Signing time: Mon 02 Dec 2024 22:31:47 +0000
ROA not before: Mon 02 Dec 2024 22:31:47 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 62468
IP address blocks: 43.250.172.0/22 maxlen: 24
103.42.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724 (0x6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Dec 2 22:31:47 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e3553-f980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:29:c6:4c:b9:05:c2:77:9d:90:d4:85:30:
a6:e4:c6:39:98:a3:d2:65:18:5d:40:a5:d9:97:65:
f0:a0:58:55:b1:45:15:19:5a:04:62:24:30:9a:ec:
8e:86:f7:10:f8:05:48:81:51:b5:5b:ce:c2:8d:41:
32:57:43:eb:60:d5:90:22:30:5d:6b:0f:e7:df:a5:
6f:77:d1:d5:71:dd:0f:fe:da:58:e1:d6:71:32:e9:
43:45:97:14:50:d7:62:58:78:db:36:9c:8e:c0:60:
bb:f5:d1:96:f0:e1:07:cc:9b:af:09:44:39:de:c1:
71:3e:b6:3c:84:31:26:93:2d:88:2b:ea:f4:73:80:
c9:07:bb:2f:89:d5:be:db:51:d4:4f:c6:16:35:bb:
36:10:25:1d:50:5b:ad:e7:27:9c:91:58:1a:0c:4d:
8f:34:ef:c3:e3:7d:09:ae:97:bd:62:31:7a:cc:82:
78:e5:d3:35:02:33:1d:73:9d:00:f0:d8:8a:4f:4f:
be:38:34:fd:59:ff:90:72:09:0f:39:0d:91:0b:b9:
07:33:46:39:35:74:43:cd:a9:1b:8a:ea:45:b1:4d:
51:28:d1:6a:32:81:7f:ae:0f:ea:d2:78:f6:9b:0e:
69:52:ad:e7:e2:74:a5:85:89:b3:82:07:03:ce:48:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:85:54:4C:AE:5F:A7:FE:2C:1B:6A:1D:3C:C7:EA:CD:61:01:BC:13
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/CA9C08E07C7E11EFBDC93555C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.172.0/22
103.42.28.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:ef:2b:40:5c:8c:15:66:f9:79:09:4d:4d:5a:00:9e:1d:5a:
52:e0:2a:ed:03:07:8a:1e:ea:0f:a9:d5:e4:95:2b:0d:83:e5:
bf:37:3d:e4:6f:01:1b:0d:92:c8:28:43:39:88:5b:23:a9:42:
42:1d:d0:24:90:2a:12:1d:4b:49:01:60:4a:95:96:b1:bc:31:
2e:15:0c:1d:d4:1c:f1:9a:f5:3c:f8:6d:97:8a:70:8c:f9:b0:
76:91:41:6b:2d:6d:d8:9d:82:7b:2c:8e:cd:24:d0:7e:c7:44:
60:8f:b1:c8:a0:66:fa:e7:8e:6d:3b:38:2c:1d:78:9f:f1:9f:
ee:d1:18:5f:08:ed:e4:f8:0b:b1:7f:42:18:64:e1:3f:35:18:
3d:ae:91:9d:2f:7f:4c:83:8f:76:9b:41:5a:c6:cd:56:6d:45:
35:85:aa:bc:51:57:52:3d:ee:d0:66:b2:01:cc:e3:fb:77:85:
23:4f:28:a8:35:df:6a:e0:26:3a:d9:cb:3a:b6:4b:ce:51:4f:
10:21:52:2c:78:7b:45:d8:7e:2e:a6:c2:15:55:5c:83:e5:5c:
21:79:20:d2:ff:65:ef:72:56:ae:cf:cd:44:fb:ad:c6:3b:7c:
a7:eb:ad:57:bb:2d:5d:ac:11:47:50:7a:fc:1a:b5:7d:cd:e2:
6a:9a:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:39 2025 by rpki-client