Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa
File: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (raw, json)
Hash identifier: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=
Subject key identifier: 4E:D3:4E:3B:A5:AF:51:6D:58:2F:3A:A3:FC:DC:B4:D8:AC:C1:7B:7D
Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial: 22EB
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa
Signing time: Tue 14 Jan 2025 15:52:50 +0000
ROA not before: Tue 14 Jan 2025 15:52:50 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 55943
IP address blocks: 43.249.176.0/22 maxlen: 23
103.4.72.0/22 maxlen: 23
113.197.68.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8939 (0x22eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Validity
Not Before: Jan 14 15:52:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67868852-1227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:dd:93:ab:f1:19:4b:a9:97:e7:f3:d4:73:
71:b5:8f:3f:1e:07:01:e5:b6:a1:04:43:3f:72:5e:
c2:b3:d2:16:1c:2c:1c:d7:9c:df:b3:f2:c0:ac:97:
e1:03:d9:1e:6d:b7:8e:f2:bb:5f:20:18:c7:3a:58:
6c:8f:1f:58:de:7d:db:44:56:f3:63:52:ef:e4:53:
e7:11:95:05:c0:4e:81:61:9c:d4:67:1f:90:60:4f:
ec:c2:76:b1:04:cb:70:1d:1a:cb:bb:00:d8:6c:59:
d4:fa:94:4f:b7:b1:67:f2:8d:6c:03:51:03:8e:33:
cc:14:e3:c6:3c:3b:c3:c3:86:0e:23:f0:34:fc:f2:
37:9f:f4:42:6d:89:d4:00:a0:a3:08:1b:e4:2f:34:
cc:82:ab:ab:67:91:57:60:55:49:2c:e9:57:7c:3e:
c4:9f:2e:79:01:f7:58:b5:50:f5:f2:82:58:35:5a:
a2:d8:f2:2e:02:15:63:e3:11:7d:cd:fb:e5:2d:28:
75:71:07:b7:5e:5b:ef:58:bf:ef:42:69:d6:bd:8b:
cf:9d:f5:bc:80:28:c5:8d:b2:c9:38:d9:dd:ff:0b:
25:b8:6a:20:1b:3f:bb:b5:82:38:58:42:02:48:68:
aa:d5:cd:e7:ef:cd:09:0a:9c:33:60:4f:2f:29:df:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:4E:3B:A5:AF:51:6D:58:2F:3A:A3:FC:DC:B4:D8:AC:C1:7B:7D
X509v3 Authority Key Identifier:
keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.176.0/22
103.4.72.0/22
113.197.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:42:95:52:2d:fc:ee:5e:3a:02:e1:ed:24:ae:50:90:ff:5d:
d5:61:94:97:6b:90:2b:b7:4b:f4:0e:36:ec:0f:8a:b5:22:f3:
36:ca:8d:d5:02:c1:95:79:a4:5f:7e:f7:f9:85:5d:2c:4a:cb:
7d:f9:92:88:9c:cd:a4:96:0c:c4:3d:a2:20:3e:7e:c6:b8:04:
2d:48:a8:e1:5c:9d:d8:39:e2:ca:87:80:77:f8:d8:48:82:16:
b5:1a:08:e9:5c:c5:da:76:3a:40:ff:af:27:56:41:43:5e:54:
96:92:69:30:f0:af:0b:56:63:b0:d1:4c:fb:9f:d2:17:a7:94:
85:ee:0c:66:83:31:1e:34:96:8d:19:6b:16:55:c4:4f:71:c9:
7a:e9:09:fb:77:96:de:78:df:b4:60:e8:5a:a8:bc:9b:ee:d3:
20:76:de:82:87:0e:a1:83:bb:92:87:b7:64:0e:0e:09:7c:b5:
47:4b:b7:71:db:19:0d:67:72:20:6b:a4:8b:84:85:70:a9:01:
f3:b4:05:4f:b9:a9:3f:5c:40:5a:51:f0:df:52:ea:bc:96:4b:
87:02:0d:28:79:c2:4e:bb:0e:e7:f7:86:22:c5:4c:89:90:24:
49:38:bd:13:3a:4f:e1:d8:80:3c:ff:25:35:26:74:7e:73:67:
de:eb:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:18 2025 by rpki-client