Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa
File: 15D68F5ED55011EFA0564D54C4F9AE02.roa (raw, json)
Hash identifier: bm0eX3arzl/Vd2cVSRTEVj0uPXCCRL3I0GcsJSw9xWg=
Subject key identifier: E4:AF:29:0D:A2:09:56:4C:2A:04:93:3D:BD:5A:FF:D6:13:8A:EE:50
Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Certificate serial: 02F1
Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa
Signing time: Sat 18 Jan 2025 03:55:41 +0000
ROA not before: Sat 18 Jan 2025 03:55:41 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 153494
IP address blocks: 43.248.64.0/22 maxlen: 24
103.39.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Validity
Not Before: Jan 18 03:55:41 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=678b263d-9851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:79:a4:91:5d:2c:25:d0:c0:56:1a:8a:a3:
38:fd:8f:47:ea:32:61:61:ed:4b:47:9a:3d:3f:14:
ea:45:38:0b:c9:26:e9:1c:c0:d7:68:93:59:bd:84:
74:50:23:cf:30:c4:af:49:ee:66:59:5b:08:11:32:
36:dd:1a:d4:53:68:b2:44:22:58:15:f6:cf:14:a2:
3b:6e:44:a1:70:bf:5a:41:30:6a:ba:56:f6:84:e9:
8b:12:26:49:4a:a2:12:fd:14:fa:e8:34:ef:61:80:
20:ee:7e:c2:4d:46:be:5b:04:ea:00:9d:63:d1:66:
2f:35:5e:60:3e:22:2b:d1:16:4d:91:36:86:53:bd:
82:ee:ca:10:af:51:42:0a:ff:28:67:47:9c:0f:b6:
7b:dc:dd:ee:87:3a:75:a4:4b:11:f1:c8:2e:a5:94:
27:95:7c:18:9b:91:90:7f:b8:77:d5:ca:c6:b5:b2:
3b:81:6a:4d:66:48:23:89:08:1d:20:f4:7f:ba:75:
7c:19:89:42:65:dc:4b:eb:a0:e7:c3:c9:da:b4:ad:
63:f0:f8:24:5d:ea:c2:90:c4:89:26:6f:a4:66:4a:
2d:00:14:08:4b:bb:b3:56:a6:55:d7:0e:80:04:22:
b6:2f:34:05:56:04:43:57:9a:1f:bf:cc:52:67:36:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:29:0D:A2:09:56:4C:2A:04:93:3D:BD:5A:FF:D6:13:8A:EE:50
X509v3 Authority Key Identifier:
keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.64.0/22
103.39.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:30:ac:e8:94:ba:11:57:a2:77:4f:7c:01:7e:6d:3f:dc:54:
05:e2:83:35:13:c9:ff:36:4a:6d:31:ab:5a:cd:4f:4c:f3:84:
67:46:ba:60:ee:22:77:a2:ff:98:5f:02:70:a8:cb:c8:04:f7:
65:3c:6f:0f:ed:24:6c:04:40:ca:73:16:f6:df:41:97:b0:c8:
a8:cd:44:6c:82:60:fa:b2:b4:14:86:49:7a:ea:7b:34:dd:d6:
c6:a2:51:21:ac:0f:44:20:42:a3:26:6f:5f:35:a5:c1:a7:fb:
2b:3f:05:14:c3:8e:aa:02:5a:c8:25:6b:95:55:80:c9:67:e9:
6c:4a:b0:86:cf:e7:13:6e:0b:53:a6:2e:9d:65:11:53:6b:f6:
c1:9d:cd:0c:4a:54:f8:36:18:fb:47:51:c6:a2:82:78:b3:86:
30:41:95:64:25:4d:7f:67:4a:79:ae:0e:7c:61:f1:2b:ad:e9:
e4:42:e2:23:9a:09:32:13:2c:13:19:83:81:76:46:14:c5:65:
70:bd:d0:c4:75:1f:d6:f7:81:fa:45:2b:5a:bb:5e:61:5c:40:
c3:74:15:72:06:31:0e:bf:08:7e:71:dc:b3:7c:35:9e:3f:f2:
cc:e6:21:2d:3f:10:bf:cc:8e:52:fd:76:6c:bb:4c:d0:e6:b1:
8a:50:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:50 2025 by rpki-client