Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa
File: 5480D316764D11EA8CB5C039C4F9AE02.roa (raw, json)
Hash identifier: ftobPRBcc8wlVTCOH3GxCPMFHQM9ebuoV2KFpLluNR4=
Subject key identifier: AC:BD:E0:F2:3A:2A:A8:92:62:DE:0B:6E:5D:55:76:B8:BC:9C:14:C6
Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Certificate serial: 215F
Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa
Signing time: Thu 10 Oct 2024 16:23:26 +0000
ROA not before: Thu 10 Oct 2024 16:23:26 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 56308
IP address blocks: 43.255.124.0/22 maxlen: 22
45.125.196.0/22 maxlen: 22
2407:8100:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8543 (0x215f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Validity
Not Before: Oct 10 16:23:26 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6707ff7e-71e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:0a:86:b7:33:9a:db:58:06:a8:ea:50:5c:
30:47:c4:48:57:81:63:b0:f2:db:68:b4:05:09:f0:
14:40:8b:56:7d:63:31:05:28:74:f6:44:62:42:01:
46:9e:10:55:42:4b:bc:87:de:71:39:9a:5f:3b:a0:
72:45:a8:be:a0:75:1b:be:d2:9f:0e:22:09:2f:57:
63:59:34:69:46:14:2c:da:f0:69:cd:a3:91:a5:61:
10:bd:51:0c:7a:58:e4:9e:55:d5:e6:62:be:86:c4:
9f:0b:16:93:88:ff:36:ef:91:b0:2e:92:0e:43:b4:
a0:9a:57:ec:97:d7:b1:4f:33:b0:47:0a:31:9d:4d:
f6:be:d5:b7:c0:28:51:40:08:a3:ae:6a:50:97:a1:
bc:56:ca:2a:26:8b:69:e7:2e:01:a0:97:3d:9b:35:
fc:95:ba:2f:ea:e9:50:e7:14:21:43:33:fe:6c:ca:
2c:49:9c:e7:90:8b:51:3c:16:df:c7:1d:4a:5b:5f:
b9:3b:a7:b3:46:cd:1e:01:7e:bb:d1:db:b5:a6:2e:
db:c2:9b:37:41:da:96:e4:1e:0d:36:4d:c8:5a:55:
ad:db:69:c5:ec:ab:e9:37:9d:68:42:ae:a9:1e:57:
ef:86:81:b1:04:2c:24:67:27:94:f3:c9:9a:74:dc:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BD:E0:F2:3A:2A:A8:92:62:DE:0B:6E:5D:55:76:B8:BC:9C:14:C6
X509v3 Authority Key Identifier:
keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.124.0/22
45.125.196.0/22
IPv6:
2407:8100:5::/48
Signature Algorithm: sha256WithRSAEncryption
76:71:f5:3b:c1:63:2a:81:21:90:62:40:20:c5:d9:67:61:0b:
10:e6:0a:7b:d5:aa:52:ca:12:56:5d:d2:df:c6:21:0b:8e:fd:
3e:cd:a9:67:21:3f:2b:0c:e3:26:80:81:30:64:8e:02:77:45:
0f:30:e9:01:17:fe:11:ad:ab:74:f6:c6:16:e9:4a:eb:d0:03:
ce:c9:d2:88:46:10:9c:c2:bf:92:bc:28:e0:7c:0b:8f:3a:6d:
2a:82:40:22:ee:33:bd:11:1c:7c:47:3d:4f:30:a3:e1:49:93:
30:8a:73:38:96:46:9c:c0:3c:c7:8f:43:db:b1:e9:dd:8b:25:
da:aa:de:cf:09:e5:2d:95:19:c9:70:65:c0:35:a8:a9:10:66:
e7:70:30:90:15:7a:8e:eb:49:b0:09:f6:72:a6:dd:65:17:78:
7a:07:b3:7b:70:74:1a:a1:9b:be:42:e5:ba:43:a9:c6:bd:f1:
29:c6:1a:67:8a:7f:5e:32:9d:a5:02:45:7d:3c:95:69:4a:d3:
ba:26:32:f9:6b:22:15:f7:2e:f8:15:92:ea:ab:8d:9e:fe:ce:
af:1e:18:89:4e:25:16:07:18:1a:7b:2f:33:f3:5a:01:e5:6d:
e0:f1:2d:c7:01:8e:0f:8f:3b:4f:cc:21:6c:a9:9b:00:f1:f0:
93:c5:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:24 2025 by rpki-client