Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/917BBCFCC10911EFBAFD8440C4F9AE02.roa
File: 917BBCFCC10911EFBAFD8440C4F9AE02.roa (raw, json)
Hash identifier: G4qCBfBiyuTPsug5GnlFiwrzEcGJBAQ3dVRc73mpDv8=
Subject key identifier: F0:3E:03:26:5B:C5:DF:5B:36:D6:FF:C7:04:23:D2:FE:2B:E2:32:55
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 016A
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/917BBCFCC10911EFBAFD8440C4F9AE02.roa
Signing time: Tue 31 Dec 2024 07:30:57 +0000
ROA not before: Tue 31 Dec 2024 07:30:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 20473
IP address blocks: 43.224.148.0/24 maxlen: 24
43.224.149.0/24 maxlen: 24
43.224.150.0/24 maxlen: 24
43.224.151.0/24 maxlen: 24
103.43.173.0/24 maxlen: 24
103.43.174.0/24 maxlen: 24
103.43.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: Dec 31 07:30:57 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67739db1-2c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:cf:5f:79:ab:5a:7f:43:c5:70:e2:2d:24:
cd:b6:8c:1a:23:fc:49:3d:05:22:dc:b5:21:78:fb:
c2:f8:39:55:37:ef:1f:0e:59:f4:bb:8f:9d:7e:0a:
87:2e:50:b9:61:3e:2d:7e:a5:fa:17:a6:fa:eb:ed:
25:fc:a1:ad:fa:27:1f:5a:78:99:ef:ac:4f:66:63:
bc:77:2e:a0:2e:f0:ff:3d:03:c6:fe:99:45:0f:92:
d2:ff:e9:e4:42:57:11:6c:0b:6a:4d:b2:22:44:c6:
e7:84:9d:78:fc:e7:23:18:ec:05:8d:f9:31:05:2d:
11:cb:7a:97:36:af:29:14:e2:bc:f4:6a:39:ec:22:
fe:ec:bb:0f:2d:82:7b:3c:d7:d8:83:8c:26:82:dd:
d4:c5:44:00:61:1f:f4:7a:81:bd:dc:98:eb:a5:8f:
05:c0:e0:35:40:43:af:76:16:e8:72:03:5a:a4:d8:
b6:5f:3a:66:ba:76:a2:24:31:88:3f:11:67:bc:0a:
44:1f:c2:b8:e2:63:1a:4e:20:ef:84:fe:ec:9f:0d:
69:a4:6d:da:9b:5c:0a:fc:0e:52:26:f5:7b:a7:0c:
ab:ef:a7:d7:c3:3b:63:14:e3:fe:cb:8f:6f:d0:b0:
c2:45:ee:30:73:09:d5:63:29:47:30:c7:c0:09:55:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3E:03:26:5B:C5:DF:5B:36:D6:FF:C7:04:23:D2:FE:2B:E2:32:55
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/917BBCFCC10911EFBAFD8440C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.148.0/22
103.43.173.0-103.43.175.255
Signature Algorithm: sha256WithRSAEncryption
7d:6c:ec:de:a8:f2:ce:f9:94:6b:61:17:69:f7:26:da:ea:3d:
5d:5b:d0:3d:ef:c5:9a:57:e8:d0:04:ef:19:04:7f:13:2c:0f:
5d:63:1f:7a:db:ea:e2:88:30:b8:2d:2d:d0:86:79:b8:6d:4b:
7d:9e:20:ac:dd:e6:a3:67:49:ef:a8:6c:8a:a0:3c:12:8e:da:
35:d9:b6:f7:c3:d9:27:df:a5:5e:db:fb:a0:47:61:eb:18:19:
d8:0b:74:f6:fa:8d:59:35:33:a4:78:81:94:17:2a:2b:46:ff:
6e:54:27:6b:28:42:14:6c:63:c0:c6:25:90:9f:31:7a:b8:6b:
3f:68:79:e3:5c:33:e2:8e:ee:51:a8:1e:82:45:d2:c7:b7:26:
39:dd:bb:7b:a9:e6:af:f3:cd:3d:45:2f:8d:31:95:f9:5b:ff:
55:cf:ac:3e:22:4d:a4:98:13:25:4a:79:a9:1d:08:b5:6d:c9:
be:38:be:8f:8f:64:d5:06:49:1d:e9:5e:39:59:2d:56:c4:21:
ae:48:81:16:ba:50:46:c8:8c:d7:41:76:ea:cd:81:51:98:78:
e2:3b:63:8c:1b:f9:e1:a0:51:80:cb:1b:13:47:c8:97:d3:3b:
f6:3b:cb:74:fb:8a:3b:df:de:9d:3e:0f:5b:89:8d:41:38:b0:
b8:f9:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:55 2025 by rpki-client