Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/21FE5D3468F911EF986C8281C4F9AE02.roa
File: 21FE5D3468F911EF986C8281C4F9AE02.roa (raw, json)
Hash identifier: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=
Subject key identifier: C0:81:DC:F1:CA:C9:48:4D:43:E9:74:68:0E:ED:84:82:EE:CA:43:3D
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 02EF
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/21FE5D3468F911EF986C8281C4F9AE02.roa
Signing time: Wed 27 Nov 2024 01:35:10 +0000
ROA not before: Wed 27 Nov 2024 01:35:10 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 45959
IP address blocks: 43.240.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A
Validity
Not Before: Nov 27 01:35:10 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6746774e-129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:f8:e4:ff:a2:75:79:df:4d:6b:72:e5:b0:
bf:ff:7f:31:9f:c6:02:b0:20:42:40:88:54:2c:b2:
71:2d:d2:77:80:10:9f:97:58:d1:6a:ff:94:95:60:
db:25:75:ec:a5:df:be:cb:31:b5:24:e0:85:6c:3b:
2d:ae:01:a9:85:fe:ca:40:80:34:10:1f:eb:1f:f5:
8e:2d:68:50:93:05:25:ce:a4:fa:f4:a0:ec:f3:0e:
4b:4e:6c:12:0a:4f:13:22:0c:28:81:6f:59:da:ae:
80:d8:05:d5:1a:36:1f:ae:d0:f5:95:30:68:48:d0:
9e:1a:37:9b:23:62:32:2e:74:0d:f9:32:81:14:f9:
32:c1:58:21:1a:db:22:3e:db:77:77:9a:4f:78:42:
68:8f:20:91:03:9e:11:8d:5c:b4:a2:65:09:00:70:
07:b1:43:a7:f9:c4:7f:d2:d8:51:b3:dd:d6:d3:84:
c7:bd:0d:04:d1:95:59:e4:01:c3:c0:e2:28:13:54:
e8:98:e6:75:42:1a:2f:15:85:8e:9d:6a:cd:6e:5b:
1d:57:22:4b:44:9d:59:6c:b2:34:11:79:95:6f:a4:
72:42:1c:a3:65:f9:2f:31:3f:f4:00:a6:17:c8:9c:
64:a0:87:99:f3:03:a3:ef:07:74:cc:dc:63:67:75:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:81:DC:F1:CA:C9:48:4D:43:E9:74:68:0E:ED:84:82:EE:CA:43:3D
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/21FE5D3468F911EF986C8281C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:37:00:43:a8:1a:e1:2d:df:eb:d7:a0:93:8d:e9:a9:9b:96:
0e:0a:20:de:e3:30:65:01:f6:db:4f:aa:39:6f:6b:a3:f1:e9:
2a:1a:b6:86:4d:63:0f:49:9e:18:44:76:ad:75:79:ee:0f:af:
e6:d3:50:49:ad:21:cf:ef:20:97:a4:2e:cf:ad:d6:f4:55:7a:
ce:32:e8:cb:20:25:15:6b:ec:f7:51:bb:e4:7e:7c:19:d9:4f:
a8:5e:57:f1:04:ec:71:98:0c:97:14:f0:60:6b:b7:90:9c:48:
b6:f8:ac:65:86:93:9f:66:a0:b2:2a:41:22:26:3a:8b:57:ac:
26:06:0e:00:ae:ad:5b:83:bd:97:b7:1c:21:5d:1f:1c:a2:dd:
f9:78:50:d8:c0:99:93:da:9f:ca:3b:07:1f:d0:20:d8:41:bc:
dd:d1:c2:7c:b8:b7:2e:24:eb:af:96:82:73:99:1a:4e:4b:a3:
6f:18:e5:e7:c8:c4:c4:af:2c:72:0c:66:b9:9a:56:c6:cd:87:
48:89:9c:4c:2d:cd:c8:b0:c1:f4:57:91:25:35:34:ab:cb:71:
69:75:bf:97:5e:24:a9:44:70:2a:80:ce:45:b7:8b:c1:bf:3f:
14:15:7a:6a:d9:78:0d:65:53:02:1d:c6:f5:28:7c:12:00:49:
a0:66:f9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:58:06 2025 by rpki-client