Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
File: F278C026892911EFB08D7746C4F9AE02.roa (raw, json)
Hash identifier: C5af6g+Lu9mdrwbxySM/XZuzLumGfZMRdOD7/d/Fh8M=
Subject key identifier: 35:1B:F6:71:FE:8F:F8:F9:22:7D:2D:AC:49:A7:A7:89:FB:08:0F:B8
Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial: 9A
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
Signing time: Mon 25 Nov 2024 22:33:56 +0000
ROA not before: Mon 25 Nov 2024 22:33:56 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 146859
IP address blocks: 43.239.92.0/24 maxlen: 24
43.239.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348C9
Validity
Not Before: Nov 25 22:33:56 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6744fb54-6bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:36:0c:99:36:5a:a6:78:19:24:e8:c2:76:
24:dd:7d:72:2c:d8:92:08:f6:b0:5e:30:44:29:89:
cc:d1:32:e3:92:32:cf:60:7b:bf:7d:22:b8:d0:04:
d0:fc:e5:7f:19:81:db:4e:18:be:96:f6:cb:8d:24:
cb:14:4b:4d:3d:5c:ec:71:97:fe:8f:0d:8e:54:b6:
59:e0:2c:12:1d:70:de:59:a1:8d:97:f8:83:ae:9a:
d7:90:1c:1a:7b:02:1f:8e:58:19:88:6f:bc:ff:9c:
b4:af:ec:3f:bc:0e:45:3d:d4:d1:c6:58:b5:1e:6a:
b2:b2:95:29:1e:e6:c7:85:bb:e7:27:1f:c5:f6:f5:
03:f4:54:76:3d:33:bb:01:95:a9:70:71:ef:7e:91:
2b:b0:69:ae:a7:64:86:42:c5:2b:19:a8:52:f5:6a:
61:9e:ea:ca:9b:f8:1c:9f:66:a7:51:0c:e9:f7:f2:
0b:31:b7:6f:07:aa:cc:f2:ab:59:87:06:5d:01:ea:
f3:f6:3c:1b:2c:a0:3d:c5:b7:36:71:b4:7d:41:a3:
c1:a5:7b:18:7b:bc:27:00:ff:7f:75:66:1a:fc:14:
95:a9:5d:1c:06:a7:eb:7a:29:e6:c2:d9:2c:54:d8:
55:d0:39:c0:0d:77:f4:50:c2:59:17:30:85:43:66:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:F6:71:FE:8F:F8:F9:22:7D:2D:AC:49:A7:A7:89:FB:08:0F:B8
X509v3 Authority Key Identifier:
keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.92.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:67:b7:39:05:32:dd:63:26:a9:b0:d9:4a:07:16:7c:0f:e1:
be:bb:46:2d:43:c0:78:5e:18:21:fd:49:02:dd:8b:93:4e:3f:
45:d2:90:87:92:aa:bb:ff:27:1e:ff:54:dc:20:8f:ba:17:b9:
4f:dd:73:42:ce:5c:0d:72:ef:8b:a6:7f:df:b9:58:d2:10:15:
43:75:f9:0d:91:c0:c4:97:52:54:5c:bb:7f:ca:35:e4:40:d9:
1e:92:e3:e9:a1:28:fc:32:f6:85:d4:6b:44:dd:c0:c8:04:60:
70:76:ae:b2:64:f0:67:83:e7:f5:a8:8c:b1:2d:be:3b:f3:f9:
06:50:4a:01:92:c2:9c:5b:70:92:02:a7:94:01:b2:58:0d:64:
be:23:db:31:05:5f:77:91:5c:43:bc:58:09:5b:f5:23:43:c7:
70:e3:fe:8b:1e:ab:fa:fd:e2:d0:f4:24:16:11:b7:d7:10:8a:
98:3c:af:98:94:fd:b5:0d:ce:62:ec:b0:ff:d6:de:be:e8:e7:
a9:17:b4:ac:e4:c4:58:b8:0d:06:11:db:c4:a6:d0:f2:99:7a:
ee:b3:4f:bf:78:0b:85:8b:c4:22:4f:c3:41:93:41:8f:98:ad:
5c:85:5a:ba:87:ce:1d:d9:f4:4b:ad:30:8b:1f:db:8b:6b:88:
f9:b3:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:13 2025 by rpki-client