Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa
File: 919E2B20E52811ED863E8C34C4F9AE02.roa (raw, json)
Hash identifier: VSGpgkTK4GJAEykLuxr4d3IX3iq1tszeppitkXXA2ws=
Subject key identifier: C8:22:CC:74:F3:E6:CF:7A:2A:F1:8E:22:97:26:68:BC:63:03:40:CF
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 06A7
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa
Signing time: Sun 29 Dec 2024 03:07:52 +0000
ROA not before: Sun 29 Dec 2024 03:07:52 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 42960
IP address blocks: 43.254.164.0/22 maxlen: 24
43.255.159.0/24 maxlen: 24
103.30.76.0/22 maxlen: 24
103.171.34.0/23 maxlen: 24
2001:df7:3480::/48 maxlen: 48
2401:2660:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322
Validity
Not Before: Dec 29 03:07:52 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6770bd07-aa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:b0:95:a6:ce:31:38:3d:ef:34:3f:c2:f9:
32:b0:e2:9d:91:08:74:6b:72:d6:60:89:30:e0:bb:
46:7c:5f:46:a4:bb:79:8a:32:df:a5:f0:8a:96:69:
76:1f:86:2e:2e:02:fa:6c:df:83:23:70:74:09:bf:
4f:cd:9f:df:89:ae:94:03:d6:73:94:0e:1b:46:57:
8b:c9:db:62:d6:66:29:06:65:57:8e:c2:72:90:45:
3f:39:87:be:03:b8:64:0d:8f:56:0b:8f:59:8d:59:
2a:18:64:e6:0f:36:70:2b:52:83:66:a3:95:9d:d6:
ac:0f:a8:a0:55:d9:41:bb:6b:1f:5c:c1:0b:e3:84:
d5:11:a1:5e:a5:03:92:d0:22:d3:3d:81:92:f7:45:
9b:2d:99:9c:58:6e:1b:29:34:15:7e:a7:df:3e:c8:
cf:60:70:44:72:e5:5c:18:50:2f:56:0c:09:f4:81:
26:9f:87:53:ab:83:f0:ad:f0:44:3e:42:c0:d9:8a:
3e:c6:54:40:5f:cd:8a:f3:6b:05:02:79:12:fd:76:
b1:cd:71:56:f4:b1:b1:07:20:dc:5f:25:e6:e6:de:
70:e4:f4:12:26:dd:6c:c8:83:9a:c7:8f:ba:1f:f4:
5e:10:53:ca:12:42:8e:8d:82:8d:0e:ce:4e:bb:c6:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:CC:74:F3:E6:CF:7A:2A:F1:8E:22:97:26:68:BC:63:03:40:CF
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.164.0/22
43.255.159.0/24
103.30.76.0/22
103.171.34.0/23
IPv6:
2001:df7:3480::/48
2401:2660:1000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:4c:1f:49:aa:54:fd:91:a7:66:af:09:bd:0d:7a:68:b0:56:
7c:41:cb:fc:db:6a:da:2a:6f:53:17:b5:d3:8f:10:da:62:1a:
c7:ef:3b:1f:08:0d:47:55:48:ce:16:5f:47:cb:9d:af:00:10:
fe:7a:7a:a6:30:cd:42:3e:a0:d4:aa:09:d4:14:a3:8f:8e:e6:
5a:d5:ac:7c:40:12:d8:9a:82:b0:af:fd:d9:eb:3d:a0:00:77:
49:d2:f2:1c:f6:d6:3d:58:96:90:98:f8:16:ef:e6:f6:ee:ad:
9d:41:8c:f4:6d:0c:9d:63:96:71:61:34:25:08:05:94:58:32:
8e:eb:af:d2:87:ca:4c:e2:11:a9:21:81:b7:71:5d:1a:a2:a2:
f8:cf:cd:7f:0e:16:50:80:52:29:87:1c:be:41:7b:b1:fd:9d:
22:70:9b:34:f3:3b:77:04:66:58:7c:9f:c9:3c:8c:04:3b:8e:
58:c4:39:4a:81:98:a8:39:38:e5:a9:81:06:1d:e6:24:59:1d:
c8:f2:84:59:0c:92:c9:ba:d3:c9:1e:35:91:6e:41:cc:4c:11:
6e:4c:4b:7e:33:6c:1f:4d:a9:25:56:8d:d4:c3:0d:77:1f:b4:
72:09:0c:11:a2:2e:4e:2a:d2:52:91:ae:cf:d2:d5:d5:40:21:
f9:02:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:58:47 2025 by rpki-client