Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa
File: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (raw, json)
Hash identifier: jj/VEZFojNzwFut6xQ2ddbaM/ffKwcFrBgOFEnS8TYI=
Subject key identifier: 2E:0F:53:4F:84:DF:BE:64:02:2C:F3:C1:94:DF:D9:90:BB:FA:00:7A
Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial: 02F1
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa
Signing time: Sat 18 Jan 2025 03:42:03 +0000
ROA not before: Sat 18 Jan 2025 03:42:03 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 153494
IP address blocks: 43.243.64.0/22 maxlen: 24
103.38.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E55
Validity
Not Before: Jan 18 03:42:03 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=678b230a-fdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:5f:35:a3:2f:eb:c9:df:d9:c9:bc:ee:be:
1f:ce:93:af:8e:12:02:cb:f3:bd:71:a3:60:18:c9:
86:4f:45:bb:ba:e8:bf:18:87:96:b9:ea:b4:93:92:
9d:57:62:ef:13:68:07:83:b5:bd:e8:20:b5:59:00:
c2:c9:a4:78:f5:a5:8e:4d:84:ea:66:99:1a:47:3f:
10:ea:38:f2:78:8c:ca:79:4c:b4:5e:c3:99:8a:49:
b7:9f:7e:e5:40:2c:6d:0e:ed:10:22:b4:c3:ab:a3:
81:0b:6b:54:50:70:4c:85:fa:ee:fa:ad:b9:15:49:
9b:28:81:52:76:8d:bb:04:50:27:f9:c7:2c:9b:7f:
b9:ae:80:21:88:f4:72:d6:65:3f:bd:d7:e8:82:0a:
b2:de:b4:5d:a0:3d:cd:df:77:03:ad:8f:2a:15:de:
ea:9d:a1:61:07:ba:5a:fa:f6:61:ca:77:e6:72:14:
d0:a7:a3:4f:cd:1b:48:52:03:d0:09:15:47:61:6d:
8a:36:b0:a6:7c:d7:51:30:c1:a6:7c:da:75:4e:27:
16:dd:16:bd:2c:89:d4:1c:38:70:d2:81:49:f3:45:
7b:c4:f2:96:06:7a:57:67:7c:7b:fb:1a:8f:6a:54:
36:f3:20:aa:6c:e8:17:0f:06:bd:07:29:24:30:08:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:53:4F:84:DF:BE:64:02:2C:F3:C1:94:DF:D9:90:BB:FA:00:7A
X509v3 Authority Key Identifier:
keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.64.0/22
103.38.168.0/22
Signature Algorithm: sha256WithRSAEncryption
19:e8:b3:c4:a6:60:02:ca:c4:93:52:c6:b3:17:fe:b6:69:40:
20:cc:ec:6b:f8:f4:17:1d:c2:32:50:ef:1f:b4:38:9b:be:00:
dc:48:d1:ee:b4:40:20:02:14:ae:00:bc:43:23:cd:63:56:fe:
f8:61:56:58:dd:81:7a:3c:e2:e8:6b:ed:5c:7e:e9:85:98:bb:
cb:47:78:b1:b3:b3:a2:b8:dd:08:b7:4b:27:a6:ba:3e:48:8d:
87:fc:b5:e8:6b:e9:33:3a:fc:11:55:09:e2:d4:6a:ea:04:6b:
bb:63:a3:03:27:3e:38:f1:78:d5:39:b7:f0:00:bc:ba:16:3d:
62:44:76:5c:02:8b:ce:b7:db:83:3c:50:eb:fe:47:a9:d2:b7:
04:99:ac:51:0b:82:db:86:05:ae:a0:32:f2:d1:c5:77:e6:62:
8f:b9:2b:5d:ba:3d:2b:b7:ab:86:87:f6:fa:e1:9f:36:88:56:
9a:f4:2d:0f:97:19:14:b3:11:9d:01:3e:ac:53:31:2d:f2:dc:
ba:d8:bc:69:54:6f:f7:c1:f4:24:64:8f:f3:ac:76:f8:20:da:
c0:cf:93:ee:ec:e0:ec:ad:9e:e4:64:22:72:a6:fd:a6:97:80:
7d:36:a2:f5:21:e0:99:0d:2d:fc:b1:94:4b:3c:8c:87:0e:d1:
bf:dc:7d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:09:58 2025 by rpki-client