Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/07A03078F07811EFAE935B1DC4F9AE02.roa
File: 07A03078F07811EFAE935B1DC4F9AE02.roa (raw, json)
Hash identifier: Zzirrzu4vSEuHSB/v1+ycJxCJwXPrZluOreAsfcBCzY=
Subject key identifier: 7B:13:63:FB:32:CD:89:C3:57:A9:57:C6:AD:5E:46:D4:72:DA:0B:09
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 0118
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/07A03078F07811EFAE935B1DC4F9AE02.roa
Signing time: Thu 06 Mar 2025 16:04:55 +0000
ROA not before: Thu 06 Mar 2025 16:04:55 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.231.207.0/24 maxlen: 24
103.72.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647
Validity
Not Before: Mar 6 16:04:55 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67c9c7a6-04d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:89:d7:f2:89:59:99:64:e5:17:54:ab:eb:
fc:20:5f:2a:f3:c5:f0:53:0a:97:e9:e4:79:25:40:
87:19:de:e9:f3:6d:66:15:6e:7b:a3:d4:b1:df:ac:
92:df:4d:1a:27:13:50:42:07:2f:51:63:80:74:a1:
63:0e:de:b2:bb:2e:77:ab:b4:41:ae:65:1e:41:1c:
9d:94:c0:1f:12:f7:c6:97:9d:f8:3f:04:ff:49:c1:
8e:e9:aa:60:06:6d:05:39:01:26:a8:d4:86:69:3a:
6e:9a:de:75:5d:eb:e9:5f:7c:bd:53:2d:14:4e:e4:
8a:d3:eb:27:72:59:a0:5c:2e:8e:46:89:9a:ad:dd:
c5:c6:54:a3:29:b8:c1:06:7a:74:38:e2:90:22:39:
10:a6:06:81:4a:e6:92:54:d1:2c:cc:cc:74:29:f9:
d3:af:ed:98:5b:e1:30:09:93:5a:c7:dd:70:af:17:
06:f0:58:20:9f:04:66:ea:b9:24:e8:2d:a4:8b:84:
8f:f2:05:96:d2:da:b7:cc:fc:cd:c7:33:0f:04:fe:
b9:45:08:d0:5a:30:bb:5b:cd:42:58:7a:a9:b4:03:
5a:0c:c6:45:f9:cb:e8:1c:76:4a:31:d4:7a:f2:90:
e2:22:e3:9e:1d:1d:81:19:49:85:ad:3e:8a:33:ea:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:63:FB:32:CD:89:C3:57:A9:57:C6:AD:5E:46:D4:72:DA:0B:09
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/07A03078F07811EFAE935B1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.207.0/24
103.72.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1d:0c:9e:52:83:a3:16:3c:47:c3:de:17:70:e3:a1:31:fd:
6d:0c:25:c9:f7:5e:a8:82:6f:ea:80:0b:33:8b:9c:b4:4d:18:
83:35:34:84:3b:a7:4e:e6:df:64:8e:a6:4f:b9:d0:e5:49:9e:
ca:79:62:25:1f:31:13:06:86:ff:a6:f4:38:1a:68:7a:f3:00:
ba:0c:5c:68:81:ab:db:de:3c:9a:8e:40:46:51:35:1a:04:b5:
f7:a1:78:d4:70:dc:0b:50:e6:71:6f:a6:58:ad:c5:d4:1a:c7:
13:70:5f:ae:9b:84:2a:6a:13:3c:d0:f1:94:65:44:4d:1f:94:
bf:3c:a5:9b:9b:e9:52:11:cf:cf:8e:60:cc:84:21:e9:d4:eb:
1d:2a:9d:e1:59:e5:c6:75:70:3b:4c:c4:f2:75:b8:c9:8f:02:
28:4b:8c:9b:0b:e0:6b:6b:0c:b4:24:98:5e:7d:aa:4d:3b:d1:
a6:05:98:13:7c:42:c1:80:71:0a:71:2a:d7:a1:1b:27:53:46:
51:58:4b:fc:ee:d5:c2:ac:dc:66:4a:05:d6:e0:43:22:d3:95:
b3:51:74:74:bc:42:39:8d:32:44:df:26:b9:a3:e3:93:10:b5:
75:7e:53:68:36:ec:16:4a:12:50:cd:18:62:6d:17:36:74:79:
19:e1:77:4a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw
MEQ3ODhCRkIwHhcNMjUwMzA2MTYwNDU1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M5YzdhNi0wNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1l6J1/KJWZlk5RdUq+v8IF8q88XwUwqX6eR5JUCHGd7p821mFW57o9Sx36yS
300aJxNQQgcvUWOAdKFjDt6yuy53q7RBrmUeQRydlMAfEvfGl534PwT/ScGO6apg
Bm0FOQEmqNSGaTpumt51XevpX3y9Uy0UTuSK0+snclmgXC6ORomard3FxlSjKbjB
Bnp0OOKQIjkQpgaBSuaSVNEszMx0KfnTr+2YW+EwCZNax91wrxcG8FggnwRm6rkk
6C2ki4SP8gWW0tq3zPzNxzMPBP65RQjQWjC7W81CWHqptANaDMZF+cvoHHZKMdR6
8pDiIuOeHR2BGUmFrT6KM+pNbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHsTY/sy
zYnDV6lXxq1eRtRy2gsJMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz
NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvMDdBMDMwNzhG
MDc4MTFFRkFFOTM1QjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAr588DBABnSMMwDQYJKoZIhvcNAQELBQADggEBAFsdDJ5S
g6MWPEfD3hdw46Ex/W0MJcn3XqiCb+qACzOLnLRNGIM1NIQ7p07m32SOpk+50OVJ
nsp5YiUfMRMGhv+m9DgaaHrzALoMXGiBq9vePJqOQEZRNRoEtfeheNRw3AtQ5nFv
plitxdQaxxNwX66bhCpqEzzQ8ZRlRE0flL88pZub6VIRz8+OYMyEIenU6x0qneFZ
5cZ1cDtMxPJ1uMmPAihLjJsL4GtrDLQkmF59qk070aYFmBN8QsGAcQpxKtehGydT
RlFYS/zu1cKs3GZKBdbgQyLTlbNRdHS8QjmNMkTfJrmj45MQtXV+U2g27BZKElDN
GGJtFzZ0eRnhd0o=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:40 2025 by rpki-client