Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/76F9153EDF1111EF9AC67D47C4F9AE02.roa
File: 76F9153EDF1111EF9AC67D47C4F9AE02.roa (raw, json)
Hash identifier: jqnnuD18/CoOv1rqt4VqMKkqYPzTHB3e2rOZ7ZhYrNU=
Subject key identifier: 54:8B:B6:58:1D:F4:BA:07:2F:BA:C0:F1:FF:D9:8A:D8:D4:4A:6D:1A
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: E3
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/76F9153EDF1111EF9AC67D47C4F9AE02.roa
Signing time: Thu 30 Jan 2025 13:52:37 +0000
ROA not before: Thu 30 Jan 2025 13:52:37 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.231.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647
Validity
Not Before: Jan 30 13:52:37 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=679b8425-735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:2f:21:ac:d2:51:a9:39:e6:95:a7:e8:9f:
24:43:d4:22:04:7c:33:96:0a:f8:c8:f5:66:6d:70:
88:e7:fe:48:26:5f:bd:ae:c4:9a:8d:22:71:c3:cc:
02:95:e4:9f:6f:fd:b9:c9:ca:26:05:a1:1d:40:3b:
9c:9c:2c:21:61:38:4f:e2:fc:c2:f8:6f:43:fa:33:
e1:10:41:7f:f7:44:16:a2:52:a9:81:0a:2c:70:e8:
5d:ab:2f:74:3e:ba:e3:6b:c3:4a:07:a3:d8:65:96:
52:8b:76:c0:8d:01:38:81:62:f8:2d:b9:11:f3:93:
d4:d7:14:9a:d8:95:0a:fc:a6:4f:93:2f:6b:e0:79:
86:99:1c:f0:85:30:92:59:de:28:c4:dc:10:e7:3e:
06:87:3a:f4:53:fa:48:a3:59:4c:83:8f:7c:e8:0f:
c8:04:5b:ee:78:7b:ae:1c:5e:56:b5:23:13:8a:df:
bf:09:95:5e:8b:96:20:13:da:a0:ff:8b:28:2e:9e:
71:13:a5:55:c1:42:68:ae:24:ee:e1:2d:1c:5b:35:
70:f2:4d:b6:c6:56:49:f4:49:73:e8:5d:8c:61:d2:
77:ad:18:62:6a:85:ec:41:62:49:bc:04:c5:54:1e:
93:39:57:94:b6:8b:69:47:46:7f:ad:a7:f7:16:01:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:B6:58:1D:F4:BA:07:2F:BA:C0:F1:FF:D9:8A:D8:D4:4A:6D:1A
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/76F9153EDF1111EF9AC67D47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b1:b4:fa:76:cb:9c:bb:10:f4:7d:b1:87:87:3f:e9:42:3c:
14:34:8a:75:ef:26:0f:4a:6c:48:93:ad:7b:24:6d:5f:85:f7:
16:4d:92:41:32:f9:4f:78:a2:ce:44:b5:2c:6f:64:ad:96:93:
d4:63:4e:fc:d5:2b:8a:fb:e0:e5:df:99:b4:3c:37:17:0f:c8:
7b:e0:5d:c6:86:ca:8e:2e:4c:96:5d:ae:5a:55:f9:d7:5c:52:
04:db:83:01:97:56:d4:a5:2e:2a:5b:a9:6f:e4:47:8a:b5:d7:
b5:84:fe:e6:0d:2a:0e:76:33:50:63:01:87:88:c7:a3:b5:c3:
9e:25:50:67:ed:33:1f:1e:64:ee:08:59:d7:8c:6b:da:ef:40:
59:be:5b:6c:5a:14:18:57:52:0e:4b:4c:1a:98:28:bf:59:ab:
24:7b:44:1a:01:71:b3:2c:71:ad:91:f5:41:3e:ff:27:aa:6d:
a0:45:49:f5:ac:5d:52:a9:e1:b9:6c:ab:f9:13:7d:a4:47:be:
3e:16:8a:33:a8:54:cd:c3:8b:6d:78:3d:93:0f:06:2b:bc:32:
09:c3:12:da:91:c8:5b:eb:3e:69:ed:5c:d4:81:db:f0:1f:94:
ae:a2:d4:ed:5e:d1:75:ca:96:b3:18:08:8e:09:03:81:0f:1b:
7c:cd:79:b5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw
MEQ3ODhCRkIwHhcNMjUwMTMwMTM1MjM3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzliODQyNS03MzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5UYvIazSUak55pWn6J8kQ9QiBHwzlgr4yPVmbXCI5/5IJl+9rsSajSJxw8wC
leSfb/25ycomBaEdQDucnCwhYThP4vzC+G9D+jPhEEF/90QWolKpgQoscOhdqy90
Prrja8NKB6PYZZZSi3bAjQE4gWL4LbkR85PU1xSa2JUK/KZPky9r4HmGmRzwhTCS
Wd4oxNwQ5z4Ghzr0U/pIo1lMg4986A/IBFvueHuuHF5WtSMTit+/CZVei5YgE9qg
/4soLp5xE6VVwUJoriTu4S0cWzVw8k22xlZJ9Elz6F2MYdJ3rRhiaoXsQWJJvATF
VB6TOVeUtotpR0Z/raf3FgHlcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFSLtlgd
9LoHL7rA8f/ZitjUSm0aMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz
NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvNzZGOTE1M0VE
RjExMTFFRjlBQzY3RDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr588wDQYJKoZIhvcNAQELBQADggEBAICxtPp2y5y7EPR9
sYeHP+lCPBQ0inXvJg9KbEiTrXskbV+F9xZNkkEy+U94os5EtSxvZK2Wk9RjTvzV
K4r74OXfmbQ8NxcPyHvgXcaGyo4uTJZdrlpV+ddcUgTbgwGXVtSlLipbqW/kR4q1
17WE/uYNKg52M1BjAYeIx6O1w54lUGftMx8eZO4IWdeMa9rvQFm+W2xaFBhXUg5L
TBqYKL9ZqyR7RBoBcbMsca2R9UE+/yeqbaBFSfWsXVKp4blsq/kTfaRHvj4WijOo
VM3Di214PZMPBiu8MgnDEtqRyFvrPmntXNSB2/AflK6i1O1e0XXKlrMYCI4JA4EP
G3zNebU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:46 2025 by rpki-client