Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/778A639A719D11EF8A4CDC2EC4F9AE02.roa
File: 778A639A719D11EF8A4CDC2EC4F9AE02.roa (raw, json)
Hash identifier: SZQOfzGQkA8Kz+u60QESOwSzOtXYtu3rX84R+rSGlvA=
Subject key identifier: 7F:11:88:75:86:2E:B8:04:4B:A6:37:C4:0D:1F:BE:9C:A1:6B:08:6F
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 7D
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/778A639A719D11EF8A4CDC2EC4F9AE02.roa
Signing time: Fri 13 Sep 2024 06:57:40 +0000
ROA not before: Fri 13 Sep 2024 06:57:40 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.231.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647
Validity
Not Before: Sep 13 06:57:40 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66e3e264-71b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:7d:5c:3d:a0:8d:b6:08:b1:76:3e:98:96:
de:a9:ed:52:5b:cd:15:a7:a6:43:cd:05:ee:4e:e2:
a8:1c:c0:a1:32:31:e9:99:95:87:77:5e:fc:0f:e6:
0e:4c:f6:1d:ac:3b:14:0e:4a:4b:39:77:b8:95:cb:
8f:38:ec:2a:f1:14:c4:03:e3:d4:96:2c:1a:72:20:
2d:18:46:d2:ef:bf:d6:c7:70:6a:9e:96:8b:64:a7:
ec:7b:52:14:63:43:3e:ba:2a:30:79:49:3e:16:6a:
c5:3d:70:b1:b1:9e:7d:57:f1:0c:8b:1c:87:56:3c:
72:57:e8:3d:42:fd:ab:d3:d3:e9:14:86:a3:15:95:
ab:da:a4:ee:b0:4e:08:b6:0b:69:d3:e4:72:d6:71:
a8:8f:98:1e:e1:81:a3:19:a4:f3:38:4e:46:e8:a0:
3c:12:c8:94:96:5e:18:57:9c:29:e0:44:25:fb:fb:
47:93:48:73:61:6a:96:90:2c:c1:66:75:66:06:81:
e1:af:e6:4c:54:25:02:c3:3a:43:67:9c:a1:7e:c7:
2c:ad:1e:19:3b:b0:74:ab:9d:11:ce:21:63:a6:e3:
dc:24:30:6d:91:a2:5c:04:9b:9a:7e:e1:0c:0f:4b:
b3:fa:bf:80:79:c7:fa:12:5f:7d:36:13:8b:d8:cf:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:88:75:86:2E:B8:04:4B:A6:37:C4:0D:1F:BE:9C:A1:6B:08:6F
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/778A639A719D11EF8A4CDC2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.205.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c9:20:e4:0e:36:29:80:15:52:a0:3c:dc:e6:a2:50:21:0b:
10:ee:e6:47:21:09:68:e7:2e:28:3a:d1:0c:1c:6d:c5:0b:56:
97:27:78:3e:b4:ea:b3:6e:1b:0d:18:db:ee:f9:f9:42:b4:3a:
76:27:47:f4:29:57:9b:5c:5d:c6:d9:82:f0:c6:8c:60:c4:09:
d5:b4:32:bb:13:2f:1c:87:0f:5c:2d:11:b0:05:17:d9:c2:2e:
52:5f:e0:26:ff:26:c0:dd:bd:bb:97:47:6f:33:06:3f:c2:d8:
e2:ee:62:5f:0f:5b:22:f0:2e:5b:56:c6:1a:e0:e6:d0:fa:27:
6c:79:bd:a7:4b:0e:9c:ac:66:73:6b:5b:23:82:15:ac:cd:36:
82:a2:c3:4b:27:c9:10:b6:b9:00:6c:81:f2:6f:3e:ed:35:b3:
74:42:12:80:20:6e:93:d7:18:8e:52:91:40:b5:35:dd:1b:73:
a6:bc:1e:f7:49:e4:c7:9b:49:2c:0d:4f:fa:12:0c:0e:d7:2c:
c5:1c:6c:c1:7e:f1:7b:6f:ff:2e:2d:e0:fb:74:44:9f:9e:5c:
d9:27:0b:89:08:8c:b8:06:73:0c:63:0b:a7:a4:17:4f:cf:d9:
b6:7c:d2:c0:c0:1c:de:08:b5:02:2d:64:62:e7:c6:30:fc:d4:
f8:66:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:15:22 2025 by rpki-client