Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/83BD68508E5411EF9626DF3CC4F9AE02.roa
File: 83BD68508E5411EF9626DF3CC4F9AE02.roa (raw, json)
Hash identifier: yYy9sqW+bIg76QGHQOdsCbUROu4kV020oIkec6So/dM=
Subject key identifier: 97:B1:38:28:EB:30:AE:B8:04:91:D6:AE:B0:47:FD:8C:D8:EB:33:E1
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 9A
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/83BD68508E5411EF9626DF3CC4F9AE02.roa
Signing time: Sat 19 Oct 2024 19:58:31 +0000
ROA not before: Sat 19 Oct 2024 19:58:31 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.231.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647
Validity
Not Before: Oct 19 19:58:31 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67140f67-1055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:40:e0:13:4b:83:46:6f:bb:6e:7e:67:53:
d1:63:cd:16:d3:8a:f3:94:91:47:2a:ec:1f:4b:3c:
05:ee:70:66:a2:dd:fb:be:5a:79:97:45:17:02:b4:
09:f7:04:db:2c:22:70:2f:af:d3:53:13:23:1d:dd:
32:ca:97:8b:58:53:41:ef:cc:a4:cc:76:3c:44:eb:
51:c1:f8:26:12:a7:27:45:a0:d2:0a:ac:84:a6:07:
78:c1:73:a7:5d:8b:a3:9a:a9:24:c2:59:bf:b8:b8:
4f:53:72:6c:f9:97:80:17:6e:46:ca:98:f8:48:45:
f8:1e:01:da:67:12:73:45:04:93:46:1b:d5:f3:da:
db:aa:af:b8:6f:30:c5:11:3b:04:54:70:84:11:22:
02:57:42:7f:44:ea:94:24:1e:a7:7f:14:c8:ea:9a:
16:27:22:51:99:f8:c0:8f:a3:89:33:95:2c:02:e1:
6f:a6:25:c6:8b:77:85:ab:70:2c:be:ce:bc:c0:59:
09:ca:8b:20:a9:7d:03:e4:8c:19:db:59:cc:9e:8c:
6c:19:ad:ca:ff:f6:0b:9b:46:2e:d2:66:39:bb:ff:
ce:e9:f4:64:4f:38:06:06:6f:a2:7e:92:83:29:81:
2a:73:8f:91:61:64:c6:2d:4e:89:bb:0d:0e:a8:ec:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B1:38:28:EB:30:AE:B8:04:91:D6:AE:B0:47:FD:8C:D8:EB:33:E1
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/83BD68508E5411EF9626DF3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9a:51:22:f3:a5:4b:99:73:9a:03:5d:c2:d1:91:05:4f:6e:
8d:24:d1:1b:47:95:9e:4d:4e:e1:97:a8:ff:a0:21:dc:45:10:
11:09:9e:5d:60:3f:13:b4:77:13:82:2d:c3:01:c8:ad:fb:d0:
bd:f8:3a:0f:5d:f4:97:c8:f7:1d:e4:79:db:be:c1:4f:98:27:
aa:c9:b7:8d:b9:e8:8c:9a:27:78:93:72:41:c9:5e:da:79:ef:
21:f7:4d:3e:15:20:7b:7a:ea:ce:36:cc:97:f6:52:fe:5b:f4:
67:f9:5c:c6:f7:c1:dd:3f:06:ea:48:86:a7:bf:5d:29:65:17:
28:82:f6:a0:ac:30:7f:61:25:00:18:ae:8c:39:0d:13:f8:67:
1b:f5:1b:43:74:25:d0:dd:ed:f4:e3:99:37:20:c1:0d:7f:bb:
21:33:96:19:8d:e4:43:eb:52:ab:e1:2f:0e:4d:3c:e5:68:32:
6e:f7:3f:78:9c:25:4f:43:b1:f7:a2:b4:c8:a0:4b:cb:5a:3a:
e2:aa:db:b4:8e:32:4a:dc:eb:b2:d2:2f:de:42:fa:f1:f5:11:
7c:4a:58:7d:ff:98:26:4c:8b:14:2a:08:30:1e:ae:70:8a:4d:
24:80:14:24:87:5f:16:5b:87:b4:99:be:85:ce:ae:19:13:f8:
60:00:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:02:21 2025 by rpki-client