Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/F29EB2AC055E11F0B9418419C4F9AE02.roa
File: F29EB2AC055E11F0B9418419C4F9AE02.roa (raw, json)
Hash identifier: 9RU3GNF/IBWYFEojBerIMOXRDZt/4Lz98fS5lte5tRw=
Subject key identifier: 91:D3:E5:F8:AB:87:CF:8B:6C:72:00:19:4D:B4:73:2B:57:90:16:B9
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 0122
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/F29EB2AC055E11F0B9418419C4F9AE02.roa
Signing time: Thu 20 Mar 2025 07:43:00 +0000
ROA not before: Thu 20 Mar 2025 07:43:00 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.231.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647
Validity
Not Before: Mar 20 07:43:00 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67dbc704-cb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:d9:0a:44:fb:9c:88:bc:82:16:97:fc:0a:
af:18:be:2a:13:6e:75:58:98:8f:5f:34:c1:6f:aa:
37:53:e8:6c:58:44:c7:e6:8e:95:2d:12:29:52:f8:
3a:46:c0:99:e6:29:2d:4a:dd:28:00:97:b1:db:83:
90:96:0c:00:07:3a:32:99:b8:6c:32:a9:97:91:17:
35:d9:da:e3:58:68:35:f0:4e:86:d2:0c:02:3a:fb:
3d:0a:f8:08:2c:25:aa:e1:bd:54:b9:65:28:aa:f9:
91:cb:fb:b2:d3:e1:dc:b8:a2:31:63:e7:83:2d:b6:
64:f9:e1:f2:d8:7b:7f:db:00:5f:60:0b:bc:cc:f9:
06:d8:86:66:99:d2:a5:da:41:7c:6c:32:27:54:41:
89:1d:b4:9c:c0:f2:a3:27:3b:fe:10:79:02:fc:17:
ee:3a:d3:07:6c:4c:e5:fe:fb:fb:55:8b:02:15:1f:
46:f7:cf:6b:aa:29:56:48:40:1a:46:d2:64:d7:90:
3f:87:7c:b5:e7:a3:f8:50:82:09:6e:22:5d:8c:65:
c2:ef:a4:14:99:14:2d:03:be:de:ba:02:47:86:c2:
eb:7a:e7:ff:aa:6e:1b:c6:c0:31:ad:ce:b6:df:34:
1c:23:6f:0b:e3:60:16:68:92:45:02:cc:84:64:31:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D3:E5:F8:AB:87:CF:8B:6C:72:00:19:4D:B4:73:2B:57:90:16:B9
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/F29EB2AC055E11F0B9418419C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fe:4f:b3:7a:1a:06:fa:ec:c6:8e:a8:a7:d7:e6:69:49:d5:
08:74:ce:e5:57:2e:3b:4a:f6:e6:ce:12:bf:7c:37:61:92:9a:
25:83:14:fa:d2:97:af:34:53:5f:f8:65:6e:da:ea:e3:2c:c4:
ea:25:fd:f0:9d:67:34:cd:ac:5f:ca:58:d9:a0:ae:ac:08:cb:
7c:f1:b4:ff:0e:5e:fe:82:4b:b8:11:3a:57:f9:98:49:30:7d:
c2:c4:04:99:b8:99:d1:4f:05:72:4d:8b:5c:d7:81:5a:d6:d7:
3b:25:2e:ce:31:7f:58:aa:6a:41:f9:c5:d8:e1:85:e4:10:ce:
1c:a7:12:b4:57:de:ae:02:2c:cd:ec:a8:9c:04:2d:1e:20:15:
d3:7a:f2:61:f4:2a:58:97:d8:24:17:61:a8:3c:22:2a:b1:f1:
2b:d2:43:ff:ab:f5:05:0e:b6:51:da:83:75:f9:e0:03:84:1e:
aa:fe:b7:9e:eb:e0:3a:93:2d:ec:c6:e6:0a:11:76:61:18:0e:
9f:32:6e:b7:29:c3:c5:ec:9a:74:7e:12:03:46:61:7e:e1:a9:
06:1c:b1:63:9d:78:21:38:a0:5f:6c:41:07:6a:2e:fe:e4:47:
3a:6f:8c:bf:4d:d1:82:35:89:bd:4e:f7:8f:2b:a5:3f:0b:e5:
8b:57:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:07 2025 by rpki-client