Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa
File: BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa (raw, json)
Hash identifier: pspkGPfhH+f5mAliCVv5t4mufNrQX+cYgNKwkWqMa3o=
Subject key identifier: FD:61:16:DA:8C:73:F9:5D:45:DE:DB:2B:EF:7D:12:69:22:E4:F5:B8
Certificate issuer: /CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD
Certificate serial: 0204
Authority key identifier: 94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa
Signing time: Thu 21 Nov 2024 01:55:48 +0000
ROA not before: Thu 21 Nov 2024 01:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132627
IP address blocks: 43.245.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164A50
Validity
Not Before: Nov 21 01:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=673e9324-9302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:01:49:67:44:0b:14:0e:ca:0d:5d:02:50:
4b:e8:47:71:62:ab:af:9e:21:05:a2:c4:d9:60:e0:
6c:2f:d6:d5:92:57:a7:46:98:38:34:a6:ff:31:45:
3c:1f:63:66:da:ed:15:3a:25:8f:92:23:9a:90:22:
4f:3d:23:f3:37:0a:3b:ee:f1:7f:d3:8a:2b:6e:0f:
8b:26:4a:b6:b8:3a:dc:b5:5b:62:9c:a0:af:a4:1a:
33:c5:7b:c5:9a:15:fb:86:ec:e6:f5:da:3c:11:62:
0c:32:a3:ea:b0:7c:81:02:56:30:27:c1:2f:06:8c:
17:43:34:71:d8:cd:0b:a5:d2:f6:bd:e5:f2:d2:f8:
c5:e4:34:18:0b:e5:4f:db:fa:d2:9f:88:76:c1:2d:
74:e9:26:11:24:a9:78:e4:25:9e:0a:db:b4:49:01:
00:ba:92:7e:5a:d1:b9:eb:0c:97:3a:aa:68:0c:63:
e5:14:03:49:03:cf:d0:ab:c9:79:ab:c4:ea:de:b5:
b1:3d:03:bc:f4:d5:64:7b:d0:7f:a5:c0:48:b9:8d:
5f:5f:6c:d1:a0:4f:ef:74:d0:79:94:bc:d0:ef:20:
3a:96:b8:88:62:d5:28:44:02:5a:e5:91:27:d0:ae:
ce:37:b9:64:61:1b:06:8c:04:7c:9e:9d:af:00:86:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:16:DA:8C:73:F9:5D:45:DE:DB:2B:EF:7D:12:69:22:E4:F5:B8
X509v3 Authority Key Identifier:
keyid:94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.224.0/22
Signature Algorithm: sha256WithRSAEncryption
90:55:e0:24:4c:59:3f:dc:2a:26:ff:88:d3:70:2d:cc:d3:67:
f8:7b:89:08:e9:6a:62:6e:71:74:e2:c6:2e:44:ff:ae:b3:c2:
30:eb:b0:15:b7:94:8a:3a:31:bb:bf:ae:bc:2f:c1:eb:03:63:
39:b0:a2:f1:15:67:c7:60:c1:c7:74:e7:df:8d:46:73:e4:16:
69:e1:b4:0e:97:ce:46:ef:fd:82:3e:67:6b:f2:b5:fb:f5:97:
ab:db:d1:59:16:fc:5a:9c:58:ec:e8:bc:fd:50:63:9c:9b:7e:
ce:2c:86:64:d5:5e:fd:52:be:01:20:44:e7:f3:21:b5:b7:2f:
8e:0c:8a:f3:96:a5:53:05:11:bb:b9:7a:4f:2b:bf:ce:77:0e:
d0:51:bf:79:7d:c4:f2:bb:61:e0:2c:64:99:76:cc:98:e6:43:
c5:b7:98:42:84:24:1f:ec:cd:b0:68:0c:97:ed:ef:68:45:94:
6d:b6:1f:62:ff:03:a1:c8:e6:51:40:a0:f0:0a:0f:ea:a3:8d:
77:ea:fd:13:29:29:ca:8c:c5:6d:d1:c5:31:49:f2:05:88:fd:
1e:1b:76:89:a2:1d:99:3f:07:61:c5:b8:9e:90:aa:dc:11:6e:
af:07:11:bb:81:ea:75:42:f9:46:cb:5d:a2:54:9f:84:90:df:
d8:c3:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:29:51 2025 by rpki-client