Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa
File: 1B2129BEA89C11EFB7509755C4F9AE02.roa (raw, json)
Hash identifier: /vpSWryezgfmh7uLcv4slqDui8iJtG2ruMNhN0QZXtc=
Subject key identifier: 0E:61:2D:2E:41:11:E7:BB:A1:E5:9F:1F:85:53:B3:6D:88:09:95:8A
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 0341
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa
Signing time: Fri 22 Nov 2024 06:36:30 +0000
ROA not before: Fri 22 Nov 2024 06:36:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134972
IP address blocks: 43.243.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 833 (0x341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: Nov 22 06:36:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6740266d-70bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:9a:8d:91:91:0c:cf:50:04:d3:9b:36:f0:
de:63:24:b8:cb:3f:84:dc:3b:ca:7a:82:a0:34:e3:
74:fa:c8:cf:52:61:24:cd:6d:4b:e7:5c:cb:42:2c:
52:d0:a8:cb:80:cb:71:5b:e8:49:24:a9:36:de:48:
2f:c9:ee:7e:5e:0d:f8:ce:75:d8:d7:db:20:d8:c2:
b5:36:62:3d:87:44:2b:08:66:35:4d:9c:f9:d3:d1:
f4:2c:2c:1c:51:a1:90:b2:bd:5c:48:a8:2c:a7:66:
cc:a6:ca:a5:27:e0:d9:ff:ba:17:a8:20:01:97:89:
5a:a9:e8:e4:e3:ec:df:7f:19:a6:98:db:f7:32:9f:
b7:73:a9:49:31:70:97:d9:2a:79:ed:15:58:a6:80:
b5:94:49:e1:06:ff:a7:16:98:15:a8:ef:2b:73:1c:
d5:2b:54:fa:bb:de:ee:84:5b:03:11:d2:a5:60:3d:
ed:9b:ae:3e:62:5d:41:73:98:d2:b2:44:c4:05:ce:
c3:59:53:b5:c3:5b:40:26:03:86:82:c5:3a:d9:4b:
5f:54:7d:44:90:0c:43:b5:3b:a5:b8:78:31:fc:36:
d1:57:a0:4d:15:1d:15:c4:d7:6a:40:28:e7:e2:c9:
5c:3a:09:cc:be:14:31:fa:1b:a3:40:a7:ce:fb:3b:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:2D:2E:41:11:E7:BB:A1:E5:9F:1F:85:53:B3:6D:88:09:95:8A
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a1:10:13:08:f9:70:75:59:d4:54:3a:ea:da:6f:4b:7f:95:
11:c2:c9:61:d5:7a:2f:b0:57:f3:56:24:6f:c3:e7:9f:b9:e3:
55:98:ef:8d:ba:40:1d:c0:87:bd:8c:bd:ed:17:0c:14:98:b5:
e0:64:7e:b2:d4:b1:76:04:80:78:8d:fb:e1:eb:aa:f1:75:ca:
19:95:08:0d:ff:e4:27:a1:3b:c6:44:34:1b:71:39:13:9c:ee:
49:32:b1:21:cb:99:f5:45:27:08:c3:43:e1:12:9c:60:06:0d:
75:50:7e:08:f1:ed:b8:fe:10:87:2a:f8:df:45:95:5a:ef:ed:
6c:05:90:dd:97:bc:3e:2c:d2:d5:e7:0d:7d:5e:fb:57:c2:dd:
3d:ab:05:ec:e0:c2:d3:10:7c:5b:70:bd:49:a4:17:8e:63:ef:
b2:77:ab:31:84:14:cb:30:2e:42:40:a3:65:a8:72:f3:61:5c:
0d:ac:ac:43:21:76:dd:b6:65:b2:aa:e4:dd:6f:eb:61:ae:bb:
a6:3c:e7:c0:6c:05:0c:85:f8:95:8b:15:71:13:c9:b7:0f:f0:
47:f7:d7:0a:89:a9:16:08:01:c1:0b:cd:79:82:a5:c9:7c:ef:
66:ef:6e:15:13:78:e2:21:63:71:39:eb:c1:38:2f:c3:ba:88:
e8:8e:e9:ad
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4
RjEzRTQxNzIwHhcNMjQxMTIyMDYzNjMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQwMjY2ZC03MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6eajZGRDM9QBNObNvDeYyS4yz+E3DvKeoKgNON0+sjPUmEkzW1L51zLQixS
0KjLgMtxW+hJJKk23kgvye5+Xg34znXY19sg2MK1NmI9h0QrCGY1TZz509H0LCwc
UaGQsr1cSKgsp2bMpsqlJ+DZ/7oXqCABl4laqejk4+zffxmmmNv3Mp+3c6lJMXCX
2Sp57RVYpoC1lEnhBv+nFpgVqO8rcxzVK1T6u97uhFsDEdKlYD3tm64+Yl1Bc5jS
skTEBc7DWVO1w1tAJgOGgsU62UtfVH1EkAxDtTuluHgx/DbRV6BNFR0VxNdqQCjn
4slcOgnMvhQx+hujQKfO+zsXUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA5hLS5B
Eee7oeWfH4VTs22ICZWKMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw
NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvMUIyMTI5QkVB
ODlDMTFFRkI3NTA5NzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr88AwDQYJKoZIhvcNAQELBQADggEBAFmhEBMI+XB1WdRU
Ourab0t/lRHCyWHVei+wV/NWJG/D55+541WY7426QB3Ah72Mve0XDBSYteBkfrLU
sXYEgHiN++HrqvF1yhmVCA3/5CehO8ZENBtxOROc7kkysSHLmfVFJwjDQ+ESnGAG
DXVQfgjx7bj+EIcq+N9FlVrv7WwFkN2XvD4s0tXnDX1e+1fC3T2rBezgwtMQfFtw
vUmkF45j77J3qzGEFMswLkJAo2WocvNhXA2srEMhdt22ZbKq5N1v62Guu6Y858Bs
BQyF+JWLFXETybcP8Ef31wqJqRYIAcELzXmCpcl872bvbhUTeOIhY3E568E4L8O6
iOiO6a0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:46:18 2025 by rpki-client