Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E44BAA2B14411EF99AC2222C4F9AE02.roa
File: 0E44BAA2B14411EF99AC2222C4F9AE02.roa (raw, json)
Hash identifier: PfkiV+8DDbLvESCFhgKY0cAN7Rgvog232QTLKUBTYJg=
Subject key identifier: EE:95:7E:70:32:B4:12:71:1D:34:3F:FA:78:06:9B:92:D6:E3:BF:E8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9FCB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E44BAA2B14411EF99AC2222C4F9AE02.roa
Signing time: Fri 20 Dec 2024 10:29:40 +0000
ROA not before: Fri 20 Dec 2024 10:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136716
IP address blocks: 43.227.128.0/22 maxlen: 24
103.46.232.0/22 maxlen: 24
103.49.52.0/22 maxlen: 24
103.80.12.0/22 maxlen: 24
2403:75c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40907 (0x9fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 20 10:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67654713-0de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:43:4c:e6:5a:67:a8:c3:2a:ae:13:71:76:
12:06:51:f9:4f:5c:61:96:e4:3e:9d:ac:d6:68:9e:
9d:75:82:da:71:f2:c3:0a:89:d9:37:fb:53:d9:ad:
28:2a:a4:02:e5:fc:c7:a8:2d:06:5a:b3:26:4e:9e:
b6:b3:79:74:98:bf:c2:fa:e6:49:69:fd:6a:d4:92:
ae:8c:e9:7b:80:13:5d:96:5c:59:f9:ba:49:93:d5:
1a:59:f2:71:74:a1:02:ed:de:66:26:89:4b:5c:ea:
6d:21:43:a8:34:59:e5:1a:f6:c4:38:e6:37:98:c5:
bc:85:ad:de:cd:6a:b6:19:c0:ac:c0:08:13:8e:35:
26:5b:1f:91:a6:8f:19:70:16:d5:20:00:ea:b1:20:
d9:f1:b3:c4:59:09:e6:cd:ed:60:83:e2:31:d9:4b:
d5:01:a0:a2:de:1b:c4:a3:fc:03:62:7a:80:1d:e4:
32:df:84:a5:09:98:3e:6d:39:0e:b1:88:10:3b:3d:
d9:bb:fc:ec:6f:a7:b1:01:2f:e9:2a:54:1a:29:c7:
f5:04:e9:c7:be:3f:c4:62:e7:da:60:0e:17:29:16:
04:b2:99:73:92:43:d9:56:2e:81:22:a9:64:ee:b9:
d1:4e:a1:08:e4:0d:32:d4:1e:93:ed:ff:24:c0:66:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:7E:70:32:B4:12:71:1D:34:3F:FA:78:06:9B:92:D6:E3:BF:E8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E44BAA2B14411EF99AC2222C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.128.0/22
103.46.232.0/22
103.49.52.0/22
103.80.12.0/22
IPv6:
2403:75c0::/32
Signature Algorithm: sha256WithRSAEncryption
38:ad:04:45:5a:d6:69:d4:e2:8c:80:a3:d3:91:35:5e:dd:75:
4e:63:3d:ac:bf:f6:7b:cd:11:31:ba:e2:21:8a:9d:4f:23:f3:
23:50:a2:cd:25:3b:04:68:32:89:83:12:7c:8f:97:62:8c:cd:
ff:8b:19:75:cc:6c:3c:4f:53:e9:96:d2:c0:af:f8:af:59:71:
91:f8:18:d3:b7:42:d9:e7:27:ba:18:68:04:cc:f7:15:9c:f8:
3b:28:9b:b1:a1:6c:0b:73:79:a5:b5:28:63:5a:b0:94:5c:40:
ac:e7:87:28:1d:3d:79:3c:6d:fe:0e:21:9f:df:ef:a5:fb:90:
f4:18:db:ab:6c:12:d4:7e:fa:c2:1e:ef:c6:91:da:3b:bf:02:
88:90:4b:2c:55:91:fa:7f:02:f5:31:c0:a7:2d:9d:49:b4:56:
59:4d:bc:9f:d7:84:fa:1f:5b:67:65:3d:8e:b6:73:30:39:bb:
08:0c:72:be:b1:c1:eb:bc:72:b9:07:e4:34:32:63:ab:e3:9f:
54:93:3f:38:2c:49:1c:f5:6b:c8:f8:36:b7:31:3d:80:4d:5b:
d8:ad:59:f8:78:7d:86:bb:61:8a:aa:15:13:1b:4e:2d:a2:de:
fa:99:82:f7:2b:c1:3a:a9:f4:65:66:ce:5c:08:03:d2:dd:f0:
21:9f:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:15 2025 by rpki-client