Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa
File: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (raw, json)
Hash identifier: 7Gmx6aG6mVa6tW4ZmRdx25+Dm056uxm4nK4BIHzJbm8=
Subject key identifier: A4:56:0D:9D:6C:46:F3:7D:D8:9F:F2:2F:DE:DA:9F:A8:C9:5B:E3:C2
Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
Certificate serial: 02D6
Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa
Signing time: Fri 29 Nov 2024 01:14:55 +0000
ROA not before: Fri 29 Nov 2024 01:14:55 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 132742
IP address blocks: 43.250.188.0/22 maxlen: 24
103.42.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191B71
Validity
Not Before: Nov 29 01:14:55 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6749158f-596d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:93:b2:c7:0d:2c:18:a4:10:78:09:90:bf:
d8:0e:24:94:a1:92:95:46:b6:1b:cd:73:38:eb:61:
ac:4f:ec:11:20:71:73:31:6a:fc:9f:3d:b1:be:f4:
ea:ad:0b:e0:68:50:d4:dd:ff:96:15:38:c0:b5:bb:
ec:2a:14:38:7f:fe:4e:bf:f6:31:c4:1f:a2:8a:f8:
30:a0:2f:c2:bf:15:ab:7e:bc:f5:e0:86:25:2d:71:
b1:e2:85:ff:77:60:7e:64:fc:27:ee:39:b1:ed:9d:
0d:0d:e1:52:b8:70:f8:2f:13:f0:8a:78:bb:26:32:
d9:c7:3e:a2:9e:a2:7f:00:1b:87:70:4e:bf:55:91:
f0:94:3c:dd:40:7d:98:2b:49:c4:cb:ac:a2:5a:02:
f7:5a:08:5b:f2:20:3f:a5:4c:63:44:b4:14:90:51:
3b:5f:fa:4f:4a:51:29:8c:03:01:34:84:05:68:88:
05:51:2a:b8:53:f5:1d:f1:5b:33:6d:f6:41:f6:d2:
e1:9f:b0:5e:cc:54:50:21:cc:f2:ea:c2:15:a8:e3:
81:d2:01:a4:38:0d:4e:94:4e:1a:40:18:10:90:62:
55:cc:50:f6:c0:83:81:91:8f:7e:eb:c7:ff:45:78:
08:9a:1d:cb:61:0c:0f:86:d9:12:89:e8:ce:8c:e9:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:56:0D:9D:6C:46:F3:7D:D8:9F:F2:2F:DE:DA:9F:A8:C9:5B:E3:C2
X509v3 Authority Key Identifier:
keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.188.0/22
103.42.36.0/22
Signature Algorithm: sha256WithRSAEncryption
28:2d:5d:70:7d:db:56:21:c1:26:b0:29:0c:7a:1c:ef:47:72:
55:ef:cb:65:3b:67:d7:45:5c:e5:b6:9d:3c:7b:07:6a:49:15:
f6:1f:22:89:3d:d9:d6:63:0b:93:20:d8:95:9b:74:94:fb:11:
d7:93:22:fb:af:38:9a:a2:10:77:f0:41:3a:df:90:eb:b5:cb:
9e:c0:81:38:25:89:99:fc:bf:42:d6:a0:bb:da:2e:2f:2b:43:
ba:0b:7e:9e:fb:95:90:6c:08:7d:af:64:91:f7:e9:ed:b8:f3:
b6:24:22:5d:26:4f:5d:17:3e:61:3c:fa:e6:2c:f0:18:92:9c:
40:be:5b:6e:bc:a2:a8:2e:82:7d:9b:a5:3a:66:e6:5a:65:7c:
9f:b6:92:46:aa:47:47:bd:fa:cd:3b:b6:d8:94:03:87:21:09:
30:65:7c:27:bb:f7:98:74:4c:97:1f:be:55:2b:f9:53:30:ff:
47:a3:cb:62:49:e3:38:c5:d7:0a:ee:1a:36:e1:3d:6f:5a:b3:
df:76:05:ed:35:f8:6f:f6:b2:65:2a:51:ef:a5:a4:14:b9:4b:
1a:29:43:99:94:e4:2f:e1:22:42:90:09:98:72:0e:98:bd:c7:
08:27:3e:46:49:d4:7e:dc:0b:d3:0c:2c:17:01:62:b3:f9:fb:
07:11:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:17 2025 by rpki-client