Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/BBA4C79EAD7C11EF9D55E74AC4F9AE02.roa
File: BBA4C79EAD7C11EF9D55E74AC4F9AE02.roa (raw, json)
Hash identifier: YUjL49LEbyjYhubtfibcF3kNo66bgOQe8EnNxiangzs=
Subject key identifier: 5C:1E:CD:D4:22:40:AD:E9:B9:B5:20:BF:58:54:46:CD:85:AF:FE:FD
Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial: 1DB7
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/BBA4C79EAD7C11EF9D55E74AC4F9AE02.roa
Signing time: Thu 28 Nov 2024 11:46:00 +0000
ROA not before: Thu 28 Nov 2024 11:46:00 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58424
IP address blocks: 43.255.112.0/22 maxlen: 24
103.5.124.0/22 maxlen: 24
103.206.200.0/22 maxlen: 24
116.214.24.0/23 maxlen: 23
116.214.30.0/23 maxlen: 24
2407:8180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7607 (0x1db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC
Validity
Not Before: Nov 28 11:46:00 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=674857f8-5911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:a0:16:54:c9:45:02:63:1e:a8:44:d3:6d:
c8:d0:d6:25:d6:23:de:ce:38:77:dc:ef:f6:28:67:
cb:f6:95:d7:7f:9f:e7:e6:8f:60:c2:7d:fe:fe:c3:
f5:18:d2:b7:59:e5:4e:b0:11:c1:67:ad:a2:17:62:
e0:11:e9:85:98:77:e0:33:c2:f8:50:27:da:9b:8b:
a4:b8:61:c6:2b:d1:1b:de:9b:13:8d:5f:58:81:7a:
a0:c1:16:b3:f5:b5:74:ad:c8:50:f7:d3:84:68:fa:
d7:23:f1:8b:51:9f:34:ca:71:94:f0:cd:d1:63:50:
56:3d:91:57:5f:8e:e6:ec:8f:61:62:3d:28:13:0f:
76:49:84:ad:ca:bd:cc:ac:dd:99:3a:ca:80:d0:c8:
c4:32:2d:eb:09:98:7b:6c:c0:9f:85:ac:f6:20:24:
35:02:d9:fc:a6:53:47:1b:6f:93:29:63:77:18:8f:
f6:ac:35:0a:4a:5c:82:eb:49:dd:35:e9:52:5b:aa:
99:6a:e4:a3:d0:17:28:4e:61:a5:1d:c8:fb:45:c4:
e4:1e:4b:ef:ee:36:ea:dd:20:17:41:65:fa:83:8a:
a1:18:cf:91:37:b5:5f:82:1e:ce:e1:c7:97:3d:3f:
aa:13:5f:93:4f:56:32:38:d3:2b:8e:2f:f6:69:a4:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:CD:D4:22:40:AD:E9:B9:B5:20:BF:58:54:46:CD:85:AF:FE:FD
X509v3 Authority Key Identifier:
keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/BBA4C79EAD7C11EF9D55E74AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.112.0/22
103.5.124.0/22
103.206.200.0/22
116.214.24.0/23
116.214.30.0/23
IPv6:
2407:8180::/32
Signature Algorithm: sha256WithRSAEncryption
30:a7:91:2c:80:26:00:ed:35:50:dd:da:3a:2b:22:d4:1a:09:
c8:0d:bf:64:2b:d6:37:67:ad:c7:2b:d6:a1:a0:f8:82:5d:9c:
bd:cd:4e:1f:a8:b0:27:1c:f2:9b:63:a5:9e:1b:98:55:8d:ee:
1e:5b:21:a1:fb:8f:42:95:15:65:f6:d5:3b:dc:e7:a4:9a:52:
c8:38:01:e7:54:78:4a:e3:04:a1:7b:e8:69:6c:ca:bb:75:eb:
49:df:b1:6d:22:2a:cc:94:eb:f2:2f:26:67:67:00:69:44:d7:
90:52:09:c4:97:96:fd:0a:fc:2c:7d:ee:c7:82:31:ff:6d:a4:
34:ca:7a:e1:92:d6:98:8f:36:49:fd:0d:1d:2e:2d:42:2b:70:
af:a0:5c:e7:c4:81:de:bd:9e:34:12:18:2f:9a:89:39:58:cf:
00:43:63:e9:95:d6:1f:1b:89:a9:ab:4b:47:39:b6:98:18:c0:
03:0d:c4:00:22:71:a3:c6:16:6b:a7:94:2a:c1:ff:35:d0:86:
66:26:ee:ff:93:48:41:52:aa:2b:2a:03:aa:e3:6b:55:2b:26:
e1:90:d8:26:41:52:dd:34:1b:00:68:f4:72:1b:73:e6:b8:8b:
74:9b:e1:48:ad:9b:43:97:a2:34:bc:c3:6d:20:fd:27:22:de:
b7:25:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:15 2025 by rpki-client