Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa
File: 9DC06B6E36A211E893BF3061C4F9AE02.roa (raw, json)
Hash identifier: hlCAOqdM82iuB3BtNLbjrR+eENtQp+VFzUFQxq5vFhE=
Subject key identifier: 87:5C:88:11:48:C9:A5:1C:FB:F2:AF:A0:4A:6F:32:B2:08:6A:4E:A1
Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197
Certificate serial: 1CCE
Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa
Signing time: Tue 06 Aug 2024 16:33:38 +0000
ROA not before: Tue 06 Aug 2024 16:33:38 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 59374
IP address blocks: 43.255.240.0/22 maxlen: 22
43.255.240.0/24 maxlen: 24
43.255.241.0/24 maxlen: 24
43.255.242.0/24 maxlen: 24
43.255.243.0/24 maxlen: 24
103.233.192.0/22 maxlen: 22
103.233.192.0/24 maxlen: 24
103.233.193.0/24 maxlen: 24
103.233.194.0/24 maxlen: 24
103.233.195.0/24 maxlen: 24
160.238.12.0/22 maxlen: 22
160.238.12.0/24 maxlen: 24
160.238.13.0/24 maxlen: 24
160.238.14.0/24 maxlen: 24
160.238.15.0/24 maxlen: 24
2401:1a80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7374 (0x1cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF095
Validity
Not Before: Aug 6 16:33:38 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b25062-b641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:50:8f:6c:ef:28:11:86:59:60:fe:ad:d6:
a6:4e:51:45:70:e4:b5:b8:a6:f3:f0:c3:ce:be:92:
59:35:d5:e1:0d:71:b8:32:2a:b0:a7:d1:0e:46:4b:
eb:a6:08:40:7b:ff:6e:e4:25:4b:9a:f5:c7:bd:bc:
30:01:19:df:69:f2:49:be:c1:37:7c:8f:59:46:34:
ce:ae:55:b6:a2:cc:c3:d0:2a:ab:4e:43:ec:45:96:
d5:43:e9:4d:35:49:63:ce:1a:65:13:30:52:67:e4:
b9:4e:74:9b:ae:6d:e1:c9:a7:e5:62:da:96:71:64:
c9:86:7e:d7:9f:ae:c8:64:ae:72:07:57:c4:11:93:
fd:f3:59:24:da:82:a8:ef:af:62:db:56:a2:91:7a:
7d:7a:83:fa:74:0b:7c:43:d4:b8:86:d0:8d:02:56:
e2:7d:70:52:9c:b6:7a:95:41:17:d4:7c:e9:85:55:
48:01:d7:b8:15:bf:1a:10:69:03:8d:b0:f0:36:d4:
e7:8e:96:f6:26:f1:29:88:d4:5f:d4:28:fc:34:04:
21:48:9d:8f:64:a9:f9:66:67:5b:c6:bf:51:3a:1d:
22:76:80:09:bd:e1:6e:b0:07:47:57:a6:3e:df:17:
fc:3b:5a:e0:21:82:ed:f9:43:b5:07:75:5a:47:25:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5C:88:11:48:C9:A5:1C:FB:F2:AF:A0:4A:6F:32:B2:08:6A:4E:A1
X509v3 Authority Key Identifier:
keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.240.0/22
103.233.192.0/22
160.238.12.0/22
IPv6:
2401:1a80::/32
Signature Algorithm: sha256WithRSAEncryption
6c:53:f6:91:61:8e:1f:fa:fb:3f:bf:01:a4:b6:f8:54:75:02:
8d:e9:4a:07:3d:bd:b1:57:bb:3e:d8:03:17:7b:35:3b:55:81:
0d:58:3a:64:5d:ee:14:b3:fa:13:c6:88:9a:34:13:54:8c:c6:
0b:2b:4e:87:4e:cc:e0:ef:1f:24:7f:25:64:a2:da:4e:6b:50:
ef:f2:6a:03:fe:44:68:17:fd:af:95:bc:17:28:0f:19:20:12:
ea:33:26:0d:db:8a:e3:93:10:95:92:68:be:3c:9a:57:ad:cd:
ac:c3:ab:59:c0:91:4e:2b:c9:55:f8:95:d6:b8:be:ec:4f:be:
de:fe:38:60:7b:6a:55:82:90:61:87:e6:20:53:09:87:b9:39:
09:05:24:d4:32:be:41:c0:42:77:e3:5d:b2:c3:75:7d:90:9c:
7e:1e:ce:df:6c:06:fb:c5:65:7d:75:56:a8:0d:a6:7f:48:f5:
ad:26:28:48:2d:f8:7e:8b:64:50:41:92:aa:90:93:27:e2:6b:
a6:79:4a:79:22:af:b9:4e:41:7e:45:c4:98:51:76:ac:21:a3:
6b:53:98:3f:66:28:3a:7e:bc:d7:3b:9e:a7:73:a9:2a:9f:96:
5a:25:dd:ff:45:91:6c:f1:35:2f:f9:bb:a9:7c:ea:e4:9e:e9:
31:74:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:24:44 2025 by rpki-client