Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa
File: 643961CCB39811EBBD3F524CC4F9AE02.roa (raw, json)
Hash identifier: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=
Subject key identifier: F6:93:9C:CB:D2:C4:F5:68:78:BD:62:11:1F:E9:DF:89:7A:34:7C:FB
Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial: 068F
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa
Signing time: Wed 26 Mar 2025 22:33:22 +0000
ROA not before: Wed 26 Mar 2025 22:33:22 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 4785
IP address blocks: 45.251.240.0/24 maxlen: 24
45.251.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43D7
Validity
Not Before: Mar 26 22:33:22 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e480b1-f52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:26:99:35:70:ce:af:f4:98:2b:af:0a:05:
89:73:eb:b0:6c:1f:0e:af:3c:51:89:55:5f:fe:4e:
1b:f7:41:8e:71:28:21:f5:d1:b1:f2:48:ae:01:8a:
6c:7e:a4:46:d9:4c:ee:2c:38:2c:55:7a:83:55:09:
8a:8a:45:11:3a:51:07:7f:41:4b:a7:04:d2:cb:4a:
f7:4f:ba:1f:ad:b8:82:8f:95:9c:1f:9c:26:0f:1f:
32:c7:97:b7:03:f5:7f:90:7b:fb:c4:dd:b8:0d:5a:
23:60:15:92:f1:4c:d8:55:ea:eb:0d:a4:8e:cd:78:
5b:94:90:85:6f:83:83:bc:68:f4:3f:00:11:df:ac:
ef:e9:2a:79:1d:40:58:03:03:d2:17:65:2a:2b:4c:
f7:dd:e9:1e:c2:30:4b:f9:8b:ca:c8:71:79:c5:61:
db:4c:a8:f8:1f:0a:db:80:5f:19:f9:ce:80:1b:9c:
45:c3:39:30:e2:31:bd:50:50:04:22:b8:d4:f4:75:
66:2d:40:1e:3b:08:b7:25:12:6a:62:12:26:03:6b:
d9:b0:bb:82:55:43:7e:eb:40:1f:e9:e9:cf:5e:4f:
39:cd:88:3f:7c:c5:df:a6:18:79:ad:c6:d2:59:45:
df:b4:71:53:6d:56:84:c4:c0:a1:d9:08:6f:26:f2:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:9C:CB:D2:C4:F5:68:78:BD:62:11:1F:E9:DF:89:7A:34:7C:FB
X509v3 Authority Key Identifier:
keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.251.240.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:45:83:89:76:54:cb:7b:4e:4b:d3:ae:75:f3:5d:ac:d0:67:
44:60:07:56:3e:8f:6d:59:33:a9:a7:96:c2:e4:cb:05:e7:72:
15:6e:1f:80:e0:fd:4d:98:b2:10:e9:e5:e5:b2:0e:3b:cd:17:
b0:60:ad:54:98:47:2a:89:50:43:9d:fd:b7:66:16:d9:bd:25:
e1:67:02:fe:46:9b:63:a2:ab:8c:68:2e:8e:cb:b9:c7:8f:02:
ef:39:e1:b3:79:7f:be:4d:6b:ec:04:c1:41:cc:60:e1:84:da:
b3:c5:29:d8:05:fa:7e:ef:37:b8:67:67:d6:af:73:d8:68:e2:
65:82:8f:1e:24:71:73:7e:cb:63:5c:22:58:07:30:ae:30:31:
bb:09:be:d6:e4:f3:5f:8f:c1:f1:90:65:cf:7a:eb:ad:da:fb:
b5:94:3d:b8:08:f7:dd:30:5d:1a:21:b6:54:48:ed:53:f5:13:
ba:a3:bf:c9:ae:b4:be:d6:4d:43:32:78:05:e3:0e:3b:d9:c4:
df:88:68:97:5c:cd:7c:4c:b9:a6:55:65:a4:3c:f3:44:7d:1b:
38:8b:3c:11:d0:95:6f:75:58:03:52:a3:19:e2:da:5f:9c:4a:
3d:07:8a:ad:c3:b5:00:bb:2f:55:dd:73:5d:d5:55:f1:05:e6:
a4:43:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:32:44 2025 by rpki-client