Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa
File: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier: p51YofghFqe/P1BWUf3vy05r4fDl5jSux9C8jQxGEcM=
Subject key identifier: BB:03:0C:4B:09:F8:50:D4:CC:8B:12:B0:48:0B:5D:13:2D:3E:77:47
Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
Certificate serial: 02C4
Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa
Signing time: Fri 25 Oct 2024 01:45:23 +0000
ROA not before: Fri 25 Oct 2024 01:45:23 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 132742
IP address blocks: 43.249.76.0/22 maxlen: 24
103.40.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7A69
Validity
Not Before: Oct 25 01:45:23 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671af833-9e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:46:51:68:ac:7c:f6:5b:8e:a3:6e:3d:21:
55:24:24:3c:2b:52:b5:3c:74:fe:3b:71:45:2b:de:
33:7a:c6:24:28:e8:8e:56:d3:fc:65:17:51:53:04:
4f:7f:b8:db:72:49:34:33:8b:1b:7f:19:a8:57:ef:
6d:7f:dd:b6:44:7e:20:b0:ec:f0:cf:26:7b:3b:d6:
34:3d:55:d8:ad:2a:f3:d3:e8:55:fc:6d:20:69:f1:
41:1b:9b:57:83:3f:11:1f:16:ec:ca:77:09:e3:d7:
5a:cf:bd:40:22:0c:ec:e7:1e:67:22:32:e3:05:ad:
18:68:02:2e:da:ea:40:b6:fd:db:4f:5e:74:c0:15:
3e:7e:f2:8f:ef:1d:3f:b2:d2:d7:29:50:3e:b5:23:
6f:87:20:f5:46:e5:a6:5f:e7:ee:3b:ae:fb:4d:35:
cf:54:7c:0b:0c:cc:bc:90:30:56:47:de:9e:56:0f:
c0:06:77:24:8d:48:35:4e:8c:04:7e:21:04:04:82:
02:81:f0:5e:9b:65:76:7b:1d:d5:6a:14:54:9b:d6:
d6:97:a5:05:1d:01:03:e0:86:94:92:a6:4f:97:17:
f6:72:b2:50:85:26:53:84:35:b4:8a:69:28:1f:83:
91:a4:c1:bd:e7:65:1f:45:5f:f9:c7:50:02:12:90:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:03:0C:4B:09:F8:50:D4:CC:8B:12:B0:48:0B:5D:13:2D:3E:77:47
X509v3 Authority Key Identifier:
keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.76.0/22
103.40.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:5f:c4:b0:83:4a:4c:8a:9c:60:0f:bd:ec:a0:da:e1:0f:95:
ad:87:22:c3:78:53:f7:f5:0c:a8:93:98:d2:f3:74:ad:6b:1d:
54:1c:ed:a6:11:22:ed:78:04:d8:c8:7d:46:55:6c:21:14:50:
b0:87:d8:fa:87:4b:d6:12:fa:1c:90:0d:d2:72:da:48:be:e5:
ff:94:18:82:0c:a2:5e:74:8e:33:62:d6:b4:e4:5c:d5:34:e0:
e9:bf:f1:6b:59:da:7b:14:a7:44:77:c6:bd:3d:af:27:01:52:
97:e9:5a:47:a8:2c:0e:85:8f:6c:1e:45:1d:db:48:f6:fd:9c:
06:36:ec:20:8e:30:b8:43:3c:2b:80:bb:97:f2:85:95:13:68:
4e:bc:e2:22:3f:03:48:2f:c0:5f:f9:10:82:f1:02:1c:ad:39:
c0:6a:ab:b5:0b:32:7d:1b:98:09:8f:75:9b:06:68:ae:1e:21:
88:8f:28:bb:2c:af:a4:5e:81:13:a6:fd:f4:19:5d:00:32:49:
42:e4:35:64:f8:dc:b1:79:87:d4:50:13:6c:67:25:ef:d0:0d:
d7:04:ac:91:92:cd:36:d6:49:73:83:0c:23:b4:a5:e9:6b:a7:
01:4c:24:24:11:30:bc:3c:82:83:34:5d:82:aa:3c:36:87:63:
d2:0c:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:18 2025 by rpki-client