Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa
File: DA45147EB35E11EE8EED0E37C4F9AE02.roa (raw, json)
Hash identifier: MLem2RJrmzD72xixiKpCd0XFlZ6/VicCf/qXTlSWENc=
Subject key identifier: 04:3A:E5:F2:8E:82:AF:FE:D8:56:C3:19:BC:B9:BA:97:3D:CA:81:B9
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 0685
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa
Signing time: Mon 02 Dec 2024 22:31:52 +0000
ROA not before: Mon 02 Dec 2024 22:31:52 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133073
IP address blocks: 43.251.118.0/24 maxlen: 24
43.251.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04
Validity
Not Before: Dec 2 22:31:52 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674e3558-9289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:51:9a:79:60:d9:4b:05:33:52:bb:05:5a:
15:2e:66:a5:76:83:05:55:a3:e2:aa:0b:5f:69:f2:
a2:df:3d:3e:b3:9e:2e:39:a7:02:c9:f8:16:85:59:
f0:6a:a5:9a:0c:2b:a8:b3:9b:d1:1f:eb:ef:33:6b:
9d:25:62:93:c0:d5:81:a9:2c:4f:ff:05:c7:ee:df:
ee:4a:a0:24:25:39:8f:cd:3d:90:0a:6d:8d:2d:48:
e6:56:ef:17:6d:24:b2:cc:1e:77:ae:27:10:72:19:
76:e6:ff:a4:42:3d:90:c1:99:b1:90:e4:ba:dc:85:
c7:85:3b:3e:cb:f6:b9:9c:b2:9b:a1:26:bb:b9:b1:
de:1c:2d:4d:80:b7:7a:fb:da:cb:e1:46:61:ef:89:
29:a2:0c:cb:f5:8b:33:65:48:4c:62:04:6f:9f:82:
f6:95:57:d8:de:c2:9e:7c:f2:f4:85:b9:7e:a7:9c:
9f:24:cb:7e:3f:58:5e:0e:24:57:51:ff:7f:00:bf:
1b:d3:3d:ce:a6:8f:34:8c:c8:58:4a:85:c5:42:22:
90:34:ed:42:bd:1e:50:44:fe:1c:c1:1d:71:0f:d3:
3e:ab:ba:66:be:8c:9d:68:87:a0:9d:34:99:da:ca:
46:aa:b4:73:ff:7c:63:e7:3c:1a:8c:c9:9c:8a:1d:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:E5:F2:8E:82:AF:FE:D8:56:C3:19:BC:B9:BA:97:3D:CA:81:B9
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.118.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:90:5d:2d:35:91:82:22:ae:d2:0f:a5:64:a9:86:f2:5a:cb:
7d:34:c5:5b:b5:fa:0b:85:ee:33:d8:e2:80:9f:f8:09:e3:84:
e1:aa:c4:e2:5d:b8:a0:3e:ec:bf:40:b0:62:24:96:39:30:88:
ca:5b:50:3c:63:74:50:f5:ef:42:43:09:48:b6:de:7c:0f:a8:
2d:fd:b2:7f:55:c9:05:e4:4b:f2:09:16:40:c6:67:4e:38:ae:
03:e9:6d:ea:33:82:c0:15:83:06:dd:9b:03:d2:5f:f6:6a:0e:
5b:c2:df:8c:4f:80:00:77:1c:30:cb:19:d6:d3:83:3e:e6:b3:
03:fa:b9:38:af:a8:00:c5:2c:5a:ca:00:db:86:de:64:06:e9:
b0:05:c3:d7:25:c5:be:29:6c:d8:35:73:a3:4d:35:10:b2:cf:
bd:a6:07:5f:99:fb:47:3d:94:c9:59:08:b5:65:30:09:5a:e4:
53:c8:21:d2:90:92:9b:6c:2c:da:68:80:2e:ee:25:f9:f9:4f:
d1:2b:98:ac:c5:c8:a0:0e:95:96:c1:09:a0:26:a5:c9:fd:3f:
b4:5d:0b:3a:13:b1:cb:f4:a6:03:b9:d1:f1:46:c2:4e:f9:97:
0f:8b:74:9f:c9:f6:87:da:ff:7d:34:22:a7:16:d8:32:24:13:
de:b3:f3:76
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz
MzJEQTQzQ0IwHhcNMjQxMjAyMjIzMTUyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRlMzU1OC05Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzQFRmnlg2UsFM1K7BVoVLmaldoMFVaPiqgtfafKi3z0+s54uOacCyfgWhVnw
aqWaDCuos5vRH+vvM2udJWKTwNWBqSxP/wXH7t/uSqAkJTmPzT2QCm2NLUjmVu8X
bSSyzB53ricQchl25v+kQj2QwZmxkOS63IXHhTs+y/a5nLKboSa7ubHeHC1NgLd6
+9rL4UZh74kpogzL9YszZUhMYgRvn4L2lVfY3sKefPL0hbl+p5yfJMt+P1heDiRX
Uf9/AL8b0z3Opo80jMhYSoXFQiKQNO1CvR5QRP4cwR1xD9M+q7pmvoydaIegnTSZ
2spGqrRz/3xj5zwajMmcih0AJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAQ65fKO
gq/+2FbDGby5upc9yoG5MB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG
QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvREE0NTE0N0VC
MzVFMTFFRThFRUQwRTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEr+3YwDQYJKoZIhvcNAQELBQADggEBAKKQXS01kYIirtIP
pWSphvJay300xVu1+guF7jPY4oCf+AnjhOGqxOJduKA+7L9AsGIkljkwiMpbUDxj
dFD170JDCUi23nwPqC39sn9VyQXkS/IJFkDGZ044rgPpbeozgsAVgwbdmwPSX/Zq
DlvC34xPgAB3HDDLGdbTgz7mswP6uTivqADFLFrKANuG3mQG6bAFw9clxb4pbNg1
c6NNNRCyz72mB1+Z+0c9lMlZCLVlMAla5FPIIdKQkptsLNpogC7uJfn5T9ErmKzF
yKAOlZbBCaAmpcn9P7RdCzoTscv0pgO50fFGwk75lw+LdJ/J9ofa/300IqcW2DIk
E96z83Y=
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:26:39 2025 by rpki-client