Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/4BAAD5A2AD6611EF909A883AC4F9AE02.roa
File: 4BAAD5A2AD6611EF909A883AC4F9AE02.roa (raw, json)
Hash identifier: T1LdVgMRiXfn+ah0zwQZcKFU+3rSIhPyrtzieGgQ18E=
Subject key identifier: 43:3C:C4:9E:98:88:D2:02:C3:2A:8D:88:83:97:3D:33:08:20:30:5E
Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB
Certificate serial: 017B
Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/4BAAD5A2AD6611EF909A883AC4F9AE02.roa
Signing time: Wed 04 Dec 2024 01:16:21 +0000
ROA not before: Wed 04 Dec 2024 01:16:21 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 38277
IP address blocks: 43.252.40.0/24 maxlen: 24
43.252.41.0/24 maxlen: 24
43.252.42.0/24 maxlen: 24
45.121.20.0/24 maxlen: 24
45.121.21.0/24 maxlen: 24
45.121.22.0/24 maxlen: 24
45.121.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC017
Validity
Not Before: Dec 4 01:16:21 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=674fad65-9745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:19:8d:c9:75:2d:22:b0:fc:19:a7:14:f1:f9:
22:73:e1:1b:d3:cc:43:e9:6a:8b:43:b7:c4:67:dd:
97:b6:de:77:28:66:d1:cc:33:d7:91:d3:85:35:d1:
4f:85:8e:ab:6e:3e:43:e1:0a:cd:13:fd:65:d4:bf:
6f:fd:5f:2c:b2:61:f5:53:be:db:c6:55:3d:61:d7:
23:70:2d:6a:3a:b3:4f:3b:02:c3:94:db:45:25:6c:
79:59:ee:1f:a2:d2:3c:c5:65:98:12:be:94:88:ba:
b5:bb:02:90:d2:cc:f3:c4:48:90:3d:03:5f:fa:3e:
ce:f4:15:74:77:cc:37:fd:6b:1f:1a:ed:00:f4:9b:
06:e2:2e:53:03:aa:d0:d7:99:04:60:60:a7:0d:c3:
c5:79:c8:54:ae:b5:aa:a2:0c:d1:5b:50:f3:8f:f4:
39:2a:73:90:e0:82:1f:cc:f1:16:68:d1:4e:bf:bf:
ac:be:f5:64:e2:28:ad:b9:26:e4:5b:6a:56:ff:6a:
3e:18:1d:eb:02:f8:f2:64:9c:10:3e:43:a8:6c:6c:
97:dc:ce:b0:51:02:96:93:3a:4b:f1:aa:16:57:06:
75:d2:eb:87:69:5f:71:81:f1:22:8a:9c:f3:f9:08:
d9:d4:f3:f0:39:79:c9:61:ca:20:5f:a6:99:63:bf:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:C4:9E:98:88:D2:02:C3:2A:8D:88:83:97:3D:33:08:20:30:5E
X509v3 Authority Key Identifier:
keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/4BAAD5A2AD6611EF909A883AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.40.0-43.252.42.255
45.121.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:99:35:84:1e:a9:96:0f:c6:5d:b3:51:a8:b2:83:94:d4:dd:
27:77:b7:16:3a:2d:58:09:26:90:eb:1d:8e:19:65:79:9f:4d:
b0:d1:b5:ab:d6:92:d7:f9:64:8a:01:85:bf:c1:53:30:b8:4d:
e7:ea:6e:da:f3:fe:3c:c6:04:00:4c:c4:11:ac:d7:4b:0b:ab:
57:75:dc:92:73:0a:7f:86:cb:ac:0b:c9:76:ba:9b:8f:02:40:
f9:0a:81:54:fc:fe:63:bb:ca:6d:c0:1b:17:82:3f:2d:07:d1:
2a:92:01:8c:fb:b5:a2:ea:3d:38:62:de:18:8b:ab:34:fb:41:
44:d3:8e:73:b5:d9:9a:cb:6a:7c:a1:80:d2:7c:f3:e2:a3:a3:
8a:c8:c5:c3:ff:33:8f:2e:ed:8e:8c:59:4e:f0:72:f1:51:60:
be:cb:98:bd:82:df:fc:b2:96:95:cf:06:19:6f:07:4f:9c:5d:
c7:5b:4c:13:24:42:93:db:1d:86:4c:a5:b9:a9:50:a8:6c:82:
9b:ff:53:9d:52:df:b0:e5:5c:84:f1:51:11:60:45:69:4f:29:
50:00:93:20:94:9e:96:a6:0f:e8:1c:f7:1d:d7:6d:29:48:cb:
29:ed:0a:57:f2:bd:6c:22:93:c4:54:e8:1d:0a:59:df:b0:9a:
1a:20:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:55:35 2025 by rpki-client