Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/69DDDFECA7EE11EF8C6E2652C4F9AE02.roa
File: 69DDDFECA7EE11EF8C6E2652C4F9AE02.roa (raw, json)
Hash identifier: RaJbPCcc9BeQ/XdO6gqfmS1b+mW4ola9vkAinZ4p0X4=
Subject key identifier: 47:77:0D:2E:46:A8:ED:AB:15:CB:FE:7A:77:E2:5C:09:19:B0:1D:CC
Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB
Certificate serial: 016F
Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/69DDDFECA7EE11EF8C6E2652C4F9AE02.roa
Signing time: Thu 21 Nov 2024 09:53:09 +0000
ROA not before: Thu 21 Nov 2024 09:53:09 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 38277
IP address blocks: 43.252.40.0/24 maxlen: 24
43.252.41.0/24 maxlen: 24
103.228.28.0/22 maxlen: 22
103.228.28.0/24 maxlen: 24
103.228.29.0/24 maxlen: 24
103.228.30.0/24 maxlen: 24
103.228.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC017
Validity
Not Before: Nov 21 09:53:09 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=673f0305-8b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:e6:ac:7a:15:3c:ce:67:27:2d:7e:e4:6a:
67:55:05:de:6e:e2:41:e5:fd:97:21:6d:6b:30:d7:
f4:9f:27:22:09:ae:77:e1:7b:89:e5:77:0f:4b:f6:
90:e2:9b:6f:34:da:95:3a:f6:16:8a:d0:e5:be:48:
74:44:72:f6:da:ea:fd:59:b3:79:df:e8:de:f4:5d:
aa:3c:59:21:3b:fb:b7:19:e4:25:6e:a7:57:8b:b8:
3e:7c:28:b2:73:62:2e:9f:05:36:ee:25:0d:b8:20:
0f:81:75:6f:a1:8c:69:d5:ba:0f:75:6a:14:28:d2:
b2:f3:89:fc:bb:79:74:ee:aa:3f:18:4f:4e:d5:b3:
f4:dc:0d:12:6a:eb:52:f7:a9:f7:df:1a:6a:68:26:
a9:b0:11:8d:16:65:82:55:50:cb:6f:60:7f:fc:99:
b7:91:d6:82:a8:b1:9c:f9:0e:13:36:cf:d8:28:a2:
46:57:c6:75:e6:6a:c8:09:b3:04:fc:82:15:fd:56:
a3:51:70:91:b7:66:0b:0e:ad:c5:35:a5:52:03:7b:
2f:b8:74:7f:36:6e:17:03:a7:5e:9d:2d:64:a4:96:
40:e8:17:71:41:4a:2a:fc:68:7d:df:cc:0e:0a:9a:
98:8d:e8:39:5b:3c:ae:7c:39:f4:0a:c3:41:5a:14:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:0D:2E:46:A8:ED:AB:15:CB:FE:7A:77:E2:5C:09:19:B0:1D:CC
X509v3 Authority Key Identifier:
keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/69DDDFECA7EE11EF8C6E2652C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.40.0/23
103.228.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:61:7f:1b:6c:9d:c3:31:35:21:59:d3:d6:2c:e3:39:c7:54:
80:24:37:7d:dd:84:21:a4:7e:84:7e:e3:51:08:02:ba:54:63:
7d:6e:43:7f:08:c2:85:8b:73:04:7b:d4:d5:b5:bd:3c:56:87:
99:70:80:67:28:92:4b:3c:15:94:02:ca:b1:7d:76:38:93:b8:
ca:69:b1:fe:35:af:08:0b:e2:92:26:40:6c:14:c4:30:7f:41:
44:f7:11:86:58:6b:87:e5:af:c5:85:ea:64:e8:05:8c:49:73:
0e:41:05:fd:89:59:74:32:12:ef:8e:3a:ff:6a:0c:e1:d6:95:
a9:03:dc:b7:65:ce:cf:65:84:0b:7c:b4:62:02:39:cd:fd:cb:
b1:fd:a4:21:3c:13:ad:34:b2:7e:4f:a1:83:37:e9:f2:53:bd:
4b:a2:b2:0a:82:cb:1a:4d:32:76:4f:8c:7d:ba:a3:f4:b3:16:
4a:f8:f4:69:d6:dc:27:04:82:df:f9:ee:5c:c3:22:b6:11:e6:
41:f7:76:74:d9:a1:aa:6c:06:ca:35:77:36:61:bf:67:de:28:
b6:c4:cd:93:0c:a2:6b:f4:6f:51:01:d3:c1:de:ba:cf:5b:ca:
2a:d2:c4:f9:8b:73:e8:54:70:ad:f9:48:2c:c9:46:11:9a:d2:
fe:61:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:16:45 2025 by rpki-client