Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa
File: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (raw, json)
Hash identifier: EY5IebdCRceAV1N2Sno2htu2PUjjGh0mWkvzE1zUnnE=
Subject key identifier: B1:8D:8F:3C:FF:10:A4:03:8B:3E:24:A8:70:DB:68:10:D2:07:01:7B
Certificate issuer: /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial: 08C6
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa
Signing time: Thu 16 Jan 2025 20:19:44 +0000
ROA not before: Thu 16 Jan 2025 20:19:44 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138663
IP address blocks: 43.239.204.0/24 maxlen: 24
43.239.205.0/24 maxlen: 24
103.106.6.0/23 maxlen: 24
103.117.164.0/23 maxlen: 24
203.78.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246 (0x8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD0A4
Validity
Not Before: Jan 16 20:19:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678969e0-6a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:d0:aa:fa:d1:2e:1f:1e:50:05:02:1e:07:
a4:ff:28:ff:92:89:17:c8:a6:2e:e4:0c:c7:5f:11:
37:24:aa:cb:55:94:23:0d:91:e7:5d:75:b8:fb:44:
91:f2:08:ce:91:dc:6b:9d:03:d6:69:35:76:8c:45:
1b:99:4d:56:ab:4c:38:df:5e:2b:c6:aa:4c:25:63:
94:e2:e1:74:99:26:25:6c:d8:81:6c:1c:d4:66:63:
f0:12:6a:8a:d0:fe:44:8b:9c:99:aa:a9:5c:0a:f5:
ed:fe:ff:d9:c2:1b:13:48:e6:9a:9a:7c:de:eb:03:
67:f1:cf:31:c5:3e:13:f5:72:4c:c4:ad:77:1c:99:
ea:c0:e1:af:44:7b:a0:97:fc:e9:ef:ea:1d:dd:1a:
d5:6e:fe:a8:89:55:55:14:cb:35:c0:1d:bc:42:2c:
0b:28:28:e7:93:93:6d:69:d9:3c:e2:f3:71:49:27:
4d:dd:1e:a1:63:2f:86:0b:20:3e:b3:6d:b1:18:d3:
8f:0d:a9:f3:19:49:b6:1c:8d:43:20:6a:b6:81:d0:
62:2a:91:25:e5:95:67:0d:e0:3b:9e:ce:67:99:3c:
60:e4:94:b7:87:95:94:f2:0d:af:69:5b:19:bd:63:
f8:1c:d3:4e:90:d5:8f:f8:93:50:2c:ba:41:07:0c:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:8F:3C:FF:10:A4:03:8B:3E:24:A8:70:DB:68:10:D2:07:01:7B
X509v3 Authority Key Identifier:
keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.204.0/23
103.106.6.0/23
103.117.164.0/23
203.78.162.0/24
Signature Algorithm: sha256WithRSAEncryption
88:26:d8:cb:9d:0a:6f:52:9b:4f:66:a6:01:fc:8a:0e:96:32:
e4:e7:d9:85:be:f7:79:26:23:4a:0d:36:73:9f:81:d8:f0:8a:
de:8a:a0:1e:49:ce:d4:53:da:cb:7c:f2:2b:c0:32:d8:02:4a:
1e:bf:c7:74:47:53:9b:56:8e:d8:f6:a4:af:66:bf:56:c0:29:
87:0e:2e:64:49:66:aa:89:a0:8f:39:0d:b4:dd:bf:d5:9d:f1:
e8:5d:63:85:37:ec:c9:cc:e7:02:53:3a:58:0f:39:7e:02:c2:
3b:72:f3:02:c0:79:ef:8b:ec:ec:59:db:cf:af:c0:d5:44:e6:
19:9d:38:56:23:d2:14:5a:3a:f5:ac:65:97:08:b0:68:65:26:
f6:a9:b1:ec:18:85:eb:4a:b0:d6:78:7f:7a:05:47:7b:d5:18:
f1:aa:08:5b:5b:20:a8:9e:6e:2d:83:3b:2f:eb:eb:80:a0:cb:
fe:35:1d:7d:52:2a:b7:20:61:c2:d6:69:05:e7:1f:f3:36:f5:
65:21:0a:f4:d1:5a:e9:71:9f:56:ae:59:bf:da:81:91:6c:95:
e4:47:70:05:ab:97:87:51:28:0d:54:84:28:9f:b9:90:4c:60:
3f:8b:41:e3:6e:b7:93:b8:88:54:7a:7e:52:9b:6a:23:2a:b3:
a9:dd:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:37:35 2025 by rpki-client