Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/192418F6AA1811EA97BC574CC4F9AE02.roa
File: 192418F6AA1811EA97BC574CC4F9AE02.roa (raw, json)
Hash identifier: 4Dc1oS3vBOdBKhpzJ5GcqMibvt3dJikIqEqGVS8Tn9g=
Subject key identifier: B5:DB:1C:F0:76:56:66:CC:59:B1:7D:38:27:3C:08:38:B3:32:F2:90
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1E71
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/192418F6AA1811EA97BC574CC4F9AE02.roa
Signing time: Wed 18 Dec 2024 16:43:39 +0000
ROA not before: Wed 18 Dec 2024 16:43:39 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 24429
IP address blocks: 43.91.0.0/16 maxlen: 24
2404:2280:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7793 (0x1e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198
Validity
Not Before: Dec 18 16:43:39 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6762fbbb-0f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:76:f2:d3:24:f1:4f:e9:78:7e:dc:71:58:
76:c7:27:a3:8c:c6:f6:07:4e:5c:93:2d:eb:a2:f4:
6a:07:30:0d:01:45:25:ad:7a:8a:53:0c:19:1f:27:
71:da:eb:d4:0e:4c:2e:00:c8:aa:c1:2c:d1:b0:80:
9d:93:82:83:02:53:ec:54:df:ae:d0:b6:74:ce:1b:
5e:52:d4:bf:af:80:12:21:90:63:63:da:8e:06:b2:
68:89:8b:8b:7a:8c:7d:25:84:8c:06:b5:f6:cf:a8:
61:a7:da:23:f6:19:fa:57:42:12:89:29:2c:ab:95:
7f:ca:2b:ec:ce:5d:bd:9a:9c:98:48:8a:e4:44:91:
25:4a:90:69:bf:11:f4:13:7f:a4:9e:bc:b6:5e:1f:
cc:51:d7:3c:7c:72:38:73:4c:55:a8:73:ea:38:a4:
ec:01:b7:9e:a2:4c:48:69:1e:fb:e7:03:d8:6f:f8:
49:dc:92:84:be:58:6b:df:4a:ab:75:95:53:bb:b6:
72:fd:be:eb:d0:43:fd:5d:37:dc:b1:76:4e:10:6d:
8f:b0:21:84:9a:6e:f1:0b:c5:1e:9c:54:db:0f:72:
cc:d8:43:0f:80:74:70:46:b4:c8:bf:9d:67:56:34:
78:14:0f:e3:fd:44:8f:08:29:92:e2:23:43:e2:a0:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:1C:F0:76:56:66:CC:59:B1:7D:38:27:3C:08:38:B3:32:F2:90
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/192418F6AA1811EA97BC574CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.91.0.0/16
IPv6:
2404:2280:100::/40
Signature Algorithm: sha256WithRSAEncryption
64:75:3a:48:62:27:b9:51:35:ca:ac:26:b2:5a:1b:dc:a6:1d:
1b:e7:00:6d:44:cb:c5:4e:8b:76:c1:33:63:29:04:fe:f6:0c:
24:b0:98:e7:99:4a:0c:c9:3e:63:ba:f6:00:d8:aa:23:e0:a4:
0b:80:ba:3f:37:92:2b:f3:9b:b0:6b:12:65:42:a5:5c:44:7c:
c3:a8:05:91:14:56:7d:56:9d:64:ac:1a:76:80:f0:44:20:91:
bf:cc:53:3e:e4:b5:6e:07:ff:70:1e:04:a5:19:87:f2:de:06:
cc:91:49:a2:93:44:1c:96:9c:77:f0:a4:3d:d8:95:bc:7e:e7:
32:9a:66:0c:9b:04:79:bb:80:e2:60:72:38:f7:a7:cf:e8:f0:
e9:1a:be:1c:a2:76:38:b7:01:3e:6c:b9:00:5e:59:17:bb:27:
13:d4:d7:01:b2:34:ba:36:2b:eb:b9:03:61:91:0c:38:e6:ab:
63:dd:2b:86:8b:45:70:33:e3:df:e9:2d:a6:85:6d:1e:b3:fe:
7b:24:5c:bb:7a:38:ae:04:ab:cc:f0:6b:ce:ec:a7:95:8b:5b:
7d:a6:b8:bc:04:d2:1f:8e:36:75:97:6a:11:d6:81:05:a6:b0:
1f:a9:4f:05:7c:08:da:19:aa:0e:18:64:70:10:2c:08:46:5c:
9e:03:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:09:19 2025 by rpki-client