Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/1FE14D26C0DE11EFABA0764CC4F9AE02.roa
File: 1FE14D26C0DE11EFABA0764CC4F9AE02.roa (raw, json)
Hash identifier: lv71/hPc+SdyJJ+Qsj0ZA++03lOcEBdgSqlqqbWS7Ac=
Subject key identifier: C3:D0:2E:A8:5F:81:81:FC:CE:96:EF:BD:D2:E6:AA:87:7F:4C:AB:19
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2853
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/1FE14D26C0DE11EFABA0764CC4F9AE02.roa
Signing time: Mon 06 Jan 2025 15:42:18 +0000
ROA not before: Mon 06 Jan 2025 15:42:18 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 214760
IP address blocks: 43.250.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10323 (0x2853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9
Validity
Not Before: Jan 6 15:42:18 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677bf9da-b799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:07:e6:b5:0f:b4:77:de:26:a0:be:5e:8f:6b:
6a:72:a5:c4:9a:ff:d0:2f:0e:d1:c5:e5:3c:f8:08:
50:ff:b3:03:4b:d8:66:77:2f:8e:e2:27:13:8a:18:
48:70:ae:90:e4:cb:12:fa:e6:77:6b:cb:0c:f4:2f:
42:d2:f4:87:b1:95:20:d9:1f:41:fc:99:20:a2:31:
4b:ec:2f:3c:d0:51:b8:2b:90:39:33:26:9e:6d:54:
9e:c6:0f:6c:a9:0f:b9:6d:8c:d7:57:69:7d:c6:18:
e0:49:eb:6a:47:06:a5:7c:d7:4c:4f:18:ee:8c:05:
aa:ee:46:73:0c:24:8e:3d:60:d3:eb:0b:94:99:03:
1c:82:75:df:86:88:2a:90:80:3e:92:9f:d0:b0:9a:
3d:ea:44:6e:c2:76:81:ea:6c:00:55:b6:09:27:eb:
2e:ba:de:11:20:8f:e4:48:c3:2e:5d:5d:6a:81:61:
99:da:31:e9:c3:de:39:f5:54:89:84:50:8d:15:91:
d3:8f:9f:0b:62:79:30:ac:85:f0:81:46:6f:47:47:
98:f1:2c:df:d5:59:ed:d1:3b:b6:70:7b:eb:3a:09:
14:51:e5:41:6d:db:c6:35:b2:72:1f:e2:f6:38:21:
89:fe:48:e4:6a:02:f3:d3:5d:a4:ad:8b:71:86:b5:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D0:2E:A8:5F:81:81:FC:CE:96:EF:BD:D2:E6:AA:87:7F:4C:AB:19
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/1FE14D26C0DE11EFABA0764CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.125.0/24
Signature Algorithm: sha256WithRSAEncryption
95:cc:89:2c:d9:f9:3b:60:b3:10:f2:19:89:dc:36:27:82:45:
58:a6:f5:bf:d2:f9:73:0f:d5:95:24:19:25:b3:0c:9b:2e:aa:
3a:1c:a0:a5:4f:4c:ad:30:30:f4:95:1c:5d:21:71:a3:21:e8:
a1:63:8c:2f:9f:c3:63:d9:be:2c:84:08:38:82:37:17:b5:e5:
37:ce:90:a4:cb:b7:3a:eb:79:73:77:bf:aa:1d:e6:4d:d0:f6:
50:9c:49:d5:95:90:b9:24:0d:fa:7c:e4:79:0b:23:b2:a9:0c:
ff:96:d6:3a:6b:bc:ff:74:cf:fb:81:74:4e:d8:1d:6a:e4:48:
0f:8c:a1:68:de:cf:c0:30:ea:79:5e:48:c7:04:95:ef:b1:b7:
7c:b9:3a:5d:1e:f5:5b:a9:14:31:3d:8d:49:7f:b1:63:9b:aa:
0e:09:95:0d:3a:48:30:78:fa:de:bb:97:f4:44:8e:1a:8e:c9:
fd:a8:97:d3:b2:a9:5d:1c:a8:12:e2:81:07:79:ed:34:12:cf:
06:6e:85:31:9c:86:a4:a9:6c:fd:3b:00:4d:c0:a3:84:cb:63:
69:ea:32:38:2e:14:66:b8:de:7d:69:5d:dd:f6:0c:de:90:8d:
df:4d:45:c3:cd:3d:c1:78:6f:b8:44:0a:a7:27:ea:cf:b5:c0:
1f:38:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:45:15 2025 by rpki-client