Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/313D676CC0DE11EFB07C954CC4F9AE02.roa
File: 313D676CC0DE11EFB07C954CC4F9AE02.roa (raw, json)
Hash identifier: K1lxhDpacxKdc14B0FvDeadhs8Vven5kmYsXDaArlNs=
Subject key identifier: CB:E5:E8:02:D4:B0:98:CE:AB:01:9E:7D:C3:9A:1F:CB:EB:9E:D4:52
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2855
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/313D676CC0DE11EFB07C954CC4F9AE02.roa
Signing time: Mon 06 Jan 2025 15:42:20 +0000
ROA not before: Mon 06 Jan 2025 15:42:20 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 58349
IP address blocks: 43.250.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10325 (0x2855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9
Validity
Not Before: Jan 6 15:42:20 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677bf9dc-7365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:ad:8b:94:13:d9:e8:8b:ec:f0:a4:fe:99:
a1:9f:c7:d8:f4:1a:6d:ec:a7:c0:b1:f2:c5:82:f8:
56:51:67:5f:f2:59:3e:94:16:37:a1:c7:5e:a1:28:
41:02:a4:47:30:fe:9b:66:4d:8e:b1:ce:07:4d:23:
cf:f1:7d:06:ce:7f:b0:96:61:cd:19:83:af:de:25:
5e:4c:eb:c2:8b:b5:72:59:18:1e:94:c2:9d:af:52:
41:cc:d3:2e:16:0e:00:09:18:64:78:c5:ff:b4:82:
0b:eb:b9:01:1f:54:97:60:b0:82:94:70:c2:be:11:
c5:ed:f1:ec:25:04:c7:8b:3d:ae:df:9a:8d:49:29:
f6:7a:ae:59:64:cb:7e:48:59:32:b6:33:8d:9f:72:
82:1d:71:58:d6:a3:30:58:c3:4d:88:12:43:35:08:
91:ec:61:9c:91:f5:aa:89:c7:89:15:6f:3a:e3:00:
15:18:49:9a:c3:f2:b4:35:f4:75:fe:11:ec:ed:3c:
94:46:32:d3:43:d2:3c:0c:ca:37:8a:ad:0c:fb:14:
b2:a0:e6:3b:61:8f:09:d0:fa:56:6f:63:aa:c4:72:
27:98:0b:48:cc:b4:6a:ad:ec:0f:a0:84:ba:4b:0a:
db:b4:f4:7d:ea:51:e6:99:0b:5a:22:cb:26:03:ad:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:E8:02:D4:B0:98:CE:AB:01:9E:7D:C3:9A:1F:CB:EB:9E:D4:52
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/313D676CC0DE11EFB07C954CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.126.0/24
Signature Algorithm: sha256WithRSAEncryption
53:99:66:dc:51:95:92:47:a2:ac:20:6f:7e:2f:5e:be:40:00:
f2:a0:2d:38:02:e1:ed:3e:05:df:f6:83:e8:69:3f:a5:e9:9c:
95:6e:18:0c:d6:48:d0:bc:fa:c3:9a:fe:3f:d5:86:0a:c5:be:
91:68:60:63:22:1d:7e:f0:3d:f0:94:39:dd:2b:aa:77:27:3b:
9d:85:e4:c5:0c:ce:84:5d:92:d5:94:fa:69:39:51:55:22:6e:
37:68:3c:20:0a:90:82:51:0b:11:e9:d9:cf:d0:3b:d4:cc:80:
14:24:b6:f6:5b:c0:05:47:99:7e:7c:a4:ff:b8:35:bf:8b:0e:
ad:fe:35:2d:7d:59:57:ca:09:75:0a:62:b7:fe:57:cd:85:66:
28:06:a6:ff:e9:3c:b7:9a:0c:62:01:04:85:36:f5:7f:4f:ee:
eb:ff:2f:b5:f4:58:ab:3d:45:bb:7b:39:6a:a8:14:dd:40:75:
49:e5:c7:da:a2:73:fd:0e:f2:85:64:a9:f4:ef:eb:7f:85:45:
59:72:6b:68:c2:4b:67:3c:3e:ac:94:15:28:21:ee:ee:85:2a:
fb:bc:fd:d5:24:05:18:dc:8c:9a:f7:79:4d:32:ca:c4:30:83:
79:ee:c3:d5:c0:90:79:4a:b7:7a:a0:72:7c:af:a0:5b:4f:de:
1a:d9:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:43:45 2025 by rpki-client