Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/58B6AFE27E7B11EF861EA867C4F9AE02.roa
File: 58B6AFE27E7B11EF861EA867C4F9AE02.roa (raw, json)
Hash identifier: T4lUfPylRFGX5TKrplWqtsmh+JbtGL3Yru5lHKZhaPk=
Subject key identifier: F3:A9:10:81:C3:CB:08:EA:8C:71:FD:3D:B7:1D:C9:92:9A:BE:C2:8B
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2804
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/58B6AFE27E7B11EF861EA867C4F9AE02.roa
Signing time: Sun 29 Sep 2024 15:56:11 +0000
ROA not before: Sun 29 Sep 2024 15:56:11 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 142270
IP address blocks: 43.250.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10244 (0x2804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9
Validity
Not Before: Sep 29 15:56:11 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66f9789a-2e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:90:a9:ed:31:1e:9f:d4:ec:2c:af:6f:91:
cb:1c:5a:5c:73:36:04:14:5e:c2:90:58:08:db:51:
e3:b0:20:c8:7e:d7:05:06:2d:bc:99:ce:77:62:9b:
62:72:25:17:19:1a:03:24:d1:5a:86:96:11:3a:03:
4c:95:dd:d2:e8:64:4e:5b:b9:a1:40:55:34:09:20:
e6:03:2d:c1:9a:27:1d:c8:76:09:a0:ed:6c:87:b1:
29:f5:97:5a:8c:f7:56:41:f8:b6:7e:9c:e3:1c:62:
3a:94:c8:bb:81:b5:bf:ed:3b:4c:3b:a7:e1:4b:73:
10:86:0a:eb:98:9b:d5:ff:83:bd:21:f3:13:d1:45:
11:f4:11:da:de:3d:0d:f7:be:ff:48:a2:43:60:71:
1e:f3:6e:07:8b:c7:fc:d4:7b:c8:08:53:41:f7:84:
24:3b:39:4f:3d:5b:22:e7:b5:89:9f:b9:0f:e8:64:
6a:ad:73:3f:47:27:41:86:7b:f0:c2:46:df:09:ac:
c8:03:df:6f:02:85:d7:ca:bb:b7:05:9c:ca:ea:5d:
eb:08:52:21:2b:ba:82:f0:a1:25:66:35:04:0f:d4:
f5:b6:c2:26:d7:78:7d:64:da:b7:cb:6b:06:e8:0d:
87:63:fb:02:0d:3d:4d:e5:8e:07:f4:6f:5a:f7:a0:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:10:81:C3:CB:08:EA:8C:71:FD:3D:B7:1D:C9:92:9A:BE:C2:8B
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/58B6AFE27E7B11EF861EA867C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5a:0e:60:df:af:4f:f2:36:9b:97:ba:24:6e:a4:99:b9:fc:
14:0c:6e:80:a9:1e:12:49:a9:b8:c9:e5:24:16:63:4b:b2:63:
cc:3f:75:4f:62:b8:ef:ad:ed:eb:99:d9:b6:69:03:0b:8d:e4:
db:18:4a:11:02:d0:72:be:84:87:b5:8d:39:a2:66:84:d0:b8:
f3:02:d5:87:83:38:c6:bd:e7:5e:d7:13:8e:d8:12:81:0a:7b:
34:aa:17:85:d7:4d:b8:e5:c0:63:ca:78:24:b6:1f:54:69:c5:
f5:1f:03:60:12:f1:4d:99:61:25:41:a7:79:83:5f:a7:25:4b:
44:01:62:d0:e0:af:94:fd:ad:f8:57:11:b4:55:c5:b0:b2:40:
82:95:e9:81:90:cd:6d:a4:26:25:ec:cf:ae:58:f5:4f:ca:9b:
e2:f2:fd:f7:44:79:79:d7:61:75:07:82:25:95:b4:6a:4e:cf:
7d:5d:5c:d9:62:29:d0:a5:7d:6e:ad:73:f3:2a:bb:d3:bf:87:
27:7d:90:53:72:33:26:f6:a2:cb:79:c1:5e:0e:95:17:74:18:
38:27:72:07:7e:8b:43:52:1d:34:f7:89:df:b2:db:9f:64:b6:
44:0e:24:e9:ad:e3:f8:00:2e:15:27:4a:f6:43:0f:d4:f1:21:
8e:de:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:42:40 2025 by rpki-client