Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/9BBF30ECD27611ECBAA59232C4F9AE02.roa
File: 9BBF30ECD27611ECBAA59232C4F9AE02.roa (raw, json)
Hash identifier: wO3Wck7J4efPh0Ov+FlLS04uEvxdoPiR+YIpK0Aw64s=
Subject key identifier: EB:D3:2A:34:9D:35:1D:2D:23:03:30:4E:1F:0E:A7:76:A7:64:E6:BF
Certificate issuer: /CN=A9176EE7/serialNumber=ADA93FAD1EB015CDE249718F82352783DCBDF894
Certificate serial: 01FF
Authority key identifier: AD:A9:3F:AD:1E:B0:15:CD:E2:49:71:8F:82:35:27:83:DC:BD:F8:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rak_rR6wFc3iSXGPgjUng9y9-JQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/9BBF30ECD27611ECBAA59232C4F9AE02.roa
Signing time: Thu 07 Dec 2023 03:34:15 +0000
ROA not before: Thu 07 Dec 2023 03:34:15 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 133199
IP address blocks: 43.225.44.0/24 maxlen: 24
43.225.45.0/24 maxlen: 24
43.225.46.0/24 maxlen: 24
43.225.47.0/24 maxlen: 24
103.44.28.0/24 maxlen: 24
103.44.29.0/24 maxlen: 24
103.44.30.0/24 maxlen: 24
103.44.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176EE7/serialNumber=ADA93FAD1EB015CDE249718F82352783DCBDF894
Validity
Not Before: Dec 7 03:34:15 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65713d37-bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:35:08:ec:e9:35:3a:a4:9b:80:07:6c:90:
63:0b:10:82:c6:1d:9d:f4:e9:99:75:04:1e:f9:a4:
5a:9c:45:8d:1f:ee:82:c0:97:25:fa:2b:4b:1e:cf:
1b:4d:33:23:95:9e:1b:69:66:71:6d:46:d0:61:10:
ec:95:e6:9b:70:4f:41:70:b2:28:f9:d1:b7:fe:24:
1b:66:4f:3d:09:b5:44:01:f9:a2:87:7d:d5:8c:d6:
91:17:b7:ae:81:65:8a:8f:34:c7:53:d0:43:4d:cd:
e0:a7:8e:06:56:a5:91:32:d4:aa:15:ee:a2:00:7b:
64:44:ba:97:81:6a:26:71:69:7e:2c:51:17:fb:82:
89:75:2d:04:72:81:d7:af:67:88:90:0d:bd:64:96:
52:2b:06:49:cf:bd:c8:71:64:a7:e6:ad:7e:7c:0f:
9e:e9:59:43:cb:b8:32:2f:73:61:f4:0e:5f:c4:8f:
7f:3f:4f:41:1c:f2:8a:f1:05:6b:eb:4d:4b:ff:4d:
cd:b7:85:a7:13:2e:e7:ba:6f:ab:92:cb:28:4a:11:
b7:17:81:25:ea:f3:09:8c:5e:74:5f:57:c5:89:75:
8f:b7:62:3a:3a:1a:30:dd:f6:16:4d:75:f1:25:7e:
7a:3b:1d:5f:93:d1:3e:84:5c:f3:05:2d:33:ef:f1:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:2A:34:9D:35:1D:2D:23:03:30:4E:1F:0E:A7:76:A7:64:E6:BF
X509v3 Authority Key Identifier:
keyid:AD:A9:3F:AD:1E:B0:15:CD:E2:49:71:8F:82:35:27:83:DC:BD:F8:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/rak_rR6wFc3iSXGPgjUng9y9-JQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rak_rR6wFc3iSXGPgjUng9y9-JQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/9BBF30ECD27611ECBAA59232C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.44.0/22
103.44.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:7c:ca:21:c8:a1:2a:88:38:9a:11:1c:d8:c5:2d:6a:b6:57:
37:17:93:c2:db:1f:dd:69:5c:6b:80:bf:35:c3:76:e0:6d:4a:
00:3a:64:77:15:b0:af:2c:1a:c0:d2:7d:0d:b8:7d:55:68:29:
46:10:6c:2b:c4:20:85:cc:46:f3:f7:1b:e2:ce:0d:65:63:f1:
c7:54:48:13:06:cf:a7:46:df:f1:5b:b0:2d:04:10:73:09:0b:
40:f9:35:61:51:36:50:97:b2:1b:b4:1f:25:86:7c:77:d2:5a:
26:39:79:0b:75:df:00:52:d0:29:21:2d:31:c5:03:06:92:1d:
cf:c5:6f:d8:c7:45:a7:03:8a:67:fe:b6:d9:9a:91:2e:c9:f7:
b7:15:9d:9d:90:6c:9a:70:4d:af:4e:87:7d:32:b6:7a:59:6b:
23:5d:1a:29:b9:3d:cf:e5:19:59:ff:16:30:80:93:e3:4a:5e:
eb:0a:58:70:ef:bd:b8:77:39:41:d2:cf:a6:8e:2c:36:56:89:
36:d6:b8:cd:3d:5d:c0:50:c4:f7:6f:2f:e1:ff:c6:16:0b:c7:
f1:07:af:82:7b:69:bf:4a:37:ec:47:45:6c:1a:ed:6e:d2:d8:
98:09:f0:82:45:74:b4:28:48:02:3a:94:87:16:e5:27:1d:02:
9c:2c:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org