Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa
File: BEF172F4BD1311EDAB02753EC4F9AE02.roa (raw, json)
Hash identifier: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A=
Subject key identifier: 2A:3D:21:20:B7:AF:94:14:80:80:47:56:F3:34:6A:5A:05:11:6C:57
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 041B
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa
Signing time: Sat 15 Mar 2025 00:45:50 +0000
ROA not before: Sat 15 Mar 2025 00:45:50 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 11161
IP address blocks: 2400:8a20:130::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1
Validity
Not Before: Mar 15 00:45:50 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67d4cdbd-849b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:a1:47:71:6f:d2:ce:9b:24:d0:f9:27:67:
77:fb:18:00:10:a6:fb:47:72:8d:c5:92:42:f0:0a:
a2:80:5e:87:d5:9e:7a:05:e8:5c:0c:2b:0a:81:41:
c1:a4:57:8b:06:ea:09:53:cb:1d:f2:b6:a0:57:41:
22:cd:ac:bb:d3:bf:6a:60:df:5a:98:bb:ab:b2:8f:
57:5a:53:61:96:01:d5:8c:cc:f4:5d:f3:92:39:22:
dd:e0:b9:7c:15:c1:36:38:86:f3:b7:4d:6d:e4:67:
68:05:83:33:dd:a8:6d:38:d9:83:ce:fa:22:bf:69:
72:2a:ea:11:f8:a4:35:24:fd:ef:6f:3b:10:cb:e4:
9a:6c:89:2c:b7:85:df:bf:f7:17:8d:dd:7b:5a:cb:
a3:0e:97:e4:40:7f:3b:2f:36:dd:fe:37:fd:b5:43:
5f:96:a8:16:a2:e4:d2:6c:4b:19:6f:c7:16:3d:4d:
94:5b:8d:36:e5:57:33:e4:81:83:74:dd:1c:ff:65:
a5:26:64:4a:31:a5:e6:2b:84:bc:50:f3:d2:3e:6e:
18:c5:85:83:10:19:96:b6:d7:32:99:7e:50:0d:f0:
86:42:5f:8d:3c:ea:c1:0d:28:08:eb:a9:43:93:a3:
36:bf:44:97:f6:87:81:ef:2e:8a:29:f4:b5:e2:c2:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:21:20:B7:AF:94:14:80:80:47:56:F3:34:6A:5A:05:11:6C:57
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:8a20:130::/48
Signature Algorithm: sha256WithRSAEncryption
63:5b:97:d8:0d:0e:b2:02:c5:84:9e:b2:f3:4f:e4:f1:9f:33:
7c:1d:d8:ae:cf:34:75:f1:53:15:95:a7:65:99:06:76:7a:6a:
06:6c:b1:5a:43:f1:28:55:df:ff:f3:92:1c:f1:42:cc:eb:65:
23:82:10:2c:10:57:d0:ff:6d:82:39:b3:45:ad:94:1e:13:af:
77:cb:f0:65:da:35:17:f6:94:32:ba:4e:6e:de:06:2f:40:45:
cb:98:b9:8e:7f:25:d9:d1:f4:80:ef:3e:b4:97:fe:e6:3a:14:
cb:3f:62:6e:5e:9c:01:ef:8a:4f:12:02:93:d5:95:5e:e1:44:
3d:e7:30:c5:bb:07:e5:25:cb:bb:cd:46:ca:2c:c5:c9:a5:6a:
27:28:14:0f:cf:f4:47:b0:d8:1e:11:79:69:fa:c9:2f:c4:c0:
d8:0b:97:4e:cb:0b:b8:a7:30:8e:a3:82:50:55:7c:f1:a0:53:
49:2e:2c:8f:c2:0a:74:fd:cb:92:9e:d5:95:c1:9b:29:e0:01:
3d:4d:e1:22:78:09:81:11:2f:30:99:cf:e8:29:0c:c2:9d:2d:
5b:3a:bf:68:2a:75:a7:7b:42:97:70:37:04:c5:3e:bc:0f:f7:
79:7b:e9:24:2d:3f:f7:22:3f:51:48:90:73:da:f4:2a:b5:db:
c3:99:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:55:49 2025 by rpki-client