Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F34FF6B69C3B11EABC59DA11C4F9AE02.roa
File: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (raw, json)
Hash identifier: MolD5bumMcf6jScQ4RC9hIXMaBQfB4E5sD8Ir6nVXrw=
Subject key identifier: B5:E1:A1:87:99:8D:B4:54:07:89:7B:B2:D7:BF:FA:35:42:4C:2A:54
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 1025
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F34FF6B69C3B11EABC59DA11C4F9AE02.roa
Signing time: Wed 12 Feb 2025 18:06:06 +0000
ROA not before: Wed 12 Feb 2025 18:06:06 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138586
IP address blocks: 2404:9ec0:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4133 (0x1025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C
Validity
Not Before: Feb 12 18:06:06 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ace30e-3544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:16:33:bf:85:a5:02:59:86:fc:6a:bf:60:
0c:85:ff:51:4c:6a:a5:e6:8d:9d:27:58:1c:2b:33:
c5:17:d1:d2:63:35:a7:26:e0:62:bc:89:3e:d9:51:
da:e7:c6:9b:b0:10:a8:bb:f3:ba:20:a8:7d:a1:43:
7c:aa:00:33:c2:ef:77:8c:86:0f:f2:b5:58:f4:23:
56:95:37:66:15:e4:79:1f:fc:ce:81:b0:f1:d3:24:
a3:6e:f0:06:89:74:81:88:4d:97:b4:89:f0:85:5f:
ec:b5:e2:95:02:f3:55:93:e6:97:02:0d:52:84:22:
6d:1f:be:ca:ae:ef:e5:c6:f7:02:ec:b4:ed:6a:65:
c8:5f:6d:0f:3e:70:83:13:82:0f:2f:95:d2:37:47:
06:a0:49:7b:97:9f:1e:fc:00:2a:6c:9c:6c:07:af:
ae:2e:1f:ad:21:bd:e4:2e:16:d1:ef:30:58:1e:2b:
3e:69:70:b9:cc:41:51:55:c2:11:30:0e:d6:19:05:
63:37:a0:65:7f:81:c6:06:84:39:b1:b0:30:86:17:
a2:99:22:02:1b:6c:33:96:ce:84:7a:35:e2:b7:69:
4a:e3:6d:63:4a:72:d6:2f:97:71:c7:6d:26:7e:3c:
98:63:42:f8:cb:00:eb:92:cb:40:62:36:5e:88:09:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:A1:87:99:8D:B4:54:07:89:7B:B2:D7:BF:FA:35:42:4C:2A:54
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F34FF6B69C3B11EABC59DA11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:9ec0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
27:ff:db:c9:b1:01:b4:32:12:f4:44:fa:82:26:bf:a0:9d:ed:
99:cd:f7:c4:a3:f1:be:c2:82:81:57:03:1c:52:b1:db:be:01:
03:75:e7:38:99:63:4c:e7:3f:a8:70:d2:64:69:82:8c:af:fb:
52:ca:0b:e8:c8:e3:24:3c:4d:27:40:e5:5f:88:dc:a6:9e:69:
24:ee:30:4d:c4:10:65:6e:63:b1:ec:87:e2:5f:37:e3:66:48:
91:83:cf:a4:96:e2:b2:ed:0a:d0:c0:ce:9a:e6:df:52:3d:68:
20:dc:c3:71:03:72:0b:1b:8b:8e:45:1b:bb:79:05:ce:6d:0c:
0d:3c:ee:95:19:7e:56:b9:c2:c5:0d:15:a0:db:6c:c1:47:5e:
55:40:dc:41:82:6d:14:f3:82:51:d8:32:76:23:fc:f4:8a:73:
91:b4:78:f4:db:18:3f:31:ed:bd:30:8f:43:f5:ef:73:f6:62:
49:50:b3:ff:9a:90:46:ac:99:51:6b:52:6b:08:0e:5b:62:b7:
ca:5d:d0:b4:6c:57:2a:43:a1:34:77:35:d1:d6:e6:13:33:c3:
5a:47:96:5c:00:2c:a3:67:60:1d:0b:0e:5a:1c:74:ca:6f:5b:
51:87:1e:15:4c:10:98:ac:b5:e0:bf:f5:c4:91:45:14:cf:28:
ce:da:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:17:51 2025 by rpki-client