Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa
File: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (raw, json)
Hash identifier: JbXYoZCeV73k0ydVhueXLAHh7xzomEgWbLFpEGgJxiE=
Subject key identifier: BE:18:B0:6F:7C:0D:A3:DC:49:AA:9B:EF:40:47:BE:DA:81:EF:0F:27
Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Certificate serial: CA
Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa
Signing time: Fri 07 Mar 2025 04:51:49 +0000
ROA not before: Fri 07 Mar 2025 04:51:49 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152332
IP address blocks: 2401:76e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82
Validity
Not Before: Mar 7 04:51:49 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ca7b64-715d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6f:f5:46:e8:5e:5c:9c:b9:5e:13:96:65:b2:
4c:08:5d:fa:d3:f3:06:e1:e0:0c:18:87:9a:a8:f1:
3d:d5:8a:05:a8:26:10:67:88:c1:86:d4:74:af:a0:
fd:fe:03:e1:71:26:15:7b:7b:7b:ec:f6:25:cf:15:
26:4a:fd:ed:e3:0f:c6:d3:95:68:6e:7c:32:98:99:
c2:dc:59:cc:8e:84:9c:0d:05:a7:c6:a7:56:1d:aa:
e3:84:19:ff:ec:e1:51:7a:49:ee:e2:8b:04:94:87:
63:ee:dc:2b:29:1b:fd:c3:37:45:79:78:00:3c:9b:
6c:c3:db:29:f4:93:b0:f6:ce:04:ea:1b:b5:f9:a5:
71:47:70:4b:41:b0:f3:4a:16:4c:7b:fd:1e:11:7e:
55:27:5a:01:2c:8c:cc:87:58:e6:88:f6:09:58:bd:
c7:5d:df:cd:70:17:7d:fe:f0:e2:97:d7:34:08:2c:
c5:be:4f:71:3b:ac:bb:4b:dd:fc:0d:84:f2:1c:cd:
78:3f:ea:6b:9a:77:79:a5:07:1f:ed:83:4e:1f:3c:
80:03:68:fb:2e:e2:e1:f7:cc:38:b7:ae:40:ed:13:
df:8c:37:c2:ac:6c:f3:85:4f:97:f9:4f:63:5b:c9:
f6:4c:af:a0:70:c3:58:f5:c1:cc:c6:07:5c:6c:f0:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:B0:6F:7C:0D:A3:DC:49:AA:9B:EF:40:47:BE:DA:81:EF:0F:27
X509v3 Authority Key Identifier:
keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:76e0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:49:63:93:5f:3c:b5:32:7b:62:b1:4c:75:24:f5:b4:18:b8:
b2:18:41:ba:20:5a:7f:5b:f1:01:97:76:c1:be:c1:4e:6c:43:
04:03:89:69:99:78:6e:c8:e4:f8:2d:60:03:c6:5e:f3:e6:e1:
f0:19:2a:d9:9b:8b:5e:ec:6d:b3:46:80:5c:6f:65:1d:3e:3c:
02:b6:57:72:3d:be:66:eb:b1:cc:68:6e:21:71:69:fe:d0:a8:
e4:7e:24:e5:59:b2:d5:5e:96:79:22:a1:a0:7c:28:82:6d:d3:
43:b9:3b:a8:e9:a1:38:c3:9a:cd:fc:db:58:ea:6d:f5:b6:62:
70:2a:e5:63:7c:0b:7b:62:5a:9d:8f:66:fc:23:c6:d0:a4:38:
76:33:54:d3:25:45:be:82:f8:b6:44:14:0f:60:7b:82:32:ee:
77:12:25:92:da:a2:84:2f:10:2b:a1:4f:1e:11:9c:e7:c3:30:
5e:c0:1b:ae:a5:38:1b:c3:69:ed:55:30:f7:93:6e:fd:d7:17:
b7:63:b7:8b:72:9d:51:46:d2:c4:f4:20:81:f2:8a:c2:97:98:
84:38:53:44:42:04:6d:50:97:66:7b:9f:71:58:52:6b:22:49:
71:c0:cd:ca:fb:48:3b:1d:59:b5:23:47:83:67:66:9e:9a:79:
d6:c5:27:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:24:50 2025 by rpki-client