Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa
File: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (raw, json)
Hash identifier: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I=
Subject key identifier: 61:67:76:BF:17:90:C4:B5:BB:76:67:34:99:AA:FE:13:E4:53:89:75
Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Certificate serial: 02
Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa
Signing time: Thu 09 Jan 2025 12:55:43 +0000
ROA not before: Thu 09 Jan 2025 12:55:43 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 153495
IP address blocks: 2401:e7e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E
Validity
Not Before: Jan 9 12:55:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677fc74f-e5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:10:8c:de:72:bb:3e:86:14:99:2b:30:80:
5f:ca:3b:ba:2c:6a:92:a7:40:c9:a2:4c:af:ee:1f:
09:93:81:b2:5f:59:a6:28:c6:64:f9:ce:94:3f:0f:
80:76:03:03:cc:eb:99:1e:1d:16:56:8a:80:31:8e:
4a:99:21:11:45:3c:a1:23:62:9d:5f:a2:cc:12:d3:
d9:ba:b3:ed:e3:47:31:bc:77:80:da:2f:cc:8a:d2:
15:1d:04:83:27:30:61:ef:66:c6:56:5b:73:5e:62:
2f:34:9b:19:c6:e5:3f:90:6b:73:bc:8c:b0:3f:42:
90:9a:f0:0c:54:14:fc:e0:02:5b:1a:50:7f:1a:58:
cb:eb:96:07:16:9c:7f:1b:72:e6:8f:1b:61:94:40:
8e:5d:ed:d0:fa:ca:df:27:57:09:d9:66:82:45:4c:
1b:12:c1:fb:76:f8:6a:2c:df:46:c5:e8:10:99:b8:
2a:d8:a8:a7:3d:18:b0:11:d2:67:d3:8d:5d:68:51:
f6:d8:c6:d3:f0:33:1f:fb:6a:d1:17:b9:6d:5b:2d:
29:4f:92:bf:97:a0:db:6f:d5:74:37:a6:3d:65:49:
03:4b:93:8f:1f:74:57:4f:a0:af:90:5d:1e:8c:8c:
6a:75:c0:b7:7b:b5:20:32:16:80:38:a1:9c:f8:70:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:76:BF:17:90:C4:B5:BB:76:67:34:99:AA:FE:13:E4:53:89:75
X509v3 Authority Key Identifier:
keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e7e0::/32
Signature Algorithm: sha256WithRSAEncryption
72:a1:85:8b:cb:eb:5b:1b:6d:af:7d:e4:b5:6f:4c:8e:bb:4b:
79:13:bf:fe:5a:96:01:43:7f:5d:f9:75:f0:46:bb:e3:83:b1:
0c:4f:df:91:08:41:e1:0c:b3:54:be:1a:f1:f5:91:f4:79:3b:
e7:2a:14:2c:df:96:9d:76:7b:e9:3b:ef:b7:29:34:5a:19:d6:
ca:f4:c2:97:57:2f:af:ab:5d:d3:df:69:0d:d3:eb:82:a5:26:
ce:21:44:28:57:ca:24:9b:29:73:de:23:4d:64:d1:d1:ee:37:
0d:b6:b9:06:8d:86:cb:25:84:46:01:34:b2:a7:4c:ad:06:63:
d3:5c:ae:2f:ed:88:9a:26:3e:81:a3:cd:33:80:67:f7:66:e2:
be:39:59:3d:52:43:50:a5:bc:65:95:37:02:10:ac:0e:63:50:
b8:6c:b8:42:e0:ce:6f:06:f7:16:89:e9:1d:ce:a9:24:36:72:
ac:89:b0:6e:76:af:84:51:3e:59:a0:51:b5:40:70:b3:4a:00:
7a:66:a5:8f:b6:a2:70:dd:31:4c:a2:93:8d:aa:83:62:50:92:
ca:1e:48:2f:54:97:55:dd:d8:1c:5e:72:1f:a2:7e:83:ff:8f:
da:c4:b8:86:bd:30:b5:13:54:ef:80:2b:0d:51:5f:6f:17:b6:
be:1e:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:34:33 2025 by rpki-client