Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa
File: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (raw, json)
Hash identifier: pXIC9lifhNka63uxRfDrQycVb+TaKUuZE602Ci63ILU=
Subject key identifier: 4D:09:7A:12:B1:BB:0A:5B:60:21:0B:8F:0F:44:E3:0B:C2:7C:3F:F8
Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial: 04
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa
Signing time: Fri 24 Jan 2025 08:24:17 +0000
ROA not before: Fri 24 Jan 2025 08:24:17 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2401:c2e0::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913059E
Validity
Not Before: Jan 24 08:24:17 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67934e31-8552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:9c:28:94:2c:6e:1b:76:16:c5:b2:0b:31:
b4:a2:58:dd:b5:22:5f:b4:df:d3:57:36:73:10:6a:
50:c1:45:d1:a2:98:78:55:1e:4d:f0:0f:22:dd:74:
fe:1e:8d:0d:b0:d6:e3:87:d1:e9:59:19:5a:c9:7f:
da:f7:49:36:76:e1:db:d8:00:8f:71:9c:fe:26:13:
dd:b7:62:37:ce:b7:68:c9:82:6d:7e:03:49:ce:17:
77:99:8b:13:4e:e1:6e:79:8e:b5:5f:1e:12:1c:9c:
a1:cf:1d:99:e2:c5:5b:11:aa:d4:fe:f7:27:b5:c5:
12:b4:7f:d4:a1:4e:c0:fa:d2:9f:67:8f:38:53:79:
57:76:87:97:5a:81:7b:76:1f:5b:8b:11:25:e7:95:
05:24:92:f5:cc:d4:13:c9:10:eb:60:36:a7:89:c7:
82:b1:b8:4e:5b:46:87:bd:85:8a:de:4a:8b:ef:e0:
e7:78:1b:85:87:0a:81:be:7e:7b:c8:a1:8f:fd:08:
1a:bf:53:b5:30:92:ec:64:29:cf:68:10:01:38:39:
ed:75:73:ec:5b:d1:ba:c8:2d:5a:ed:92:bf:61:31:
22:30:63:fe:6e:bd:96:d7:2b:03:7a:ab:dc:ff:25:
50:5f:7b:93:f3:4d:d8:2c:d1:a1:fe:6f:5d:64:7f:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:7A:12:B1:BB:0A:5B:60:21:0B:8F:0F:44:E3:0B:C2:7C:3F:F8
X509v3 Authority Key Identifier:
keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:c2e0::/40
Signature Algorithm: sha256WithRSAEncryption
a3:5c:d3:bc:00:3a:c4:9d:c9:24:0f:31:33:03:cc:fc:62:10:
12:07:15:4b:47:cb:ee:f8:ca:01:9b:b5:23:31:a3:37:30:bb:
0e:9c:87:4d:01:e6:e0:2a:22:80:b7:ea:14:a7:70:60:74:88:
37:90:72:b8:d4:cb:bf:be:4a:a0:00:6a:b7:93:3d:36:bb:74:
94:17:cb:0d:14:0b:5f:4d:e5:66:35:79:cc:c5:bf:6b:34:83:
4a:17:8e:54:51:7a:a9:a8:ed:44:76:18:f2:85:15:11:d1:21:
c0:05:b3:1f:fc:07:f7:e0:e0:21:1d:e6:00:5d:5c:b8:b5:6a:
e8:a4:70:e3:63:a3:06:3c:32:27:e9:c8:44:64:9d:c8:9d:e1:
2f:72:ba:aa:d6:26:b3:dd:4b:9d:97:b1:03:c4:63:55:b3:bc:
86:e7:97:b8:e4:03:f3:f9:15:f8:ce:bb:20:28:a5:6b:95:de:
2d:2d:95:52:f7:32:6c:e6:43:c3:05:b5:a3:43:21:2a:07:76:
9f:01:74:1b:82:5a:4d:af:fa:d6:9d:90:96:16:fa:50:a8:54:
78:6b:ee:32:c3:d2:b9:73:b0:be:10:a4:1c:0e:22:c0:e8:df:
f9:3d:ca:5f:43:a1:ce:ae:f0:55:0b:30:53:95:3d:0a:3e:44:
a6:42:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:31 2025 by rpki-client