Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/F51067B4C65D11EF84CD2E17C4F9AE02.roa
File: F51067B4C65D11EF84CD2E17C4F9AE02.roa (raw, json)
Hash identifier: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=
Subject key identifier: AE:52:32:AB:5F:A4:27:98:35:8A:65:3C:F2:AA:7B:8D:F3:A4:D3:24
Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
Certificate serial: 2F
Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/F51067B4C65D11EF84CD2E17C4F9AE02.roa
Signing time: Mon 30 Dec 2024 03:27:12 +0000
ROA not before: Mon 30 Dec 2024 03:27:12 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153183
IP address blocks: 2401:b660::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91336DF
Validity
Not Before: Dec 30 03:27:12 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6772130f-6f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:9f:47:da:a1:6b:54:95:78:c2:63:75:ca:
7d:fc:dc:7c:bf:a4:9e:ee:4f:32:4d:30:14:fa:17:
65:f7:7c:55:7e:73:f3:de:ad:8e:0b:68:4a:bf:03:
68:90:ce:fa:23:05:a3:e6:57:78:99:74:a8:21:da:
76:0a:19:fb:aa:98:5e:76:86:c1:10:95:6b:86:dd:
aa:eb:97:9f:05:8c:5a:26:39:21:c8:90:c4:76:89:
c8:71:91:c7:18:96:71:8a:b2:8a:d3:56:63:f5:86:
47:3b:11:cb:64:dc:8b:de:23:17:14:42:97:68:ca:
9f:2f:d5:ef:00:b1:e3:cf:1b:02:b2:c0:32:a2:20:
46:49:a3:35:bf:b4:b3:68:8b:2e:71:6a:90:27:7c:
89:2d:73:08:23:00:20:2a:69:4a:d2:78:e7:bd:2b:
ac:fd:79:d0:0f:e3:8f:02:2a:81:97:bc:6d:11:27:
8c:46:23:c1:bc:5c:0f:67:c0:24:68:38:93:e6:3d:
7c:86:c8:83:bf:f9:a9:9c:32:86:ac:2b:0e:c5:d9:
27:ee:5f:38:ef:69:a5:53:3d:79:9b:ab:0d:a0:67:
2b:d0:8c:12:05:52:22:20:06:ea:18:ae:f3:ac:e1:
d7:6b:d1:37:b2:c5:f4:81:3b:c7:ab:35:5d:b8:e7:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:32:AB:5F:A4:27:98:35:8A:65:3C:F2:AA:7B:8D:F3:A4:D3:24
X509v3 Authority Key Identifier:
keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/F51067B4C65D11EF84CD2E17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b660::/32
Signature Algorithm: sha256WithRSAEncryption
bb:be:37:4c:b9:38:6a:4f:b8:1e:fa:0c:06:87:74:af:0f:cd:
9a:25:3f:77:1e:d3:dc:87:c8:ea:bf:c8:42:05:9d:b3:65:20:
ef:98:a2:c7:df:91:bf:c8:f7:06:63:a7:bd:ec:3a:87:ad:d8:
90:6c:c5:82:7b:9d:ec:20:b2:78:35:a1:d5:ef:c3:c6:84:e9:
5b:d7:5d:23:15:55:fe:53:3d:c3:06:36:62:25:20:7b:14:e3:
20:20:47:88:6f:d7:86:0f:10:b0:1e:46:dd:ab:2c:5f:d2:d6:
18:ff:8a:97:4c:28:61:a1:c7:8f:e1:dd:11:5c:29:7c:dd:b7:
19:84:32:31:1c:d2:30:bd:1b:4d:00:74:3c:04:bd:d8:ea:21:
dd:e2:d2:c3:42:9c:59:44:63:8f:22:a7:9e:c5:6c:d3:0b:af:
b3:6a:a1:01:f6:4b:27:e7:8a:59:15:98:90:fb:bc:5a:3c:96:
3b:bc:f9:57:d3:a8:52:24:fe:01:b2:06:11:0e:24:7f:4f:4a:
33:b2:35:6d:31:5e:94:5d:17:23:cd:76:ed:f2:1d:7d:7d:b5:
6a:20:b9:5a:bd:ef:6c:7e:09:d2:e6:81:4f:fd:1d:a2:a9:8b:
d5:68:f1:15:04:ab:40:6c:28:54:e1:e1:e3:08:44:59:ab:9f:
18:74:9a:9e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MzZERjExMC8GA1UEBRMoNjRGMjFDREU2NDhCMzlCNTI4MkI4Q0IxMjc5MjhFMjMz
MjQ4ODI5NDAeFw0yNDEyMzAwMzI3MTJaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NzIxMzBmLTZmNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzyp9H2qFrVJV4wmN1yn383Hy/pJ7uTzJNMBT6F2X3fFV+c/PerY4LaEq/A2iQ
zvojBaPmV3iZdKgh2nYKGfuqmF52hsEQlWuG3arrl58FjFomOSHIkMR2ichxkccY
lnGKsorTVmP1hkc7Ectk3IveIxcUQpdoyp8v1e8AsePPGwKywDKiIEZJozW/tLNo
iy5xapAnfIktcwgjACAqaUrSeOe9K6z9edAP448CKoGXvG0RJ4xGI8G8XA9nwCRo
OJPmPXyGyIO/+amcMoasKw7F2SfuXzjvaaVTPXmbqw2gZyvQjBIFUiIgBuoYrvOs
4ddr0TeyxfSBO8erNV2458ptAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUrlIyq1+k
J5g1imU88qp7jfOk0yQwHwYDVR0jBBgwFoAUZPIc3mSLObUoK4yxJ5KOIzJIgpQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzNkRGLzIzMTg0MDhDODEz
RjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdw
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWlBJYzNtU0xPYlVvSzR5eEo1S09JekpJZ3BRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9GNTEwNjdCNEM2
NUQxMUVGODRDRDJFMTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACQBtmAwDQYJKoZIhvcNAQELBQADggEBALu+N0y5OGpPuB76
DAaHdK8PzZolP3ce09yHyOq/yEIFnbNlIO+Yosffkb/I9wZjp73sOoet2JBsxYJ7
newgsng1odXvw8aE6VvXXSMVVf5TPcMGNmIlIHsU4yAgR4hv14YPELAeRt2rLF/S
1hj/ipdMKGGhx4/h3RFcKXzdtxmEMjEc0jC9G00AdDwEvdjqId3i0sNCnFlEY48i
p57FbNMLr7NqoQH2SyfnilkVmJD7vFo8lju8+VfTqFIk/gGyBhEOJH9PSjOyNW0x
XpRdFyPNdu3yHX19tWoguVq972x+CdLmgU/9HaKpi9Vo8RUEq0BsKFTh4eMIRFmr
nxh0mp4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:39 2025 by rpki-client