Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa
File: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (raw, json)
Hash identifier: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=
Subject key identifier: 50:B7:63:8E:C6:22:09:F7:00:81:A7:DA:A0:68:86:B1:3D:6E:C1:1B
Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Certificate serial: 02
Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa
Signing time: Fri 22 Nov 2024 05:26:22 +0000
ROA not before: Fri 22 Nov 2024 05:26:22 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 142031
IP address blocks: 2001:df4:a7c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137627
Validity
Not Before: Nov 22 05:26:22 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674015fd-4c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:3f:66:bf:24:1c:2a:76:a5:b5:a0:0b:59:
37:b6:6e:38:b8:52:a8:46:4e:a3:ef:a3:10:8a:8f:
20:89:f6:d3:46:86:10:28:91:41:dd:39:c7:1f:52:
9b:e2:05:1d:4b:21:95:8e:9f:d9:bf:08:83:6f:4f:
9b:bf:87:c1:fb:ed:98:c4:72:5c:f2:48:45:8d:8a:
ea:fb:26:dc:aa:80:ad:f9:54:24:b8:d2:3e:04:fe:
d0:ab:1e:85:5e:42:cc:bb:62:0d:1e:e6:31:7b:cf:
4b:f1:36:67:78:1e:37:42:43:71:30:4c:b1:d9:f2:
93:5c:34:8f:f4:73:03:77:85:d6:31:c5:6e:dd:37:
4a:77:7a:53:d8:a8:2f:cb:3e:be:be:1b:74:97:46:
5e:fb:71:29:a8:ba:6c:a4:da:4f:b0:24:5c:5d:31:
03:3a:f7:b2:22:c6:ff:57:48:ee:25:ab:27:f1:39:
73:9a:fc:b8:6e:29:bf:20:bd:4c:67:93:af:90:cf:
3a:19:3a:b3:7b:5a:9c:91:b3:b4:52:a3:ca:7a:75:
0b:ff:f6:7f:1b:3b:86:39:86:d7:e8:9f:e9:c4:59:
c0:e0:6c:42:27:44:a0:bb:96:39:86:75:9d:d5:5b:
04:75:b5:41:8a:0c:7f:ca:d6:36:98:15:cf:02:bd:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B7:63:8E:C6:22:09:F7:00:81:A7:DA:A0:68:86:B1:3D:6E:C1:1B
X509v3 Authority Key Identifier:
keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a7c0::/48
Signature Algorithm: sha256WithRSAEncryption
d1:e0:00:ea:92:47:a2:b5:30:70:fa:5b:79:57:98:e0:90:8e:
76:4c:c6:51:60:57:ba:88:cd:6c:15:c4:69:05:01:1d:ac:42:
fd:03:92:be:0e:5c:8a:8e:2e:83:67:c8:bf:47:74:4b:2a:77:
c0:1a:7e:ae:fc:2c:a7:85:6f:60:28:85:fa:f4:14:df:1b:87:
76:7c:bf:31:7d:66:60:41:2a:1e:81:10:7c:0d:f8:36:79:33:
32:d3:85:30:c2:b4:f8:96:16:c6:ba:31:e6:a0:85:56:3f:9a:
1d:2d:9b:8a:a8:c7:69:9a:80:34:5c:c5:c3:cb:95:2a:8b:6f:
03:e4:80:13:bf:29:16:38:06:8a:5c:22:cd:75:05:6c:62:08:
ac:a2:a5:99:27:78:65:4c:c8:2d:2a:e4:4b:93:35:f8:99:40:
d2:3a:06:e1:e0:d1:76:21:5b:32:b8:8e:91:51:37:d7:f6:a0:
55:11:70:67:d1:ef:bf:50:a1:74:c2:78:a5:d5:27:ad:aa:1a:
3a:4e:2f:a4:fe:ed:a0:09:a7:19:3f:d3:69:a8:38:8e:9b:b7:
c7:48:41:2f:2e:0d:cb:43:ea:fa:67:7c:94:b3:a7:21:af:cb:
83:fd:ab:61:7d:62:f5:da:a3:a5:5e:21:25:7f:43:34:4d:66:
3d:12:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:19 2025 by rpki-client